Struct SecretKey 

pub struct SecretKey(/* private fields */);

A 32-byte derived key that is zeroed on drop.

Security

This type holds derived key material (never the root key itself). It is handed out by KeyVault for purpose-specific operations (index encryption, stash encryption, etc.).

Implementations

impl SecretKey

pub fn new(bytes: [u8; 32]) -> SecretKey

Create a new SecretKey from raw bytes.

pub fn as_bytes(&self) -> &[u8; 32]

Get the underlying bytes as a reference.

Security

This is intentionally available for callers that need to pass the key to low-level AEAD operations. The bytes should never be copied into long-lived storage.

pub fn generate() -> SecretKey

Generate a new random SecretKey.

Trait Implementations

impl AsRef<[u8]> for SecretKey

fn as_ref(&self) -> &[u8]

Converts this type into a shared reference of the (usually inferred) input type.

impl Clone for SecretKey

fn clone(&self) -> SecretKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Drop for SecretKey

fn drop(&mut self)

Executes the destructor for this type.

impl Zeroize for SecretKey

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.