Struct Encrypter 

pub struct Encrypter { /* private fields */ }

Encrypts and decrypts with the application key.

Cheap to clone and safe to share, so it is normally registered once as application state and reached with req.state::<Encrypter>().

Implementations

impl Encrypter

pub fn new(key: AppKey) -> Self

Build from an application key. Encryption uses its own derived sub-key, never the raw APP_KEY, so a ciphertext and a URL signature can never be confused for one another.

pub fn from_config(config: &Config) -> Result<Self>

Build from app.key in the configuration tree.

pub fn generate_key() -> String

A fresh APP_KEY line for .env, used by rustlavel key:generate.

pub fn encrypt(&self, plaintext: &str) -> Result<String>

Encrypt a string.

pub fn encrypt_bytes(&self, plaintext: &[u8]) -> Result<String>

Encrypt arbitrary bytes.

A fresh nonce is drawn for every message. Reusing a nonce under one key is the single fatal mistake in GCM — it leaks the XOR of two plaintexts and, worse, the authentication subkey — so the nonce is never derived from the message, a counter, or the clock.

pub fn decrypt(&self, payload: &str) -> Result<String>

Decrypt a payload back into a string.

pub fn decrypt_bytes(&self, payload: &str) -> Result<Vec<u8>>

Decrypt a payload back into bytes.

Every failure — wrong key, flipped bit, truncated string, unknown version — returns the same kind of error and reveals nothing about which one it was. A caller that told an attacker “the tag was wrong” rather than “the base64 was wrong” would be handing out an oracle.

Trait Implementations

impl Clone for Encrypter

fn clone(&self) -> Encrypter

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Encrypter

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.