Struct KeyVaultBuilder 

pub struct KeyVaultBuilder { /* private fields */ }

Fluent builder for KeyVault.

The builder is the only way to construct a vault; the inherent KeyVault::new constructor is intentionally not provided so that future required configuration cannot be silently bypassed.

Implementations

impl KeyVaultBuilder

pub fn new() -> Self

Start a new builder with default configuration and a default-range StandardFragmenter.

pub fn normalize_with_blake3(self, enabled: bool) -> Self

Enable or disable BLAKE3 normalization of input key material.

Default: true. Disabling normalization preserves the original byte pattern of the key in storage, which can leak format cues (DER envelopes, PEM markers, ASCII-armored data). Disable only when you have a specific reason to preserve the original bytes.

pub fn with_chunk_range(self, min: usize, max: usize) -> Self

Customize the fragmenter chunk-size range.

Defaults are documented on StandardFragmenter::new. min is clamped to >= 1 and max to >= min. Calling this replaces any previously-configured chunk range and resets the decoy strategy to None; configure decoy after this call.

pub fn with_decoy<D>(self, decoy: D) -> Self

where D: DecoyStrategy + 'static,

Attach a Layer-4 decoy strategy to the underlying fragmenter.

When set, every KeyVault::fragment call also produces decoy chunks from the strategy. Decoys are interleaved with real chunks via the same Fisher-Yates shuffle and are skipped by defragment. See StandardFragmenter::with_decoy for details on chunk-count and size selection.

Use SelfReferenceDecoy for the strongest statistical indistinguishability (recommended default); KeyDerivedDecoy for BLAKE3-XOF–derived CSPRNG-like output; RandomDecoy for raw CSPRNG output.

pub fn build(self) -> KeyVault

Finalize and produce a KeyVault.

Infallible in this phase — later phases may move this to a Result-returning shape if validation is added.

Trait Implementations

impl Clone for KeyVaultBuilder

fn clone(&self) -> KeyVaultBuilder

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KeyVaultBuilder

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for KeyVaultBuilder

fn default() -> KeyVaultBuilder

Returns the “default value” for a type.