Struct SegmentDecryptor 

pub struct SegmentDecryptor { /* private fields */ }

Turns the records of one WAL segment back into plaintext.

Owns both the segment’s AAD inputs and its key ring rather than borrowing them: a reader builds one at open time and keeps it for as long as the file handle lives, and borrowing the caller’s ring would put a lifetime on every reader type that outlives the call that constructed it.

Implementations

impl SegmentDecryptor

pub fn new(preamble: Option<&SegmentPreamble>, ring: Option<&KeyRing>) -> Self

Build a decryptor for a segment from its preamble (absent on segments written without encryption) and the replay key ring (absent when the database is not configured for WAL encryption).

pub fn decrypt_record(&self, record: WalRecord) -> Result<WalRecord>

Return record as plaintext, with ENCRYPTED_FLAG cleared and its CRC recomputed. Unencrypted records pass through untouched.

pub fn decrypt_payload( &self, header: &RecordHeader, payload: Vec<u8>, ) -> Result<Vec<u8>>

Return the plaintext for a payload that was read separately from its header, as the lazy reader does. Unencrypted payloads pass through.