Struct EncryptedData 

pub struct EncryptedData {
    pub key_version: u32,
    pub salt: String,
    pub iv: String,
    pub data: String,
}

Encrypted data blob stored in the metagraph.

This is the stable wire format shared with alknet-storage. The fields are Base64-encoded strings for JSON serialization compatibility.

Compatibility

The Rust EncryptedData is a superset of the TypeScript EncryptedDataSchema from @alkdev/storage. Migration path: re-encrypt TypeScript-encrypted data using the Rust vault with a new key version.

See OQ-20 for the compatibility tracking.

Fields

key_version: u32

Key version for rotation support.

salt: String

Base64-encoded random salt (32 bytes).

Unused for key derivation in v2 (ADR-020). HD derivation at m/74'/2'/0'/0' doesn’t need a salt — the path provides domain separation. The salt is generated randomly and stored for wire-format compatibility with the TypeScript EncryptedDataSchema; it plays no cryptographic role. Key rotation uses version-indexed paths (ADR-021), not a KDF over the salt. The field is retained because the wire format is frozen (ADR-018). See encryption.md → “Salt field” for full rationale.

iv: String

Base64-encoded initialization vector (12 bytes for AES-GCM).

data: String

Base64-encoded ciphertext (AES-256-GCM encrypted, includes auth tag).

Trait Implementations

impl Clone for EncryptedData

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncryptedData

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EncryptedData

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for EncryptedData

impl PartialEq for EncryptedData

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for EncryptedData

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for EncryptedData