Struct EncryptionKeyRing 

pub struct EncryptionKeyRing { /* private fields */ }

Keyring used for encryption, decryption, and key rotation.

Implementations

impl EncryptionKeyRing

pub fn new(active_key_id: &str, keys: HashMap<String, [u8; 32]>) -> Self

Creates a keyring with an active key identifier.

pub fn encrypt_value( &self, config: &EncryptedFieldConfig, plaintext: &str, ) -> Result<StoredEncryptedValue, EncryptionError>

Encrypts plaintext according to the provided field configuration.

pub fn decrypt_value( &self, value: &StoredEncryptedValue, ) -> Result<String, EncryptionError>

Decrypts an encrypted value, trying the recorded key first and then rotated keys.

pub fn equality_tokens( &self, plaintext: &str, ) -> Result<Vec<String>, EncryptionError>

Returns equality tokens for every configured key, newest key first.

Trait Implementations

impl Clone for EncryptionKeyRing

fn clone(&self) -> EncryptionKeyRing

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncryptionKeyRing

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.