Struct EncryptionManager 

pub struct EncryptionManager { /* private fields */ }

Encryption manager for data at rest.

Provides AES-256-GCM encryption for sensitive data. Key is loaded from file, environment variable, or system keyring. When encryption is disabled, encrypt and decrypt are passthrough operations.

Examples

use crawlkit_engine::{EncryptionManager, EncryptionConfig};

let manager = EncryptionManager::default();
assert!(!manager.is_enabled());
// When disabled, encrypt/decrypt are identity operations
let data = b"hello";
assert_eq!(manager.encrypt(data).unwrap(), data);

Implementations

impl EncryptionManager

pub fn new(config: EncryptionConfig) -> Self

Create new encryption manager.

pub fn is_enabled(&self) -> bool

Check if encryption is enabled.

pub fn initialize(&self) -> Result<(), EncryptionError>

Initialize encryption by loading the key.

Errors

Returns error if key cannot be loaded or is invalid.

pub fn encrypt(&self, plaintext: &[u8]) -> Result<Vec<u8>, EncryptionError>

Encrypt data using AES-256-GCM.

Errors

Returns error if encryption fails.

pub fn decrypt(&self, ciphertext: &[u8]) -> Result<Vec<u8>, EncryptionError>

Decrypt data using AES-256-GCM.

Errors

Returns error if decryption fails.

pub fn is_initialized(&self) -> bool

Check if initialized.

pub fn config(&self) -> &EncryptionConfig

Get configuration.

Trait Implementations

impl Default for EncryptionManager

fn default() -> Self

Returns the “default value” for a type.