Struct EncryptionOpts 

pub struct EncryptionOpts { /* private fields */ }

EncryptionOpts selects the cipher and key for on-disk encryption. See https://docs.turso.tech/tursodb/encryption Example ciphers: “aegis256”, “aes256gcm”. For 256-bit keys, hexkey is 64 chars.

The key is decoded from hex at construction and held in a fixed-size zeroizing buffer (SensitiveKey) that is wiped when dropped. The constructor borrows the caller’s hex string; the caller stays responsible for wiping its own copy.

Implementations

impl EncryptionOpts

pub fn new(cipher: &str, hexkey: &str) -> Result<Self>

Create encryption options from a cipher name and a hex-encoded key.

The key is copied into zeroizing storage; the borrowed hexkey is left untouched (callers should wipe their own copy, e.g. with zeroize). Returns an error if the hex is malformed or its length does not match the cipher’s key size.

pub fn with_key(cipher: &str, key: SensitiveKey) -> Result<Self>

Create encryption options from a cipher name and an already-decoded key.

pub fn cipher(&self) -> &str

Cipher name.

pub fn key_bytes(&self) -> &[u8]

Borrow the raw key bytes. The bytes remain owned by zeroizing storage.

Trait Implementations

impl Clone for EncryptionOpts

fn clone(&self) -> EncryptionOpts

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncryptionOpts

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.