Struct SensitiveKey 

pub struct SensitiveKey { /* private fields */ }

A fixed-size, zeroizing container for a database encryption key (DEK).

Supports 128-bit and 256-bit keys (the sizes turso’s ciphers use). The key bytes live in a Zeroizing<[u8; 32]> that is wiped on drop; no ordinary heap copy of the key is made by this type. Constructors borrow the caller’s buffer, so the caller keeps ownership (and wiping responsibility) of its own copy. No particular zeroizing library is required of callers.

Implementations

impl SensitiveKey

pub fn from_hex(hexkey: &str) -> Result<Self, RekeyError>

Decode a hex-encoded key (32 or 64 hex chars) into zeroizing storage.

pub fn from_bytes(key: &[u8]) -> Result<Self, RekeyError>

Copy a raw 16- or 32-byte key into zeroizing storage.

pub fn as_bytes(&self) -> &[u8]

Borrow the raw key bytes.

pub fn len(&self) -> usize

Key length in bytes (16 or 32).

pub fn is_empty(&self) -> bool

Always false; a key is never empty. Present for API completeness.

Trait Implementations

impl Clone for SensitiveKey

fn clone(&self) -> SensitiveKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SensitiveKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.