Enum Encrypted 

pub enum Encrypted {
    SteVec(SteVec<16>),
    Record(EncryptedRecord, Vec<IndexTerm>),
}

Represents an encrypted payload that is ready to be stored.

Variants

SteVec(SteVec<16>)

Record(EncryptedRecord, Vec<IndexTerm>)

Trait Implementations

impl Debug for Encrypted

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Decryptable for Encrypted

fn nonce_override(&self) -> Option<[u8; 12]>

The decrypt path reads this to learn the AEAD nonce for the root ciphertext. A classic EncryptedRecord derives its nonce from the data-key IV, so it returns None and the default IV-derived nonce is used. A SteVec document has no self-contained root record: its root ciphertext is the first sv entry, whose nonce is derived from that entry’s stored selector, not the IV (SteVec::root_nonce). Returning it here lets the shared decrypt path reassemble the root exactly as it was sealed (Err — an empty document with no root entry — degrades to None, and decryption then fails on the missing ciphertext, not here).

fn aad_selector(&self) -> Option<[u8; 16]>

Companion to Self::nonce_override: the root ciphertext is bound to the root entry’s full selector in the AAD, so decryption must supply the same 16 bytes. Classic records add nothing (None).

type Error = EncryptionError

fn into_encrypted_record(self) -> Result<EncryptedRecord, Self::Error>

Convert the record into an EncryptedRecord.

fn keyset_id(&self) -> Option<Uuid>

The keyset ID associated with the record, if any.

fn retrieve_key_payload(&self) -> Result<RetrieveKeyPayload<'_>, Self::Error>

The payload used to retrieve the key for decryption.