Struct EncryptedPeerStorage 

pub struct EncryptedPeerStorage { /* private fields */ }

Storage decorator that decrypts blobs for a peer reading an encrypted database directly.

It sits above the segment cache, so the SSD tier holds ciphertext and its existing digest check is unchanged — a cache directory on a shared host is then no more revealing than the object store it mirrors. Root records pass through: they are cleartext everywhere.

Implementations

impl EncryptedPeerStorage

pub fn new( storage: Arc<dyn PeerStorage>, keys: BTreeMap<u32, SecretKey>, ) -> Self

Wraps peer storage with an unwrapped storage-key snapshot.

The snapshot covers every epoch the manifest carries, because a published index may still name leaves written under an epoch that has since been retired.

Trait Implementations

impl PeerStorage for EncryptedPeerStorage

fn get_blob<'life0, 'life1, 'async_trait>( &'life0 self, id: &'life1 BlobId, ) -> Pin<Box<dyn Future<Output = Result<Option<Vec<u8>>, StoreError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Loads one immutable blob.

fn get_peer_root<'life0, 'life1, 'async_trait>( &'life0 self, name: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<Option<Vec<u8>>, StoreError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Loads one named root record.