Struct RawKey 

pub struct RawKey { /* private fields */ }

Container for raw key material returned by a KeyFetch implementation.

RawKey deliberately exposes no method that returns a borrowed &[u8] to outside the crate. The only consumers of the inner bytes are the fragmentation pipeline and (eventually) the zero-on-drop wrapper introduced in Phase 0.3. From outside key-vault you can construct a RawKey, hand it to the vault, and never see it again.

Layout

In this phase RawKey stores the bytes in a plain Vec<u8>. Phase 0.3 will swap this for Zeroizing<Vec<u8>> from the zeroize crate without a public API change.

Implementations

impl RawKey

pub fn new(bytes: Vec<u8>) -> Self

Wrap a freshly-acquired byte buffer.

Callers are expected to overwrite the original buffer immediately after constructing the RawKey if they kept a copy (for example a stack buffer from read_exact). The vault itself never holds a separate borrow.

pub fn len(&self) -> usize

Number of raw key bytes.

Not redacted — the length of a key does not by itself compromise the secret.

pub fn is_empty(&self) -> bool

Returns true if the key contains zero bytes. A zero-length key is almost always a configuration error; the vault rejects such keys at registration.

Trait Implementations

impl Debug for RawKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for RawKey

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.