Struct EncryptionProvider 

pub struct EncryptionProvider { /* private fields */ }

Encryption provider for column-level encryption

Implementations

impl EncryptionProvider

pub fn new(master_key: &[u8]) -> Result<Self, EncryptionError>

Create a new encryption provider with a master key

pub fn generate_key() -> Vec<u8>

Generate a new random encryption key

pub fn add_key( &self, key_id: String, key: Vec<u8>, ) -> Result<(), EncryptionError>

Add a new encryption key for key rotation

pub fn set_active_key(&self, key_id: String) -> Result<(), EncryptionError>

Set the active key ID for new encryptions

pub fn encrypt( &self, plaintext: &[u8], ) -> Result<EncryptedData, EncryptionError>

Encrypt data using the active key

pub fn encrypt_with_key( &self, key_id: &str, plaintext: &[u8], ) -> Result<EncryptedData, EncryptionError>

Encrypt data with a specific key

pub fn decrypt( &self, encrypted: &EncryptedData, ) -> Result<Vec<u8>, EncryptionError>

Decrypt data

pub fn encrypt_string(&self, plaintext: &str) -> Result<String, EncryptionError>

Encrypt a string value

pub fn decrypt_string( &self, ciphertext: &str, ) -> Result<String, EncryptionError>

Decrypt a string value

pub fn reencrypt( &self, encrypted: &EncryptedData, new_key_id: &str, ) -> Result<EncryptedData, EncryptionError>

Re-encrypt data with a new key (for key rotation)

Trait Implementations

impl Debug for EncryptionProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.