Struct SecureKey 

pub struct SecureKey { /* private fields */ }

A securely managed encryption key

Implementations

impl SecureKey

pub fn new(data: &[u8]) -> SecureKey

Create a new secure key from raw bytes

pub fn from_passphrase(password: &str, salt: &[u8]) -> SecureKey

Derive a key from a password using PBKDF2-SHA256 Uses 100,000 iterations for security (OWASP recommendation)

pub fn from_env( var_name: &str, salt: Option<&[u8]>, ) -> Result<SecureKey, String>

Derive a key from an environment variable (e.g., REDDB_KEY) The env var can contain a hex string or a raw passphrase. If it’s a 64-char hex string, it’s treated as the raw key (32 bytes). Otherwise, it’s treated as a passphrase and KDF is applied (requires salt).

pub fn as_bytes(&self) -> &[u8]

Access the raw key bytes

Trait Implementations

impl Clone for SecureKey

fn clone(&self) -> SecureKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecureKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Drop for SecureKey

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.