Struct HydeContext 

pub struct HydeContext { /* private fields */ }

Main entry point for Hyde operations.

Implementations

impl HydeContext

pub fn with_backend(backend: Box<dyn TeeBackend>) -> Result<Self>

Create a HydeContext with a specific backend. Defaults to SecurityLevel::Paranoid (no caching).

pub fn with_backend_and_security( backend: Box<dyn TeeBackend>, security_level: SecurityLevel, ) -> Result<Self>

Create a HydeContext with a specific backend and security level.

pub fn protect(&mut self, data: &[u8]) -> Result<ProtectedData>

Protect data by generating a Data Key, encrypting, and wrapping. The returned ProtectedData can be serialized and stored anywhere.

pub fn unprotect(&mut self, protected: &ProtectedData) -> Result<Vec<u8>>

Decrypt protected data using the context’s configured security level.

pub fn unprotect_with( &mut self, protected: &ProtectedData, level: SecurityLevel, ) -> Result<Vec<u8>>

Decrypt protected data with a specific security level override.

Useful for one-off escalation to Paranoid on sensitive operations.

pub fn flush_cache(&mut self)

Drop all cached keys and plaintext from memory (triggers zeroize).

pub fn set_security_level(&mut self, level: SecurityLevel)

Change the security level. Flushes the cache.

pub fn security_level(&self) -> SecurityLevel

Returns the current security level.

pub fn backup( &self, protected: &ProtectedData, strategy: &dyn RecoveryStrategy, secret: Option<&[u8]>, ) -> Result<BackupBundle>

Backup protected data using a chosen recovery strategy.

pub fn restore( &self, bundle: &BackupBundle, ciphertext: &[u8], strategy: &dyn RecoveryStrategy, secret: &[u8], ) -> Result<ProtectedData>

Restore protected data from a backup using the matching recovery strategy.