Struct MemoryCryptoProvider 

pub struct MemoryCryptoProvider { /* private fields */ }

Encrypts/decrypts individual memory text fields according to the active crypto mode. Cheap to clone.

Implementations

impl MemoryCryptoProvider

pub fn plaintext() -> Self

A no-op provider: fields are stored and read as plaintext.

pub fn local_key(key: [u8; 32]) -> Self

A local AES-256-GCM provider backed by the given 256-bit key.

pub fn from_env() -> Self

Resolve the provider from the environment-selected crypto mode.

pub fn from_mode(mode: MemoryCryptoMode) -> Self

Build a provider for an explicit crypto mode.

pub fn is_plaintext(&self) -> bool

True when fields are stored as plaintext (no encryption applied).

pub fn encrypt_field(&self, plaintext: &str) -> MemoryResult<String>

Encrypt a memory text field for storage. Plaintext mode returns the input unchanged; hosted-pending mode fails closed.

pub fn decrypt_field(&self, stored: &str) -> MemoryResult<String>

Decrypt a stored memory text field.

• In plaintext and local-encrypted modes, values without the encryption prefix are treated as legacy plaintext for compatibility.
• In hosted mode, plaintext rows are rejected to avoid leaving memory readable at rest under encryption-required semantics.

pub fn encrypt_optional( &self, value: Option<&str>, ) -> MemoryResult<Option<String>>

Encrypt an optional JSON-ish metadata string if present.

pub fn decrypt_optional( &self, value: Option<&str>, ) -> MemoryResult<Option<String>>

Decrypt an optional stored field if present.

Trait Implementations

impl Clone for MemoryCryptoProvider

fn clone(&self) -> MemoryCryptoProvider

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MemoryCryptoProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for MemoryCryptoProvider

fn default() -> Self

Returns the “default value” for a type.