Struct Dynamic 

pub struct Dynamic<T: ?Sized> { /* private fields */ }

Re-export of the Dynamic type. Dynamic-sized heap-allocated secure secret wrapper.

This is a thin wrapper around Box<T> with enforced explicit exposure. Suitable for dynamic-sized secrets like String or Vec<u8>. The inner field is private, forcing all access through explicit methods.

Security invariants:

• No Deref or AsRef — prevents silent access.
• Debug is always redacted.
• With zeroize, wipes the entire allocation on drop (including spare capacity).

Implementations

impl<T: ?Sized> Dynamic<T>

pub fn new<U>(value: U) -> Self

where U: Into<Box<T>>,

Wrap a value by boxing it.

Uses Into<Box<T>> for flexibility.

impl Dynamic<String>

This impl block contains no items.

Ergonomic helpers for common heap types

impl Dynamic<Vec<u8>>

pub fn from_random(len: usize) -> Self

Fill with fresh random bytes of the specified length using the System RNG.

Panics on RNG failure for fail-fast crypto code. Guarantees secure entropy from system sources.

impl Dynamic<Vec<u8>>

pub fn try_from_hex(s: &str) -> Result<Self, HexError>

Decode a hex string into a Dynamic secret.

Example

use secure_gate::{Dynamic, ExposeSecret};
let hex_string = "424344";
let secret = Dynamic::try_from_hex(hex_string).unwrap();
assert_eq!(secret.expose_secret().len(), 3);

impl Dynamic<Vec<u8>>

pub fn try_from_base64url(s: &str) -> Result<Self, Base64Error>

Decode a base64url string into a Dynamic secret.

Example

use secure_gate::{Dynamic, ExposeSecret};
let b64_string = "QkNE";
let secret = Dynamic::try_from_base64url(b64_string).unwrap();
assert_eq!(secret.expose_secret().len(), 3);

impl Dynamic<Vec<u8>>

pub fn try_from_bech32(s: &str) -> Result<Self, Bech32Error>

Decode a bech32 string into a Dynamic secret, discarding the HRP.

Example

use secure_gate::{Dynamic, ExposeSecret, ToBech32};
let original: Dynamic<Vec<u8>> = Dynamic::new(vec![1, 2, 3, 4]);
let bech32_string = original.with_secret(|s| s.to_bech32("test"));
let decoded = Dynamic::try_from_bech32(&bech32_string).unwrap();
// HRP "test" is discarded, bytes are stored

impl Dynamic<Vec<u8>>

pub fn try_from_bech32m(s: &str) -> Result<Self, Bech32Error>

Decode a bech32m string into a Dynamic secret, discarding the HRP.

Example

use secure_gate::Dynamic;
// Note: Bech32m strings must be valid Bech32m format
let bech32m_string = "abc1qpzry9x8gf2tvdw0s3jn54khce6mua7lmqqqxw";
let secret = Dynamic::try_from_bech32m(bech32m_string);
// Returns Result<Dynamic<Vec<u8>>, Bech32Error>

impl Dynamic<String>

pub fn ct_eq(&self, other: &Self) -> bool

Constant-time equality comparison.

Compares the byte contents of two instances in constant time to prevent timing attacks.

impl Dynamic<Vec<u8>>

pub fn ct_eq(&self, other: &Self) -> bool

Constant-time equality comparison.

Compares the byte contents of two instances in constant time to prevent timing attacks.

Trait Implementations

impl<T: CloneableSecret> Clone for Dynamic<T>

Available on crate feature cloneable only.

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<T> ConstantTimeEq for Dynamic<T>

where T: ConstantTimeEq + ?Sized,

Available on crate feature ct-eq only.

fn ct_eq(&self, other: &Self) -> bool

Compare two values in constant time.

impl<T> ConstantTimeEqExt for Dynamic<T>

where T: AsRef<[u8]> + ConstantTimeEq + ?Sized,

Available on crate feature ct-eq-hash only.

fn len(&self) -> usize

Get the length of the secret data in bytes.

fn ct_eq_hash(&self, other: &Self) -> bool

Force BLAKE3 digest comparison (constant-time on 32-byte output).

fn ct_eq_auto(&self, other: &Self, threshold_bytes: Option<usize>) -> bool

Recommended hybrid constant-time equality check.

impl<T: ?Sized> Debug for Dynamic<T>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Dynamic<String>

Available on crate feature serde-deserialize only.

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl<'de> Deserialize<'de> for Dynamic<Vec<u8>>

Available on crate feature serde-deserialize only.

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl ExposeSecret for Dynamic<String>

type Inner = String

The inner secret type being exposed.

fn with_secret<F, R>(&self, f: F) -> R

where F: FnOnce(&String) -> R,

Provide scoped read-only access to the secret.

fn expose_secret(&self) -> &String

Expose the secret for read-only access.

fn len(&self) -> usize

Returns the length of the secret.

fn is_empty(&self) -> bool

Returns true if the secret is empty.

impl<T> ExposeSecret for Dynamic<Vec<T>>

type Inner = Vec<T>

The inner secret type being exposed.

fn with_secret<F, R>(&self, f: F) -> R

where F: FnOnce(&Vec<T>) -> R,

Provide scoped read-only access to the secret.

fn expose_secret(&self) -> &Vec<T>

Expose the secret for read-only access.

fn len(&self) -> usize

Returns the length of the secret.

fn is_empty(&self) -> bool

Returns true if the secret is empty.

impl ExposeSecretMut for Dynamic<String>

fn with_secret_mut<F, R>(&mut self, f: F) -> R

where F: FnOnce(&mut String) -> R,

Provide scoped mutable access to the secret.

fn expose_secret_mut(&mut self) -> &mut String

Expose the secret for mutable access.

impl<T> ExposeSecretMut for Dynamic<Vec<T>>

fn with_secret_mut<F, R>(&mut self, f: F) -> R

where F: FnOnce(&mut Vec<T>) -> R,

Provide scoped mutable access to the secret.

fn expose_secret_mut(&mut self) -> &mut Vec<T>

Expose the secret for mutable access.

impl From<&[u8]> for Dynamic<Vec<u8>>

fn from(slice: &[u8]) -> Self

Wrap a byte slice in a Dynamic Vec<u8>.

impl From<&str> for Dynamic<String>

fn from(input: &str) -> Self

Wrap a string slice in a Dynamic String.

impl<T: ?Sized> From<Box<T>> for Dynamic<T>

fn from(boxed: Box<T>) -> Self

Wrap a boxed value in a Dynamic secret.

impl<T: 'static> From<T> for Dynamic<T>

fn from(value: T) -> Self

Wrap a value in a Dynamic secret by boxing it.

impl<T> Serialize for Dynamic<T>

where T: SerializableSecret,

Available on crate feature serde-serialize only.

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl<T: ?Sized + Zeroize> Zeroize for Dynamic<T>

Available on crate feature zeroize only.

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.

impl<T: ?Sized + Zeroize> ZeroizeOnDrop for Dynamic<T>

Available on crate feature zeroize only.

Zeroize on drop integration