Struct field_encryption::FieldEncryption

pub struct FieldEncryption { /* private fields */ }

FieldEncryption struct. Provides methods to encrypt values matching the input regex to a value matching the output regex (and to decrypt).

Both regular expressions must be finite, i.e. they must contain a bounded number of possible values - so no unbounded expressions such as .* or [0-9]+ are permitted.

Furthermore the number of possible values of the output regex must be equal to, or greater than, the number of possible values of the input regex, i.e. the ‘domain’ of the output regex must be greater than or equal to the ‘domain’ pf the input regex.

Implementations

impl FieldEncryption

pub fn new(
    input_regex: &str,
    output_regex: &str,
    key: &[u8]
) -> Result<Self, Error>

Create a new FieldEncryption instance.

Arguments

• input_regex - the regular expression that describes all inputs
• output_regex - the regular expression that describes all outputs
• key - the encryption key, must be at least 32 bytes

Errors

• InfiniteRegex - if either regex is infinite
• OutputDomainTooSmall - if the domain of the output regex is < domain of the input regex
• InvalidKeyLength - of the encryption key is too small

pub fn encrypt(&self, input: &str) -> Result<String, Error>

Encrypts the supplied input.

Errors

• InvalidInput - if the specified value does not match the input regex

pub fn decrypt(&self, input: &str) -> Result<String, Error>

Decrypts the supplied input.

Errors

• InvalidInput - if the specified value does not match the output regex