Struct EncryptionManager 

pub struct EncryptionManager { /* private fields */ }

File-level encryption manager using two-layer envelope encryption.

Uses an async cache for unwrapped KEK bytes to avoid repeated KMS calls.

Implementations

impl EncryptionManager

pub fn builder() -> EncryptionManagerBuilder<((), (), (), (RwLock<HashMap<String, EncryptedKey>>,))>

Create a builder for building EncryptionManager. On the builder, call .kms_client(...), .key_size(...)(optional), .table_key_id(...) to set the values of the fields. Finally, call .build() to create the instance of EncryptionManager.

impl EncryptionManager

pub fn encrypt(&self, raw_output: OutputFile) -> EncryptedOutputFile

Encrypt a file with AGS1 stream encryption.

Returns an EncryptedOutputFile that transparently encrypts on write, along with key metadata for later decryption.

pub async fn encrypt_manifest_list_key_metadata( &self, key_metadata: &StandardKeyMetadata, ) -> Result<String>

Wrap a manifest list key metadata with a KEK for storage in table metadata.

Stores the resulting wrapped entry (and any newly created KEK) in the manager’s internal encryption_keys map. Callers persist the full set at commit time via Self::encryption_keys.

Returns the key_id of the wrapped entry, which should be recorded on the snapshot as encryption_key_id so readers can locate it later.

pub async fn decrypt_manifest_list_key_metadata( &self, encryption_key_id: &str, ) -> Result<StandardKeyMetadata>

Decrypt a manifest list key metadata previously wrapped via Self::encrypt_manifest_list_key_metadata.

Looks up the entry by encryption_key_id (typically read from the snapshot) in the manager’s encryption_keys map.

pub fn with_encryption_keys<F, R>(&self, f: F) -> R

where F: FnOnce(&HashMap<String, EncryptedKey>) -> R,

Borrow the encryption keys held by this manager.

Use at commit time to persist newly created KEKs and wrapped manifest-list entries into TableMetadata.encryption_keys.

Trait Implementations

impl Debug for EncryptionManager

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.