Struct Kek 

pub struct Kek { /* private fields */ }

Key Encryption Key derived from user password

Implementations

impl Kek

pub fn derive_from_password(password: &str, salt: &[u8]) -> CryptoResult<Self>

Derive a KEK from a password using Argon2id

Uses strong parameters:

• Memory: 64 MB
• Iterations: 3
• Parallelism: 4 threads

pub fn from_bytes(bytes: [u8; 32]) -> Self

Create a KEK directly from raw key bytes (for testing)

pub fn as_bytes(&self) -> &[u8; 32]

Get the raw key bytes (use with caution)

pub fn encrypt_dek(&self, dek: &[u8]) -> CryptoResult<Vec<u8>>

Encrypt a Data Encryption Key (DEK) with this KEK

Returns: (nonce || ciphertext)

pub fn decrypt_dek(&self, encrypted_dek: &[u8]) -> CryptoResult<Vec<u8>>

Decrypt a Data Encryption Key (DEK) with this KEK

Input: (nonce || ciphertext)

Trait Implementations

impl Clone for Kek

fn clone(&self) -> Kek

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Kek

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for Kek

fn drop(&mut self)

Executes the destructor for this type.

impl Zeroize for Kek

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.