Struct AesEncryptionStrategy 

pub struct AesEncryptionStrategy { /* private fields */ }

AES-256-GCM authenticated-encryption strategy (Pure Rust, via OxiCrypto).

On-the-wire layout of an encrypted entry is nonce(12) || ciphertext || tag(16). A fresh random nonce is generated for every encrypt call, so identical plaintexts do not produce identical ciphertexts and nonces never repeat under the same key (a hard requirement for GCM security).

Implementations

impl AesEncryptionStrategy

pub fn new(key: &[u8]) -> Result<Self>

Build a strategy from a 256-bit key. Returns an error for any other length so a misconfigured key cannot silently weaken or disable encryption.

Trait Implementations

impl EncryptionStrategy for AesEncryptionStrategy

fn encrypt<'life0, 'life1, 'async_trait>( &'life0 self, data: &'life1 [u8], ) -> Pin<Box<dyn Future<Output = Result<Vec<u8>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

fn decrypt<'life0, 'life1, 'async_trait>( &'life0 self, data: &'life1 [u8], ) -> Pin<Box<dyn Future<Output = Result<Vec<u8>>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,