Struct CompiledEncryption 

pub struct CompiledEncryption { /* private fields */ }

Available on crate feature encryption only.

A compiled, validated encryption policy: the derived write key plus every derived read key (write key first).

Implementations

impl CompiledEncryption

pub fn compile(spec: &EncryptionSpec) -> Result<Self, FaucetError>

Validate and compile an EncryptionSpec. Fail-fast: empty key material is a typed config error at load time, never mid-run.

pub fn encrypt(&self, plaintext: &[u8]) -> Vec<u8>

Seal plaintext with the current key under a fresh random nonce.

pub fn encrypt_bound(&self, plaintext: &[u8], context: &[u8]) -> Vec<u8>

encrypt, binding context (the identity of what is sealed — a state key, say) as associated data: the payload opens only through decrypt_bound with the same context, so a sealed file copied over another key’s file no longer decrypts.

pub fn decrypt(&self, data: &[u8]) -> Result<Vec<u8>, FaucetError>

Open a sealed payload, trying the current key and then each previous key. Every failure is a typed error — a wrong key or tampered file must never be silently treated as “no data”. A context-bound payload needs decrypt_bound.

pub fn decrypt_bound( &self, data: &[u8], context: &[u8], ) -> Result<Vec<u8>, FaucetError>

Open a payload sealed by encrypt_bound under context, or a legacy unbound one.

impl CompiledEncryption

pub fn open_line(&self, sealed: &[u8]) -> Result<SealedLine, FaucetError>

Open one sealed line of a per-line sealed file, telling record lines from the header and trailer by the context each was sealed under.

Trait Implementations

impl Debug for CompiledEncryption

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.