Struct StorageEncryptionLayer 

pub struct StorageEncryptionLayer { /* private fields */ }

Storage encryption layer providing XOR-based encryption for blocks.

This is an educational/demonstration implementation. Do not use for production security.

Implementations

impl StorageEncryptionLayer

pub fn new(config: EncryptionLayerConfig) -> Self

Create a new encryption layer with the given configuration.

pub fn encrypt(&mut self, cid: &str, plaintext: &[u8]) -> EncryptedBlock

Encrypt plaintext data for a given CID.

For Xor mode, XORs plaintext with the repeating key. For XorWithNonce mode, generates a deterministic nonce from the CID, derives a working key by XORing the base key with the repeated nonce, then XORs the plaintext with the working key.

pub fn decrypt(&mut self, block: &EncryptedBlock) -> Result<Vec<u8>, String>

Decrypt an encrypted block, returning the original plaintext.

Returns an error if the decrypted size does not match original_size.

pub fn derive_key(base_key: &[u8], nonce: &[u8]) -> Vec<u8>

Derive a working key by XORing the base key with a repeated nonce.

The output length matches the base key length. The nonce is repeated cyclically to cover the full key length.

pub fn generate_nonce(cid: &str, size: usize) -> Vec<u8>

Generate a deterministic nonce from a CID using FNV-1a hash.

Produces size bytes by repeatedly hashing the CID with different seed offsets derived from FNV-1a.

pub fn is_encrypted(data: &[u8]) -> bool

Heuristic check whether data appears to be encrypted.

Estimates Shannon entropy; if > 7.5 bits/byte, data is likely encrypted or incompressible random data.

pub fn stats(&self) -> EncryptionLayerStats

Return current encryption layer statistics.