Struct EncryptionRuntime 

pub struct EncryptionRuntime { /* private fields */ }

Runtime encryption handle. Owns the master key and zeroizes it on drop.

Constructed once per Database::open via from_config. Cheap to clone (the wrapped state lives behind Arc).

Implementations

impl EncryptionRuntime

pub fn from_config(config: EncryptionConfig, password: String) -> Result<Self>

Derive the master key and build a runtime.

password is consumed and zeroized before this function returns. Errors if encryption is disabled in config, the password is empty, or the config fails validation.

pub fn encrypt(&self, plaintext: &[u8]) -> Result<Vec<u8>>

Encrypt plaintext, returning the serialized envelope.

pub fn decrypt(&self, bytes: &[u8]) -> Result<Vec<u8>>

Decrypt a serialized envelope.

pub fn algorithm(&self) -> &'static str

pub fn is_enabled(&self) -> bool

Trait Implementations

impl Clone for EncryptionRuntime

fn clone(&self) -> EncryptionRuntime

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncryptionRuntime

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.