Struct lock_keeper::crypto::storage_key::RemoteStorageKey

pub struct RemoteStorageKey(pub(super) EncryptionKey);

The remote storage key is a default-length symmetric encryption key for an AEAD scheme.

The remote storage key is used by the key server to securely encrypt signing keys generated on (or plaintext imported to) the server.

Tuple Fields

0: EncryptionKey

Implementations

impl RemoteStorageKey

pub fn generate(rng: &mut (impl CryptoRng + RngCore)) -> Self

Generate a new 32-byte RemoteStorageKey.

pub fn read_from_file(path: impl AsRef<Path>) -> Result<Self, LockKeeperError>

Returns the remote storage key found in the file at the given path

pub fn from_bytes(bytes: &[u8]) -> Result<Self, LockKeeperError>

Returns the remote storage key found in the given bytes

pub fn encrypt_signing_key_pair( &self, rng: &mut (impl CryptoRng + RngCore), signing_key_pair: SigningKeyPair ) -> Result<Encrypted<SigningKeyPair>, LockKeeperError>

Encrypt the given SigningKeyPair under the RemoteStorageKey using an AEAD scheme.

pub fn encrypt_session_key( &self, rng: &mut (impl CryptoRng + RngCore), session_key: OpaqueSessionKey ) -> Result<Encrypted<OpaqueSessionKey>, LockKeeperError>

Encrypt the given OpaqueSessionKey under the RemoteStorageKey using an AEAD scheme.

pub fn encrypt_data_blob( &self, rng: &mut (impl CryptoRng + RngCore), data_blob: DataBlob ) -> Result<Encrypted<DataBlob>, LockKeeperError>

Encrypt the given DataBlob under the RemoteStorageKey using an AEAD scheme.

Trait Implementations

impl Clone for RemoteStorageKey

fn clone(&self) -> RemoteStorageKey

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RemoteStorageKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for RemoteStorageKey

fn drop(&mut self)

Executes the destructor for this type.

impl Zeroize for RemoteStorageKey

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.