Struct EncryptionService 

pub struct EncryptionService { /* private fields */ }

Encryption service for secrets

Implementations

impl EncryptionService

pub fn new(master_key: Vec<u8>) -> Self

Create a new encryption service with a master key

pub fn from_env() -> Result<Self>

Create encryption service from environment variable

pub fn generate_master_key() -> Vec<u8>

Generate a random master key (for testing/initialization)

pub fn encrypt(&self, plaintext: &str) -> Result<(Vec<u8>, EncryptionMetadata)>

Encrypt a plaintext value

pub fn decrypt( &self, ciphertext: &[u8], metadata: &EncryptionMetadata, ) -> Result<String>

Decrypt a ciphertext value

pub fn rotate_key(&mut self, new_master_key: Vec<u8>)

Rotate encryption key (re-encrypt with new key version)

pub fn key_version(&self) -> u32

Get current key version