Skip to main content

Encryptor

hexz_core::algo::encryption

Trait Encryptor 

Source 
pub trait Encryptor:
    Send
    + Sync
    + Debug {
    // Required methods
    fn encrypt(&self, data: &[u8], block_idx: u64) -> Result<Vec<u8>>;
    fn decrypt(&self, data: &[u8], block_idx: u64) -> Result<Vec<u8>>;

    // Provided methods
    fn encrypt_into(
        &self,
        data: &[u8],
        block_idx: u64,
        out: &mut Vec<u8>,
    ) -> Result<()> { ... }
    fn decrypt_into(
        &self,
        data: &[u8],
        block_idx: u64,
        out: &mut Vec<u8>,
    ) -> Result<()> { ... }
}
Expand description

Pluggable interface for per-block authenticated encryption.

Architectural intent: Abstracts over concrete AEAD algorithms while preserving the requirement that each logical block be independently decryptable and integrity-protected.

Constraints: Implementations must treat block_idx as part of the nonce or associated data so that reordering or duplication can be detected.

Required Methods§

Source

fn encrypt(&self, data: &[u8], block_idx: u64) -> Result<Vec<u8>>

Encrypts and authenticates a logical block.

Architectural intent: Produces a ciphertext that can be stored in the snapshot data region and later verified during reads.

Constraints: block_idx must uniquely identify the block within the snapshot under a given key; reusing indices can break security.

Source

fn decrypt(&self, data: &[u8], block_idx: u64) -> Result<Vec<u8>>

Decrypts and verifies a logical block.

Architectural intent: Recovers the original plaintext or surfaces a hard error if tampering or key mismatch is detected.

Constraints: Callers must pass the same block_idx used on encryption; failures should be treated as fatal for the affected block.

Provided Methods§

Source

fn encrypt_into( &self, data: &[u8], block_idx: u64, out: &mut Vec<u8>, ) -> Result<()>

Encrypts into a caller-provided buffer, enabling buffer reuse.

Default impl: Falls back to encrypt() and copies the result.

Source

fn decrypt_into( &self, data: &[u8], block_idx: u64, out: &mut Vec<u8>, ) -> Result<()>

Decrypts into a caller-provided buffer, enabling buffer reuse.

Default impl: Falls back to decrypt() and copies the result.

Implementors§