Struct RecoverySecret 

pub struct RecoverySecret { /* private fields */ }

Recovery secret for archive unlock.

Contains high-entropy random bytes that can be used to derive a key encryption key (KEK) via HKDF-SHA256.

Implementations

impl RecoverySecret

pub fn generate() -> Self

Generate a new random recovery secret.

Uses the system’s cryptographically secure random number generator.

pub fn from_bytes(bytes: Vec<u8>) -> Option<Self>

Create a recovery secret from existing bytes.

Returns None if the bytes are too short (< 24 bytes / 192 bits). NIST recommends 192+ bits for long-term cryptographic material.

pub fn from_encoded(encoded: &str) -> Result<Self>

Create a recovery secret from a base64url-encoded string.

pub fn as_bytes(&self) -> &[u8]

Get the raw secret bytes for key derivation.

pub fn encoded(&self) -> &str

Get the base64url-encoded secret (for QR code).

pub fn entropy_bits(&self) -> usize

Get the entropy in bits.

Trait Implementations

impl Clone for RecoverySecret

fn clone(&self) -> RecoverySecret

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RecoverySecret

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for RecoverySecret

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.