base64-ng-derive 1.3.9

dependency-free derive helpers for fixed-size base64-ng byte newtypes
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

<p align="center">
  <b>derive fixed-size redacted Base64 secret newtypes.</b><br>
  Strict decoding, caller-owned buffers, optional integrations, and release-gated evidence.
</p>

<div align="center">
  <a href="https://crates.io/crates/base64-ng">base64-ng crate</a>
  |
  <a href="https://docs.rs/base64-ng-derive">Docs.rs</a>
  |
  <a href="https://github.com/valkyoth/base64-ng/blob/main/docs/PLAN.md">Roadmap</a>
  |
  <a href="https://github.com/valkyoth/base64-ng/blob/main/docs/TRUST.md">Trust Dashboard</a>
  |
  <a href="https://github.com/valkyoth/base64-ng/blob/main/SECURITY.md">Security</a>
</div>

<br>

<p align="center">
  <a href="https://github.com/valkyoth/base64-ng">
    <img src="https://raw.githubusercontent.com/valkyoth/base64-ng/main/.github/images/base64-ng.webp" alt="base64-ng Rust crate overview">
  </a>
</p>

# base64-ng-derive

Dependency-free derive helpers for fixed-size `base64-ng` byte newtypes.

This companion crate keeps the core `base64-ng` package free of proc-macro
dependencies. It supports one deliberately narrow shape:

```rust
use base64_ng_derive::Base64Secret;

#[derive(Base64Secret)]
struct ApiKey([u8; 32]);
```

The generated impls provide:

- `from_base64(&[u8])` and `from_base64_str(&str)` using
  `base64_ng::ct::STANDARD.decode_slice_staged_clear_tail`.
- `encode_base64::<CAP>()` using strict standard padded Base64.
- `as_bytes()`, `as_mut_bytes()`, and `constant_time_eq(&Self)`.
- redacted `Debug`.
- drop-time cleanup through `base64_ng::clear_bytes`.

The macro intentionally does not support named structs, multiple fields,
generic structs, or non-array storage. Use `base64-ng-sanitization` when you
want integration with a dedicated clear-on-drop secret container.