Struct SecretKey 

pub struct SecretKey(/* private fields */);

A secret key that is automatically zeroed from memory when dropped. Use this to hold AES encryption keys — prevents leak via memory dump.

use overdrive::SecretKey;
let key = SecretKey::from_env("ODB_KEY").unwrap();
// ...key bytes are wiped from RAM when `key` is dropped

Implementations

impl SecretKey

pub fn new(bytes: Vec<u8>) -> Self

Create a SecretKey from raw bytes.

pub fn from_env(env_var: &str) -> SdkResult<Self>

Read key bytes from an environment variable.

Returns SecurityError if the env var is not set or is empty.

pub fn as_bytes(&self) -> &[u8]

Raw key bytes (use sparingly — minimize time in scope).

Trait Implementations

impl Drop for SecretKey

fn drop(&mut self)

Executes the destructor for this type.

impl Zeroize for SecretKey

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.