Struct EncryptionProcessor 

pub struct EncryptionProcessor { /* private fields */ }

Encryption processor for storage destinations

Encrypts text content when the destination requires encryption (Storage). Streaming destinations receive the original (unencrypted) content.

⚠️ DEVELOPMENT ONLY - NOT FOR PRODUCTION USE ⚠️

This implementation uses a simplified key derivation scheme and lacks:

• Proper HKDF-based key derivation
• KMS integration (AWS KMS, GCP KMS, Azure Key Vault)
• Envelope encryption for large payloads
• Key rotation support
• Audit logging for key access

This processor will panic if enabled when ENACT_PRODUCTION=true.

For production deployments, implement a custom OutputProcessor that integrates with your organization’s key management infrastructure.

Implementations

impl EncryptionProcessor

pub fn new() -> Self

Create a new encryption processor (disabled by default).

See struct-level documentation for development-only usage restrictions.

pub fn with_key(self, key: [u8; 32]) -> Self

Provide a specific encryption key (32 bytes)

pub fn enabled(self) -> Self

Enable encryption

Panics

Panics if ENACT_PRODUCTION environment variable is set to “true”. This processor is for development/testing only and must not be used in production environments.

pub fn is_enabled(&self) -> bool

Check if encryption is enabled

Trait Implementations

impl Default for EncryptionProcessor

fn default() -> Self

Returns the “default value” for a type.

impl OutputProcessor for EncryptionProcessor

fn name(&self) -> &str

Processor name for logging/metrics

fn process<'life0, 'life1, 'async_trait>( &'life0 self, event: StreamEvent, ctx: &'life1 ProtectionContext, ) -> Pin<Box<dyn Future<Output = Result<ProcessedEvent>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Process an event before storage/streaming