Module encrypt 

Encryption engine for pages export.

Implements envelope encryption with:

• Argon2id key derivation for passwords
• HKDF-SHA256 for recovery secrets
• AES-256-GCM authenticated encryption
• Streaming encryption for large files
• Multiple key slots (like LUKS)

Structs

Argon2Params

Argon2 parameters for config.json

DecryptionEngine

Decryption engine

EncryptionConfig

Full config.json structure

EncryptionEngine

Encryption engine for pages export

KeySlot

Key slot in config.json

PayloadMeta

Payload metadata in config.json

SecretKey

Secret key material that zeros on drop

Enums

KdfAlgorithm

KDF algorithm identifier

SlotType

Key slot type

Constants

DEFAULT_CHUNK_SIZE

Default chunk size for streaming encryption (8 MiB)

MAX_CHUNK_SIZE

Maximum chunk size (32 MiB)

Functions

load_config

Load encryption config from directory