Crate zopp_secrets

Crate zopp_secrets 

Source

Structs§

EncryptedSecret
Result of encrypting a secret
SecretContext
High-level context for encrypting and decrypting secrets. Bundles principal key, workspace keys, and environment to hide all crypto details.

Enums§

SecretsError

Functions§

decrypt_secret_with_dek
Decrypt a single secret given a raw DEK and environment context. This is a lower-level helper useful when you have a cached DEK.
unwrap_dek
Unwrap an environment DEK given workspace keys and environment data. This is a lower-level helper useful for caching DEKs (e.g., in the operator). Returns the raw 32-byte DEK.