Struct MasterKey 

pub struct MasterKey { /* private fields */ }

A wrapper around a 32-byte master key that automatically zeroes its memory when dropped.

Use this to hold the master key in memory so it cannot linger after it is no longer needed.

Implementations

impl MasterKey

pub fn new(bytes: [u8; 32]) -> Self

Create a new MasterKey from raw bytes.

pub fn as_bytes(&self) -> &[u8; 32]

Access the raw key bytes (e.g. to pass to HKDF or encryption).

pub fn derive_secret_key(&self, secret_name: &str) -> Result<[u8; 32]>

Derive a per-secret encryption key from this master key.

pub fn derive_hmac_key(&self) -> Result<[u8; 32]>

Derive an HMAC key from this master key.

Trait Implementations

impl Zeroize for MasterKey

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.