Struct SecureKey 

pub struct SecureKey { /* private fields */ }

A 32-byte key held in memory, mlocked against swap.

On Drop, the memory is zeroed (via zeroize, which is guaranteed not to be elided by the optimizer) and then munlocked.

Clone, Copy, and Debug are intentionally NOT derived: key material must not be duplicated or written to logs. A redacting Debug impl is provided so the type can still appear in #[derive(Debug)] structs without leaking the bytes.

Implementations

impl SecureKey

pub fn new(bytes: [u8; 32]) -> Self

Wrap a 32-byte key, attempting to mlock it.

If mlock fails, logs a warning and continues — startup is not aborted.

pub fn as_bytes(&self) -> &[u8; 32]

Access the key bytes.

Trait Implementations

impl Debug for SecureKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for SecureKey

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.