Struct StorageEncryption 

pub struct StorageEncryption {
    key: [u8; 32],
}

A context for encrypting and decrypting data at rest.

The key is derived from a password and salt using Argon2id.

Fields

key: [u8; 32]

Implementations

impl StorageEncryption

pub fn new(password: &str, salt: &[u8]) -> Result<Self>

Creates a new StorageEncryption context.

Arguments

• password - The password to use for key derivation.
• salt - A 16-byte salt to use for key derivation.

Errors

This function will return an error if the salt is not 16 bytes long or if key derivation fails.

pub fn generate_salt() -> [u8; 16]

Generates a new random 16-byte salt.

pub fn encrypt_value(&self, data: &[u8]) -> Result<Vec<u8>>

Encrypts a byte slice.

Arguments

• data - The data to encrypt.

Returns

A vector containing the nonce and the ciphertext.

Errors

This function will return an error if encryption fails.

pub fn decrypt_value(&self, ciphertext: &[u8]) -> Result<Vec<u8>>

Decrypts a byte slice.

Arguments

• ciphertext - The data to decrypt (nonce prepended).

Returns

A vector containing the plaintext.

Errors

This function will return an error if decryption fails.

pub fn derive_recipient_hash(public_key: &[u8]) -> [u8; 32]

Derives a hash of a recipient’s public key.

This is used to create a unique identifier for a recipient in the mailbox storage, without revealing the public key itself.

Arguments

• public_key - The public key of the recipient.

Trait Implementations

impl Clone for StorageEncryption

fn clone(&self) -> StorageEncryption

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.