Struct VeilContext 

pub struct VeilContext { /* private fields */ }

Main entry point for veil operations.

Implementations

impl VeilContext

pub fn with_backend(backend: Box<dyn TeeBackend>) -> Result<Self>

Create a VeilContext with a specific backend (for testing or advanced use). Calls initialize_primary_key() on the backend.

pub fn protect(&mut self, data: &[u8]) -> Result<ProtectedData>

Protect data by generating a Data Key, encrypting, and wrapping. The returned ProtectedData can be serialized and stored anywhere.

pub fn unprotect(&mut self, protected: &ProtectedData) -> Result<Vec<u8>>

Decrypt protected data. Requires the same TEE that produced it.

pub fn backup( &self, protected: &ProtectedData, strategy: &dyn RecoveryStrategy, secret: Option<&[u8]>, ) -> Result<BackupBundle>

Backup protected data using a chosen recovery strategy.

secret is strategy-specific (e.g., passphrase bytes for PassphraseRecovery).

pub fn restore( &self, bundle: &BackupBundle, ciphertext: &[u8], strategy: &dyn RecoveryStrategy, secret: &[u8], ) -> Result<ProtectedData>

Restore protected data from a backup using the matching recovery strategy.