Enum EncryptionState 

pub enum EncryptionState {
    Plaintext,
    Encrypted(ActiveEncryption),
}

The resolved encryption state for an opened database.

Plaintext carries a disabled engine (identity passthrough, byte-identical legacy frames). Encrypted carries the live DEK-backed engine plus the db_uuid and key_epoch that the WAL binds into every record’s AAD.

Variants

Plaintext

Encrypted(ActiveEncryption)

Implementations

impl EncryptionState

pub fn is_encrypted(&self) -> bool

Whether at-rest encryption is active for this database.

pub fn engine(&self) -> Arc<EncryptionEngine>

The engine to hand to the WAL (disabled passthrough if plaintext).

pub fn db_uuid(&self) -> [u8; 16]

16-byte DB identity bound into WAL AAD (all-zero for plaintext, unused).

pub fn key_epoch(&self) -> u32

Active DEK epoch (0 for plaintext, unused).

Trait Implementations

impl Debug for EncryptionState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.