Struct LocalPepper 

pub struct LocalPepper { /* private fields */ }

In-memory pepper provider. Keys live in process memory — use a real KMS for production secrets.

Implementations

impl LocalPepper

pub fn builder() -> LocalPepperBuilder

Starts building a LocalPepper.

pub fn versions(&self) -> Vec<KeyVersion>

Returns the set of key versions held in memory, sorted ascending.

Trait Implementations

impl Debug for LocalPepper

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for LocalPepper

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl Pepper for LocalPepper

fn apply( &self, version: KeyVersion, password: &[u8], ) -> Result<[u8; 32], PepperError>

Computes HMAC-SHA-256(key_at(version), password) and returns the 32-byte tag. Errors if the requested version is not available in this provider.

fn current(&self) -> KeyVersion

Returns the key version to use for new hashes. Older versions remain usable via Pepper::apply for verifying existing hashes; rotation is handled by hsh::api::verify_and_upgrade.