Struct EncryptionManager 

pub struct EncryptionManager { /* private fields */ }

Encryption manager for secure communications

Manages encryption keys and secure channels:

• Peer-to-peer session keys via X25519 key exchange
• Cell group keys for broadcast encryption
• Device key for at-rest encryption

Implementations

impl EncryptionManager

pub fn new(keypair: EncryptionKeypair, device_id: DeviceId) -> Self

Create new encryption manager

pub fn public_key(&self) -> &PublicKey

Get this device’s public key

pub fn public_key_bytes(&self) -> [u8; 32]

Get this device’s public key bytes

pub async fn establish_channel( &self, peer_id: DeviceId, peer_public_key: &[u8; 32], ) -> Result<(), SecurityError>

Establish secure channel with peer via X25519 key exchange

pub async fn get_channel(&self, peer_id: &DeviceId) -> Option<SecureChannel>

Get secure channel for peer

pub async fn has_channel(&self, peer_id: &DeviceId) -> bool

Check if channel exists for peer

pub async fn remove_channel(&self, peer_id: &DeviceId)

Remove channel (peer disconnected)

pub async fn encrypt_for_peer( &self, peer_id: &DeviceId, plaintext: &[u8], ) -> Result<EncryptedData, SecurityError>

Encrypt message for specific peer

pub async fn decrypt_from_peer( &self, peer_id: &DeviceId, encrypted: &EncryptedData, ) -> Result<Vec<u8>, SecurityError>

Decrypt message from peer

pub async fn get_or_create_cell_key(&self, cell_id: &str) -> GroupKey

Create or get group key for cell

pub async fn set_cell_key(&self, key: GroupKey)

Set cell key (received from leader)

pub async fn get_cell_key(&self, cell_id: &str) -> Option<GroupKey>

Get cell key

pub async fn rotate_cell_key( &self, cell_id: &str, ) -> Result<GroupKey, SecurityError>

Rotate cell key (when member leaves)

pub async fn remove_cell_key(&self, cell_id: &str)

Remove cell key (left cell)

pub async fn encrypt_for_cell( &self, cell_id: &str, plaintext: &[u8], ) -> Result<EncryptedCellMessage, SecurityError>

Encrypt message for cell broadcast

pub async fn decrypt_cell_message( &self, message: &EncryptedCellMessage, ) -> Result<Vec<u8>, SecurityError>

Decrypt cell message

pub fn encrypt_document( &self, plaintext: &[u8], ) -> Result<EncryptedDocument, SecurityError>

Encrypt document for at-rest storage

pub fn decrypt_document( &self, document: &EncryptedDocument, ) -> Result<Vec<u8>, SecurityError>

Decrypt document from storage

pub async fn peer_channel_count(&self) -> usize

Get number of active peer channels

pub async fn cell_key_count(&self) -> usize

Get number of cell keys

Trait Implementations

impl Debug for EncryptionManager

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.