Struct EncryptedStorage 

pub struct EncryptedStorage<S: StorageEngine> { /* private fields */ }

Encrypted storage wrapper.

Encrypts all values with AES-256-GCM. Keys are plaintext (needed for scans). The encryption key is derived from a passphrase via Argon2id and held in memory until the EncryptedStorage is dropped, at which point it’s zeroized.

Implementations

impl<S: StorageEngine> EncryptedStorage<S>

pub async fn open( inner: S, passphrase: &str, m_cost: u32, t_cost: u32, p_cost: u32, ) -> Result<Self, LiteError>

Create an encrypted storage wrapper.

On first use (no salt stored), generates a random salt and stores it. On subsequent opens, reads the existing salt for key derivation.

m_cost, t_cost, and p_cost are the Argon2id parameters (memory in KiB, iteration count, and parallelism lanes respectively). Callers should obtain these from crate::config::LiteConfig.

Errors

Returns LiteError if salt generation fails or the storage is inaccessible.

Trait Implementations

impl<S: StorageEngine> StorageEngine for EncryptedStorage<S>

fn get<'life0, 'life1, 'async_trait>( &'life0 self, ns: Namespace, key: &'life1 [u8], ) -> Pin<Box<dyn Future<Output = Result<Option<Vec<u8>>, LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Get a value by namespace and key.

fn put<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, ns: Namespace, key: &'life1 [u8], value: &'life2 [u8], ) -> Pin<Box<dyn Future<Output = Result<(), LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Put (insert or overwrite) a value.

fn delete<'life0, 'life1, 'async_trait>( &'life0 self, ns: Namespace, key: &'life1 [u8], ) -> Pin<Box<dyn Future<Output = Result<(), LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Delete a key. No-op if the key does not exist.

fn scan_prefix<'life0, 'life1, 'async_trait>( &'life0 self, ns: Namespace, prefix: &'life1 [u8], ) -> Pin<Box<dyn Future<Output = Result<Vec<KvPair>, LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Scan all keys with a given prefix in a namespace.

fn scan_prefix_bounded<'life0, 'life1, 'async_trait>( &'life0 self, ns: Namespace, prefix: &'life1 [u8], limit: usize, ) -> Pin<Box<dyn Future<Output = Result<Vec<KvPair>, LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Read at most limit prefix records, ordered by key.

fn scan_prefix_budgeted<'life0, 'life1, 'async_trait>( &'life0 self, ns: Namespace, prefix: &'life1 [u8], max_records: usize, max_bytes: usize, ) -> Pin<Box<dyn Future<Output = Result<PrefixScan, LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Read prefix records within count and serialized key-plus-value budgets.

fn scan_prefix_from_budgeted<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, ns: Namespace, prefix: &'life1 [u8], after_key: Option<&'life2 [u8]>, max_records: usize, max_bytes: usize, ) -> Pin<Box<dyn Future<Output = Result<PrefixScan, LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Read prefix rows after an exclusive, namespace-free cursor within both budgets.

fn batch_write<'life0, 'life1, 'async_trait>( &'life0 self, ops: &'life1 [WriteOp], ) -> Pin<Box<dyn Future<Output = Result<(), LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Atomically apply a batch of writes.

fn count<'life0, 'async_trait>( &'life0 self, ns: Namespace, ) -> Pin<Box<dyn Future<Output = Result<u64, LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Count the number of entries in a namespace.

fn scan_range<'life0, 'life1, 'async_trait>( &'life0 self, ns: Namespace, start: &'life1 [u8], limit: usize, ) -> Pin<Box<dyn Future<Output = Result<Vec<KvPair>, LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Range scan: return up to limit entries where key >= start.

fn scan_range_bounded<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, ns: Namespace, start: Option<&'life1 [u8]>, end: Option<&'life2 [u8]>, limit: Option<usize>, ) -> Pin<Box<dyn Future<Output = Result<Vec<KvPair>, LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Bounded range scan: return entries where start <= key < end.

fn compact<'life0, 'async_trait>( &'life0 self, ) -> Pin<Box<dyn Future<Output = Result<CompactionOutcome, LiteError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Compact the backing store, reclaiming dead pages and (when possible) truncating the file to bound on-disk growth.

fn as_vector_segment_ext(&self) -> Option<&dyn VectorSegmentExt>

Return this engine’s vector segment operations interface if supported.

fn as_array_segment_ext(&self) -> Option<&dyn ArraySegmentExt>

Return this engine’s array segment operations interface if supported.

fn as_fts_segment_ext(&self) -> Option<&dyn FtsSegmentExt>

Return this engine’s FTS segment operations interface if supported.

fn as_columnar_segment_ext(&self) -> Option<&dyn ColumnarSegmentExt>

Return this engine’s columnar segment operations interface if supported.

fn as_graph_segment_ext(&self) -> Option<&dyn GraphSegmentExt>

Return this engine’s graph segment operations interface if supported.

fn as_spatial_segment_ext(&self) -> Option<&dyn SpatialSegmentExt>

Return this engine’s spatial segment operations interface if supported.