Struct FieldEncryption

pub struct FieldEncryption { /* private fields */ }

Main encryption service for field-level encryption

Implementations

impl FieldEncryption

pub fn new() -> Result<Self, EncryptionError>

Creates a new FieldEncryption instance using a key from environment variables

Environment Variables

• STORAGE_ENCRYPTION_KEY: Base64-encoded 32-byte encryption key

pub fn new_with_key(key: &[u8; 32]) -> Result<Self, EncryptionError>

Creates a new FieldEncryption instance with a provided key (for testing)

pub fn encrypt( &self, plaintext: &[u8], ) -> Result<EncryptedData, EncryptionError>

Encrypts plaintext data and returns an EncryptedData structure

pub fn decrypt( &self, encrypted_data: &EncryptedData, ) -> Result<Vec<u8>, EncryptionError>

Decrypts an EncryptedData structure and returns the plaintext

pub fn encrypt_string(&self, plaintext: &str) -> Result<String, EncryptionError>

Encrypts a string and returns base64-encoded encrypted data (opaque format)

pub fn decrypt_string( &self, encrypted_base64: &str, ) -> Result<String, EncryptionError>

Decrypts a base64-encoded encrypted string

pub fn generate_key() -> String

Utility function to generate a new encryption key for setup

pub fn is_configured() -> bool

Checks if encryption is properly configured

Trait Implementations

impl Clone for FieldEncryption

fn clone(&self) -> FieldEncryption

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.