Struct EncryptionKey 

pub struct EncryptionKey { /* private fields */ }

Secure encryption key with automatic zeroization

Implementations

impl EncryptionKey

pub fn from_passphrase(passphrase: &str, salt: &[u8]) -> Result<Self, String>

Derive key from passphrase using PBKDF2-HMAC-SHA512

pub fn generate_salt() -> [u8; 16]

Generate a random salt for key derivation

pub fn load(key_file: &Path, passphrase: &str) -> Result<Self, String>

Load key from encrypted key file SECURITY: Verifies passphrase using stored hash (constant-time comparison) SECURITY: Rate limiting prevents brute force attacks

pub fn save(&self, key_file_str: &str, _passphrase: &str) -> Result<(), String>

Save key to encrypted key file SECURITY: Uses atomic write (temp file + rename) to prevent corruption on crash or power loss. Includes verification hash for passphrase validation.

Trait Implementations

impl Drop for EncryptionKey

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.