Struct Encrusted

pub struct Encrusted<T>
where
    T: Encrustable + Zeroize,
{ /* private fields */ }

Container struct for encrust, accepting Encrustable + Zeroize types for obfuscation and deobfuscation when needed.

Care should be taken if T has a non-trivial Drop implementation, as T is not dropped until zeroize has been called on it.

Implementations

impl<T> Encrusted<T>

where T: Encrustable + Zeroize,

pub fn new(data: T, seed: u64) -> Self

Accepts Encrustable + Zeroize data and obfuscates it using the provided seed.

pub fn reseed(&mut self, new_seed: u64)

Changes the seed used to obfuscate the underlying data.

pub fn decrust(&mut self) -> Decrusted<'_, T>

Deobfuscates the data contained in Encrusted and returns a Decrusted object that can be used to access and modify the actual data.

Trait Implementations

impl<T> Drop for Encrusted<T>

where T: Encrustable + Zeroize,

fn drop(&mut self)

Encrusted’s drop implementation calls zeroize on the underlying data including the seed to prevent secrets from staying in memory when they are no longer needed.

Note that the data is zeroized prior to being dropped, which may cause problems for the drop implementation of the underlying data.