Struct EncryptedStorage 

pub struct EncryptedStorage<S: StorageEngine> { /* private fields */ }

Encrypted storage wrapper.

Encrypts all values with AES-256-GCM. Keys are plaintext (needed for scans). The encryption key is derived from a passphrase via Argon2id and held in memory until the EncryptedStorage is dropped, at which point it’s zeroized.

Implementations

impl<S: StorageEngine> EncryptedStorage<S>

pub async fn open( inner: S, passphrase: &str, m_cost: u32, t_cost: u32, p_cost: u32, ) -> Result<Self, LiteError>

Create an encrypted storage wrapper.

On first use (no salt stored), generates a random salt and stores it. On subsequent opens, reads the existing salt for key derivation.

m_cost, t_cost, and p_cost are the Argon2id parameters (memory in KiB, iteration count, and parallelism lanes respectively). Callers should obtain these from crate::config::LiteConfig.

Errors

Returns LiteError if salt generation fails or the storage is inaccessible.

Trait Implementations

impl<S: StorageEngine> StorageEngine for EncryptedStorage<S>

fn get<'life0, 'life1, 'async_trait>( &'life0 self, ns: Namespace, key: &'life1 [u8], ) -> Pin<Box<dyn Future<Output = Result<Option<Vec<u8>>, LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Get a value by namespace and key.

fn put<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, ns: Namespace, key: &'life1 [u8], value: &'life2 [u8], ) -> Pin<Box<dyn Future<Output = Result<(), LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Put (insert or overwrite) a value.

fn delete<'life0, 'life1, 'async_trait>( &'life0 self, ns: Namespace, key: &'life1 [u8], ) -> Pin<Box<dyn Future<Output = Result<(), LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Delete a key. No-op if the key does not exist.

fn scan_prefix<'life0, 'life1, 'async_trait>( &'life0 self, ns: Namespace, prefix: &'life1 [u8], ) -> Pin<Box<dyn Future<Output = Result<Vec<(Vec<u8>, Vec<u8>)>, LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Scan all keys with a given prefix in a namespace.

fn batch_write<'life0, 'life1, 'async_trait>( &'life0 self, ops: &'life1 [WriteOp], ) -> Pin<Box<dyn Future<Output = Result<(), LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Atomically apply a batch of writes.

fn count<'life0, 'async_trait>( &'life0 self, ns: Namespace, ) -> Pin<Box<dyn Future<Output = Result<u64, LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Count the number of entries in a namespace.