Struct Cipher 

pub struct Cipher { /* private fields */ }

Encrypts and decrypts serializable values with AES-256-GCM.

The active key encrypts new values, while the key ID embedded in an existing envelope selects its decryption key.

Implementations

impl Cipher

pub fn ephemeral() -> Result<Self>

Constructs a cipher with a fresh process-local AES-256-GCM key.

Values encrypted with this key cannot be decrypted after a service restart. Configure a persistent keyring with Self::new when encrypted values must survive restarts.

Returns an error if secure random key generation fails.

pub fn new( active_key_id: impl Into<String>, keys: BTreeMap<String, Vec<u8>>, ) -> Result<Self>

Validates and constructs a cipher from raw AES-256-GCM keys.

Returns an error for invalid key IDs or sizes, or when the active key is absent.

Trait Implementations

impl Debug for Cipher

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.