Struct KeyMaterial 

pub struct KeyMaterial(/* private fields */);

The secret bytes behind one encrypted file: the AES-256 file key, the four revision-6 salts (ISO 32000-2 §7.6.4.4.7, algorithms 8 and 9), and four random bytes for /Perms (Algorithm 10).

The bytes come from the operating system’s cryptographic generator and from nowhere else. There is no constructor taking a seed, a slice or a byte array, so a caller cannot substitute a derived sequence: an unguessable file key is a property of the type, not of the call site. Neither Clone nor Debug, so the bytes are neither duplicated across two files nor printed. Drop wipes them.

Implementations

impl KeyMaterial

pub fn from_os() -> Result<Self, Error>

Sixty-eight fresh bytes from the operating system.

Errors

Error::NoEntropy when the platform’s generator is unavailable — the only outcome besides success, since a partial read is not one the underlying interface reports.

Trait Implementations

impl Drop for KeyMaterial

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.