Struct EncryptionDescriptor 

pub struct EncryptionDescriptor {
    pub algo: u8,
    pub nonce_prefix: [u8; 12],
    pub wrapped_dek: Vec<u8>,
    pub column_descriptors: Vec<ColumnKeyDescriptor>,
}

Encryption Descriptor, serialized into each encrypted run at header.encryption_descriptor_offset (4-byte little-endian length prefix

• bincode body).

Fields

algo: u8

1 = AES-256-GCM.

nonce_prefix: [u8; 12]

12-byte per-run nonce prefix. Bytes [0..8] are random per run; bytes [8..12] are zero and overlaid with column_id + page_seq at the page level (see build_page_nonce).

wrapped_dek: Vec<u8>

DEK wrapped by the table KEK (AES-256-GCM; 32 + 16-byte tag = 48).

column_descriptors: Vec<ColumnKeyDescriptor>

Per-column indexable-encryption descriptors (Phase 10.2).

Trait Implementations

impl Clone for EncryptionDescriptor

fn clone(&self) -> EncryptionDescriptor

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'de> Deserialize<'de> for EncryptionDescriptor

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for EncryptionDescriptor

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.