Struct PageEncryptor 

pub struct PageEncryptor { /* private fields */ }

Binds a SecureKey to the canonical per-page envelope.

Implementations

impl PageEncryptor

pub fn new(key: SecureKey) -> PageEncryptor

Create a new page encryptor.

pub fn encrypt(&self, page_id: u32, plaintext: &[u8]) -> Vec<u8>

Encrypt a page through the canonical envelope.

Layout: [nonce (12)] [ciphertext (N)] [tag (16)]; the plaintext of size N yields N + OVERHEAD bytes. The caller ensures the plaintext fits the target page size (e.g. 4068 bytes → a 4096-byte page). page_id is bound as AAD.

pub fn decrypt( &self, page_id: u32, encrypted_data: &[u8], ) -> Result<Vec<u8>, String>

Decrypt a page produced by Self::encrypt.