Struct EncryptingBackend 

pub struct EncryptingBackend<B> { /* private fields */ }

Transparent encryption wrapper around any StorageBackend.

Encrypts segment data before writing and decrypts after reading, using AES-256-GCM via chronix_security::auth::EncryptionService.

Implementations

impl<B> EncryptingBackend<B>

pub fn new(inner: B, encryption: Arc<EncryptionService>) -> Self

Wrap inner backend with transparent encryption.

pub fn inner(&self) -> &B

Returns a reference to the inner (unencrypted) backend.

Trait Implementations

impl<B: Clone> Clone for EncryptingBackend<B>

fn clone(&self) -> EncryptingBackend<B>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<B: Debug> Debug for EncryptingBackend<B>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<B: StorageBackend> StorageBackend for EncryptingBackend<B>

async fn put_segment(&self, path: &SegmentPath, data: &[u8]) -> Result<()>

Write a complete segment file to storage.

async fn get_segment(&self, path: &SegmentPath) -> Result<Vec<u8>>

Read a complete segment file from storage.

async fn get_range( &self, path: &SegmentPath, offset: u64, length: usize, ) -> Result<Vec<u8>>

Read a byte range from a segment file.

async fn delete_segment(&self, path: &SegmentPath) -> Result<()>

Delete a segment file from storage.

async fn list_segments( &self, namespace: &NamespaceId, shard_id: &ShardId, ) -> Result<Vec<SegmentPath>>

List all segment files in a namespace/shard.

async fn exists(&self, path: &SegmentPath) -> Result<bool>

Check whether a segment file exists.