Struct SingleCodecKeyRing 

pub struct SingleCodecKeyRing { /* private fields */ }

A KeyRing that seals everything — catalog and every collection — with one shared codec.

This is the pre-envelope behaviour: PlainCodec when encryption-at-rest is disabled, or a single AEAD codec when a key is configured without the per-collection envelope. It holds no per-collection keys, so provision and shred are no-ops — a dropped collection is erased only by reclaiming its files.

Implementations

impl SingleCodecKeyRing

pub fn new(codec: Box<dyn PageCodec>) -> Self

Wrap a single codec as a key-ring.

pub fn plaintext() -> Self

A plaintext key-ring — encryption-at-rest disabled.

Trait Implementations

impl KeyRing for SingleCodecKeyRing

fn catalog_codec(&self) -> &dyn PageCodec

The codec for engine-wide structures: the manifest and the write-ahead log.

fn collection_codec( &self, _collection: CollectionId, ) -> Result<Box<dyn PageCodec>>

The codec for one collection’s segments and index artifacts.

fn provision_collection(&self, _collection: CollectionId) -> Result<()>

Provision key material for a new collection. Idempotent, and a no-op for key-rings without per-collection keys.

fn shred_collection(&self, _collection: CollectionId) -> Result<()>

Crypto-shred a collection: destroy its key material so its sealed data can never be decrypted again. A no-op for key-rings without per-collection keys, where reclaiming the files is the only erasure.