Struct EncryptedWosBackend 

pub struct EncryptedWosBackend { /* private fields */ }

Tier 3 with transparent encryption: sled-backed storage with AEAD encryption.

All values are encrypted before being written to sled and decrypted on read. Keys remain in plaintext to preserve ordered iteration and range scans.

Implementations

impl EncryptedWosBackend

pub fn open(path: &Path, encryption: EncryptionConfig) -> DbxResult<Self>

Open an encrypted WOS at the given directory path.

pub fn open_temporary(encryption: EncryptionConfig) -> DbxResult<Self>

Open a temporary encrypted WOS (for testing).

pub fn encryption_config(&self) -> &EncryptionConfig

Get a reference to the encryption config.

pub fn rekey(&mut self, new_encryption: EncryptionConfig) -> DbxResult<usize>

Re-key all data with a new encryption config.

Reads all existing data, decrypts with the current key, and re-encrypts with the new key.

Warning

This operation is NOT atomic — if interrupted, some data may be encrypted with the old key and some with the new key. Always checkpoint/backup before re-keying.

Trait Implementations

impl StorageBackend for EncryptedWosBackend

fn insert(&self, table: &str, key: &[u8], value: &[u8]) -> DbxResult<()>

Insert a key-value pair.

fn insert_batch( &self, table: &str, rows: Vec<(Vec<u8>, Vec<u8>)>, ) -> DbxResult<()>

Insert multiple key-value pairs in a batch (optimized).

fn get(&self, table: &str, key: &[u8]) -> DbxResult<Option<Vec<u8>>>

Get a value by key.

fn delete(&self, table: &str, key: &[u8]) -> DbxResult<bool>

Delete a key-value pair.

fn scan<R: RangeBounds<Vec<u8>> + Clone>( &self, table: &str, range: R, ) -> DbxResult<Vec<(Vec<u8>, Vec<u8>)>>

Scan a range of keys.

fn scan_one<R: RangeBounds<Vec<u8>> + Clone>( &self, table: &str, range: R, ) -> DbxResult<Option<(Vec<u8>, Vec<u8>)>>

Scan a single key-value pair in a range (optimized).

fn flush(&self) -> DbxResult<()>

Flush any buffered data to durable storage.

fn count(&self, table: &str) -> DbxResult<usize>

Return the number of keys in the given table.

fn table_names(&self) -> DbxResult<Vec<String>>

Return all table names managed by this backend.