Crate corium_crypt 

Cryptographic primitives and key resolution for Corium.

This crate deliberately has no storage or async-runtime dependency. It owns stored encryption formats and secret-key hygiene; callers own where keys and ciphertext live.

Structs

BlobHeader

Parsed metadata from an encrypted blob header.

KeyId

A key identity stored in a manifest or protection-class entity.

SecretKey

Opaque, zeroized 256-bit key material.

StaticKeyring

In-memory keyring for tests and keys loaded from files or environment variables by a higher-level configuration layer.

Enums

CryptError

Failures while encrypting or decrypting stored data.

KeyError

Failures while resolving or wrapping keys.

Constants

BLOB_MAGIC

Magic prefix for an encrypted content-addressed blob.

Traits

Keyring

Resolves key material without coupling Corium to a KMS implementation.

Functions

decrypt_blob

Authenticates and decrypts an encrypted blob.

derive_key

Derives a separate 256-bit key for a domain-specific context.

encrypt_blob

Encrypts a blob deterministically for a given key epoch and plaintext.

parse_blob_header

Parses and validates an encrypted blob’s cleartext header.