Enum MultipartSseMode 

pub enum MultipartSseMode {
    None,
    SseS4,
    SseC {
        key: Zeroizing<[u8; 32]>,
        key_md5: [u8; 16],
    },
    SseKms {
        key_id: String,
    },
}

SSE recipe captured at CreateMultipartUpload time and replayed for every part body + the final stamp on the assembled object.

The variants mirror service::put_object’s SSE branch precedence: SSE-C (per-request customer key) wins over SSE-KMS (named KMS key) wins over SSE-S4 (server-managed keyring) wins over no encryption. SSE-C / SSE-KMS materialise only when the client supplied the matching headers; SSE-S4 materialises whenever the gateway is booted with --sse-s4-key (or with_sse_keyring(...) in tests).

v0.8.2 #62 (H-6 audit fix): the SseC variant’s customer key is held in Zeroizing<[u8; 32]> so the raw 32-byte AES key is overwritten with 0u8 when the entry is dropped — either via remove(upload_id) on Complete/Abort, or via sweep_stale(...) on an abandoned upload. Process core dump / swap-out / KSM snapshot can no longer leak a previously-held SSE-C key after the upload’s lifetime ends. The key_md5 is deliberately a plain [u8; 16] — it’s a public fingerprint (S3 puts it on the wire on every PUT/GET response) and requires no zeroization. Custom PartialEq ignores the Zeroizing wrapper so existing tests that match on the variant keep compiling.

Variants

None

Plaintext multipart. Backend stores raw framed bytes.

SseS4

Server-managed keyring (active key on PUT, all keys probed on GET). The keyring itself lives on S4Service; only the marker is held here so complete_multipart_upload knows which path to take.

SseC

Per-request customer key. The 32-byte key + its 128-bit MD5 are kept in memory only for the lifetime of the upload, then dropped when the entry is remove(...)’d on Complete or Abort. v0.8.2 #62: key is Zeroizing<[u8; 32]> so its bytes are wiped on drop (vs. a bare [u8; 32] which would linger on the heap / stack until the next allocation reuse).

Fields

key: Zeroizing<[u8; 32]>

key_md5: [u8; 16]

SseKms

Named KMS key (resolved against the gateway’s KMS backend on Complete to generate the per-object DEK).

Fields

key_id: String

Trait Implementations

impl Clone for MultipartSseMode

fn clone(&self) -> MultipartSseMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MultipartSseMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for MultipartSseMode

fn eq(&self, other: &Self) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for MultipartSseMode