sealable 0.0.1

Pluggable password-to-sealed-string encryption for secrets
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

use crate::Error;
use zeroize::Zeroizing;

pub trait KeyDerivation {
    const SALT_LEN: usize;
    const KEY_LEN: usize;

    fn generate_salt() -> Vec<u8>;
    fn derive(passphrase: &str, salt: &[u8]) -> Result<Zeroizing<Vec<u8>>, Error>;
}

pub trait Cipher {
    const NONCE_LEN: usize;

    fn generate_nonce() -> Vec<u8>;
    fn encrypt(key: &[u8], nonce: &[u8], plaintext: &[u8]) -> Result<Vec<u8>, Error>;
    fn decrypt(key: &[u8], nonce: &[u8], ciphertext: &[u8]) -> Result<Vec<u8>, Error>;
}

pub trait Codec {
    fn encode(data: &[u8]) -> Result<String, Error>;
    fn decode(encoded: &str) -> Result<Vec<u8>, Error>;
}