Struct EncryptionKeyManager 

pub struct EncryptionKeyManager;

Encryption key management utilities

Implementations

impl EncryptionKeyManager

pub fn generate_key() -> [u8; 32]

Generate a new random 256-bit encryption key

pub fn rotate_key(_old_key: &[u8; 32]) -> ([u8; 32], [u8; 32])

Rotate key: generate new key and return both old and new For rotation, you might want to re-encrypt data with the new key

pub fn export_key(key: &[u8; 32]) -> String

Export key as hex

pub fn import_key(hex: &str) -> Result<[u8; 32], CryptoError>

Import key from hex

pub fn derive_key_from_passphrase( passphrase: &str, ) -> Result<(Vec<u8>, [u8; 32]), CryptoError>

Generate a key from a passphrase using the default KDF

pub fn derive_key_from_passphrase_with_salt( passphrase: &str, salt: &[u8], ) -> Result<[u8; 32], CryptoError>

Generate a key from a passphrase using the provided salt