Struct LogEncryptionKey 

pub struct LogEncryptionKey { /* private fields */ }

A 32-byte master key used to derive per-entry AES-256-GCM keys and nonces.

Implementations

impl LogEncryptionKey

pub fn new(key_bytes: [u8; 32]) -> Self

Create a LogEncryptionKey from a raw 32-byte array.

pub fn from_slice(bytes: &[u8]) -> RaftResult<Self>

Create a LogEncryptionKey from a byte slice.

Errors

Returns RaftError::StorageError when bytes.len() != 32.

pub fn random() -> Self

Generate a random LogEncryptionKey without an external RNG crate.

Entropy comes from four independent std::collections::hash_map::RandomState instances (each OS-seeded) mixed with the current nanosecond timestamp, then stretched to 32 bytes via HKDF-SHA256.