Struct Crypt 

pub struct Crypt { /* private fields */ }

The application’s keys: the current one writes, every one reads.

Implementations

impl Crypt

pub fn new(current: MasterKey, previous: Vec<MasterKey>) -> Self

A crypt over current and the keys still readable.

pub fn ephemeral() -> Self

A crypt for one process: a random key nobody else holds, for tests and for a development run with nothing configured.

pub fn from_config(key: &str, previous: &[String]) -> Result<Self, CryptError>

The configured keys: key as id:<base64> and previous likewise.

pub fn current_id(&self) -> u8

The id the next write uses.

pub fn key_id_of(&self, sealed: &str) -> Option<u8>

The id of the key a sealed value or signature was written under, when it is well-formed.

pub fn encrypt( &self, purpose: &str, aad: &[u8], plain: &[u8], ) -> Result<String, CryptError>

Seals plain for purpose, bound to aad (a table, column and row, or whatever must match on open). Base64url text.

pub fn decrypt( &self, purpose: &str, aad: &[u8], sealed: &str, ) -> Result<Vec<u8>, CryptError>

Opens a value encrypt sealed under any key the crypt holds, for the same purpose and AAD.

pub fn sign(&self, purpose: &str, message: &[u8]) -> String

Signs message for purpose. Base64url text of the version, key id and tag.

pub fn verify(&self, purpose: &str, message: &[u8], signature: &str) -> bool

Whether signature is sign of message under any key the crypt holds, compared in constant time.

pub fn token(&self, purpose: &str, payload: &[u8], ttl: Duration) -> String

A signed token carrying payload and an expiry ttl from now.

pub fn check_token( &self, purpose: &str, token: &str, ) -> Result<Vec<u8>, CryptError>

The payload of a live token minted by token for the same purpose.

pub fn blind_index(&self, purpose: &str, plain: &[u8]) -> String

A keyed digest of plain for looking a sealed value up by equality (a blind index), under its own subkey. Base64url text.

Trait Implementations

impl Debug for Crypt

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.