Module crypto 

Structs

Aes256GcmAead

AES-256-GCM, storing nonce || ciphertext || tag as a single blob.

StaticMasterKeyProvider

v1 master key source: a hex-encoded 32-byte key from an env var, or (if the env var holds a path instead) read from a file. Swappable later for a KMS-backed provider without touching Barrier or its callers.

Enums

CryptoError

Traits

Aead

MasterKeyProvider