Struct EncryptionSettings

pub struct EncryptionSettings {
    user_key: SymmetricCryptoKey,
    pub(crate) private_key: Option<AsymmetricCryptoKey>,
    org_keys: HashMap<Uuid, SymmetricCryptoKey>,
}

Fields

user_key: SymmetricCryptoKey

private_key: Option<AsymmetricCryptoKey>

org_keys: HashMap<Uuid, SymmetricCryptoKey>

Implementations

impl EncryptionSettings

pub(crate) fn new( master_key: MasterKey, user_key: EncString, private_key: EncString, ) -> Result<Self, EncryptionSettingsError>

Initialize the encryption settings with the master key and the encrypted user keys

pub(crate) fn new_decrypted_key( user_key: SymmetricCryptoKey, private_key: EncString, ) -> Result<Self, EncryptionSettingsError>

Initialize the encryption settings with the decrypted user key and the encrypted user private key This should only be used when unlocking the vault via biometrics or when the vault is set to lock: “never” Otherwise handling the decrypted user key is dangerous and discouraged

pub(crate) fn new_single_key(key: SymmetricCryptoKey) -> Self

Initialize the encryption settings with only a single decrypted key. This is used only for logging in Secrets Manager with an access token

pub(crate) fn set_org_keys( &mut self, org_enc_keys: Vec<(Uuid, AsymmetricEncString)>, ) -> Result<&Self, EncryptionSettingsError>

pub fn get_key( &self, org_id: &Option<Uuid>, ) -> Result<&SymmetricCryptoKey, CryptoError>

Trait Implementations

impl Clone for EncryptionSettings

fn clone(&self) -> EncryptionSettings

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncryptionSettings

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl KeyContainer for EncryptionSettings

fn get_key( &self, org_id: &Option<Uuid>, ) -> Result<&SymmetricCryptoKey, CryptoError>