Struct EnvelopeService 

pub struct EnvelopeService<P>
where
    P: KeyProvider,
{ /* private fields */ }

High-level service responsible for encrypting and decrypting secret records.

Implementations

impl<P> EnvelopeService<P>

where P: KeyProvider,

pub fn new(provider: P, cache: DekCache, algorithm: EncryptionAlgorithm) -> Self

Constructs a new service with the supplied components.

pub fn from_env(provider: P) -> Result<Self>

Builds a service using environment configuration and default cache parameters.

pub fn algorithm(&self) -> EncryptionAlgorithm

Currently configured algorithm.

pub fn cache(&self) -> &DekCache

Borrow the underlying DEK cache.

pub fn cache_mut(&mut self) -> &mut DekCache

Mutable access to the DEK cache.

pub fn encrypt_record( &mut self, meta: SecretMeta, plaintext: &[u8], ) -> Result<SecretRecord>

Encrypts plaintext into a SecretRecord using envelope encryption.

pub fn decrypt_record( &mut self, record: &SecretRecord, ) -> DecryptResult<Vec<u8>>

Decrypts the ciphertext of a SecretRecord.