Struct EncryptedKey 

pub struct EncryptedKey { /* private fields */ }

A 32-byte cryptographic key stored encrypted in memory using ASCON AEAD (memsecurity).

Cloning is cheap — all clones share the same Arc<EncryptedMem>. Decrypted bytes are returned in a Zeroizing container that wipes memory on drop, minimizing the window where the raw key is exposed.

Implementations

impl EncryptedKey

pub fn new(key: &[u8; 32]) -> Result<Self, Error>

Encrypts key and stores it in secure memory.

Returns an error if the underlying ASCON encryption fails, which typically indicates an out-of-memory or platform security error.

pub fn key(&self) -> Result<Zeroizing<[u8; 32]>, Error>

Decrypts and returns the key in a Zeroizing container.

The returned bytes are automatically wiped from memory when the container is dropped. Returns an error if decryption fails, which indicates memory corruption or tampering.

Trait Implementations

impl Clone for EncryptedKey

fn clone(&self) -> EncryptedKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.