key-vault 1.0.0

Enterprise-grade key management vault for Rust. 9-layer defense-in-depth: fragmentation, decoy bytes, codex transform, mlock + zeroize, constant-time ops, security monitoring. Pluggable key fetchers (TPM, keychain, file, env). Sub-microsecond access. REPS-compliant.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

//! [`NoAudit`] — the inert default audit sink.

use super::{AuditEvent, AuditSink};

/// `AuditSink` implementation that discards every event.
///
/// This is the vault's default; constructing a `KeyVault` without
/// calling [`KeyVaultBuilder::with_audit_sink`](crate::KeyVaultBuilder::with_audit_sink)
/// leaves the audit trail unrouted. Events are still constructed by the
/// vault and passed through this sink — the cost is one struct
/// construction + one virtual call per operation, both negligible.
///
/// Use this explicitly when you want to make "no audit configured" a
/// load-bearing part of your vault setup.
///
/// # Examples
///
/// ```
/// use key_vault::{KeyVaultBuilder, NoAudit};
///
/// let _vault = KeyVaultBuilder::new()
///     .with_audit_sink(NoAudit)
///     .build();
/// ```
#[derive(Debug, Default, Clone, Copy)]
pub struct NoAudit;

impl AuditSink for NoAudit {
    #[inline]
    fn on_event(&self, _event: &AuditEvent) {}

    #[inline]
    fn is_no_op(&self) -> bool {
        true
    }
}