Struct EncryptionService 

pub struct EncryptionService;

Encryption service for tenant data at rest

Provides AES-256-GCM encryption with tenant-specific keys. Each encryption operation uses a unique randomly-generated nonce.

Implementations

impl EncryptionService

pub fn new() -> Self

Create a new encryption service

pub fn encrypt( &self, plaintext: &[u8], tenant_ctx: &TenantContext, ) -> Result<EncryptedData>

Encrypt data using the tenant’s encryption key

Example

use corteq::encryption::EncryptionService;
use corteq::TenantContext;
use uuid::Uuid;

let tenant_ctx = TenantContext::new(
    Uuid::new_v4(),
    "acme-corp".to_string(),
    "encryption-key-32-bytes-long!".to_string(),
);

let service = EncryptionService::new();
let plaintext = b"Sensitive customer data";

let encrypted = service.encrypt(plaintext, &tenant_ctx)
    .expect("Encryption failed");

pub fn decrypt( &self, encrypted: &EncryptedData, tenant_ctx: &TenantContext, ) -> Result<Vec<u8>>

Decrypt data using the tenant’s encryption key

Returns an error if:

• The data has been tampered with (authentication tag mismatch)
• The wrong encryption key is used
• The nonce is invalid

Trait Implementations

impl Clone for EncryptionService

fn clone(&self) -> EncryptionService

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncryptionService

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for EncryptionService

fn default() -> Self

Returns the “default value” for a type.