dugout 0.1.8

Git-native secrets manager for development teams, written in Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

//! Cryptographic operations.
//!
//! Two backends:
//! - **age** (default): x25519 public-key encryption
//! - **hybrid**: age + cloud KMS (AWS or GCP)
//!
//! Cloud KMS implementations live in `envelope.rs`, `aws.rs`, `gcp.rs`.

use crate::error::Result;

mod age;
mod backend;
pub mod envelope;

#[cfg(feature = "aws")]
pub mod aws;

#[cfg(feature = "gcp")]
pub mod gcp;

pub use age::{parse_recipient, Age};
pub use backend::CipherBackend;
#[allow(unused_imports)]
pub use envelope::{Envelope, KmsProvider};

/// Cryptographic backend trait.
pub trait Cipher {
    type Recipient;
    type Identity;

    fn encrypt(&self, plaintext: &str, recipients: &[Self::Recipient]) -> Result<String>;
    fn decrypt(&self, encrypted: &str, identity: &Self::Identity) -> Result<String>;
    fn name(&self) -> &'static str;
}