Struct InMemoryKeyStore 

pub struct InMemoryKeyStore { /* private fields */ }

In-memory key store for testing and development.

Security Warning: This stores private keys in memory without hardware protection. Use only for testing or development environments.

For production, use Azure Key Vault, Windows Certificate Store, or an HSM.

Implementations

impl InMemoryKeyStore

pub fn new() -> Self

Create a new empty in-memory key store.

pub fn add_key( &mut self, key_path: &str, pem: &str, ) -> Result<(), EncryptionError>

Add a key to the store from PEM-encoded private key.

Arguments

• key_path - The identifier/path for this key
• pem - PEM-encoded RSA private key (PKCS#1 or PKCS#8)

Errors

Returns an error if the PEM cannot be parsed.

pub fn add_key_der( &mut self, key_path: &str, der: &[u8], ) -> Result<(), EncryptionError>

Add a key to the store from DER-encoded private key.

Arguments

• key_path - The identifier/path for this key
• der - DER-encoded RSA private key

Errors

Returns an error if the DER cannot be parsed.

pub fn has_key(&self, key_path: &str) -> bool

Check if a key exists in the store.

pub fn remove_key(&mut self, key_path: &str) -> bool

Remove a key from the store.

pub fn len(&self) -> usize

Get the number of keys in the store.

pub fn is_empty(&self) -> bool

Check if the store is empty.

Trait Implementations

impl Default for InMemoryKeyStore

fn default() -> Self

Returns the “default value” for a type.

impl KeyStoreProvider for InMemoryKeyStore

fn provider_name(&self) -> &str

Returns the provider name as used in SQL Server metadata.

fn decrypt_cek<'life0, 'life1, 'life2, 'life3, 'async_trait>( &'life0 self, cmk_path: &'life1 str, _algorithm: &'life2 str, encrypted_cek: &'life3 [u8], ) -> Pin<Box<dyn Future<Output = Result<Vec<u8>, EncryptionError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, 'life3: 'async_trait,

Decrypt a Column Encryption Key (CEK) using the Column Master Key (CMK).

fn sign_data<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, _cmk_path: &'life1 str, _data: &'life2 [u8], ) -> Pin<Box<dyn Future<Output = Result<Vec<u8>, EncryptionError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Sign data using the Column Master Key (optional).

fn verify_signature<'life0, 'life1, 'life2, 'life3, 'async_trait>( &'life0 self, _cmk_path: &'life1 str, _data: &'life2 [u8], _signature: &'life3 [u8], ) -> Pin<Box<dyn Future<Output = Result<bool, EncryptionError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait, 'life3: 'async_trait,

Verify a signature (optional).