envseal 0.3.3

Write-only secret vault with process-level access control — post-agent secret management
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

//! Invariant: all 256 byte values survive encrypt/decrypt.
use crate::common;

#[test]
fn binary_data_roundtrip() {
    let (_dir, vault) = common::temp_vault();
    let binary: Vec<u8> = (0..=255).collect();
    vault.store("binary-secret", &binary, false).unwrap();
    let plaintext = vault.decrypt("binary-secret").unwrap();
    assert_eq!(
        &plaintext[..],
        &binary[..],
        "Fix: all 256 byte values must survive encrypt/decrypt"
    );
}