Struct Encryptor 

pub struct Encryptor { /* private fields */ }

Encryption key manager.

Holds the derived AES-256 key in memory for the session duration. The key is derived from the user’s passphrase using Argon2id.

Implementations

impl Encryptor

pub fn from_key(key: [u8; 32]) -> Self

Create an encryptor from a raw 32-byte key.

pub fn from_passphrase( passphrase: &str, salt: &[u8], ) -> Result<Self, EncryptionError>

Derive an encryption key from a passphrase and salt.

Uses Argon2id with default parameters (memory=19 MiB, iterations=2, parallelism=1).

pub fn encrypt(&self, plaintext: &[u8]) -> Result<Vec<u8>, EncryptionError>

Encrypt plaintext. Returns nonce || ciphertext.

Each call generates a fresh 96-bit random nonce, prepended to output.

pub fn decrypt(&self, data: &[u8]) -> Result<Vec<u8>, EncryptionError>

Decrypt data produced by encrypt(). Input format: nonce || ciphertext.

pub fn encrypt_string(&self, plaintext: &str) -> Result<String, EncryptionError>

Encrypt a string, returning base64-encoded ciphertext.

pub fn decrypt_string(&self, encoded: &str) -> Result<String, EncryptionError>

Decrypt a base64-encoded ciphertext back to a string.

pub fn generate_salt() -> [u8; 16]

Generate a random salt for key derivation.

Trait Implementations

impl Clone for Encryptor

fn clone(&self) -> Encryptor

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.