Struct runtime::GuardedVec

pub struct GuardedVec<T: Bytes> { /* fields omitted */ }

A guarded type for protecting variable-length secrets allocated on the heap.

Provides the following features and guarantees:

• Causes segfault upon access without using a borrow.
• Protected using mprotect:
  • Prot::NoAccess - when the box has no current borrows.
  • Prot::ReadOnly - when the box has at least one current immutable borrow.
  • Prot::ReadWrite - when the box has a current mutable borrow (can only have one at a time).
• The allocated memory uses guard pages both proceeding and following the memory. Overflows and large underflows cause immediate termination of the program.
• A canary proceeds the memory location to detect smaller underflows. The program will drop the underlying memory and terminate if detected.
• The Memory is locked with mlock.
• When the memory is freed, munlock is called.
• The memory is zeroed when no longer in use via sodium_free.
• Guarded types can be compared in constant time.
• Guarded types can not be printed using Debug.
• The interior data of a Guarded type may not be Clone. GuardedVec includes serialization which converts the data into a vector before its serialized by serde. Upon deserialization, the data is returned back to a new GuardedVec.

Implementations

impl<T: Bytes> GuardedVec<T>

pub fn new<F>(len: usize, f: F) -> Self where
    F: FnOnce(&mut [T]), 

pub fn try_new<U, E, F>(f: F) -> Result<Self, E> where
    F: FnOnce(&mut [T]) -> Result<U, E>, 

pub fn len(&self) -> usize

pub fn is_empty(&self) -> bool

pub fn size(&self) -> usize

pub fn borrow(&self) -> Ref<'_, T>

pub fn borrow_mut(&mut self) -> RefMut<'_, T>

impl<T: Bytes + Randomized> GuardedVec<T>

pub fn random(len: usize) -> Self

impl<T: Bytes + Zeroed> GuardedVec<T>

pub fn zero(len: usize) -> Self

Trait Implementations

impl<T: Clone + Bytes> Clone for GuardedVec<T>

fn clone(&self) -> GuardedVec<T>

Returns a copy of the value.

pub fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<T: Bytes> Debug for GuardedVec<T>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de, T: Bytes> Deserialize<'de> for GuardedVec<T> where
    T: Deserialize<'de>, 

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error> where
    D: Deserializer<'de>, 

Deserialize this value from the given Serde deserializer.

impl<T: Eq + Bytes> Eq for GuardedVec<T>

impl<T: Bytes + Zeroed> From<&'_ mut [T]> for GuardedVec<T>

fn from(data: &mut [T]) -> Self

Performs the conversion.

impl<T: Bytes + ConstEq> PartialEq<GuardedVec<T>> for GuardedVec<T>

fn eq(&self, rhs: &Self) -> bool

This method tests for self and other values to be equal, and is used by ==.

#[must_use]

pub fn ne(&self, other: &Rhs) -> bool

This method tests for !=.

impl<T: Bytes + Send> Send for GuardedVec<T>

impl<T: Bytes> Serialize for GuardedVec<T> where
    T: Serialize, 

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error> where
    S: Serializer, 

Serialize this value into the given Serde serializer.

impl<T: Bytes> StructuralEq for GuardedVec<T>

impl<T: Bytes + Sync> Sync for GuardedVec<T>