Struct ContentKey 

pub struct ContentKey(/* private fields */);

A 32-byte content key derived from a commit’s envelope nonce.

Security

This newtype prevents accidentally passing a root key where a content key is expected (or vice versa). Construction is restricted to pub(crate) so only void-crypto can mint content keys.

Implementations

impl ContentKey

pub fn from_hex(hex: &str) -> Result<ContentKey, CryptoError>

Parse a content key from a hex string.

Used for scoped read-only access via --content-key CLI flag. The content key grants access to a single commit’s data without requiring the root encryption key.

pub fn as_bytes(&self) -> &[u8; 32]

Access the underlying bytes for low-level crypto calls.

Security

Needed for passing to AEAD encrypt/decrypt. The bytes are a per-commit derived key, not the root key.

Trait Implementations

impl Clone for ContentKey

fn clone(&self) -> ContentKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ContentKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ContentKey

fn deserialize<__D>( __deserializer: __D, ) -> Result<ContentKey, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for ContentKey

fn eq(&self, other: &ContentKey) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ContentKey

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Zeroize for ContentKey

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.

impl Copy for ContentKey

impl Eq for ContentKey

impl StructuralPartialEq for ContentKey