Struct bonsaidb::local::vault::LocalVaultKeyStorage[][src]

pub struct LocalVaultKeyStorage { /* fields omitted */ }
Expand description

Stores vault key locally on disk. This is in general considered insecure, and shouldn’t be used without careful consideration.

The primary goal of encryption within BonsaiDb is to offer limited encryption at-rest. Within these goals, the primary attack vector being protected against is an attacker being able to copy the data off of the disks, either by physically gaining access to the drives or having filesystem access. By storing the vault key on the same physical media, the encryption should be considered insecure because if you can gain access to the data, you have access to the keys as well.

For production environments, it is much more secure to store the vault key in a separate location. We recommand any S3-compatible backend.

Implementations

Creates a new file-based vaultr key storage, storing files within path. The path provided shouod be a directory. If it doesn’t exist, it will be created.

Trait Implementations

Returns a copy of the value. Read more

Performs copy-assignment from source. Read more

Formats the value using the given formatter. Read more

The error type that the functions return.

Retrieve all previously stored vault key for a given storage id.

Store a key. Each server id should have unique storage.

Auto Trait Implementations

Blanket Implementations

Gets the TypeId of self. Read more

Retrieve all previously stored master keys for a given storage id.

Store a key. Each server id should have unique storage. The keys are uniquely encrypted per storage id and can only be decrypted by keys contained in the storage itself. Read more

Immutably borrows from an owned value. Read more

Mutably borrows from an owned value. Read more

Performs the conversion.

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more

Instruments this type with the current Span, returning an Instrumented wrapper. Read more

Performs the conversion.

The alignment of pointer.

The type for initializers.

Initializes a with the given initializer. Read more

Dereferences the given pointer. Read more

Mutably dereferences the given pointer. Read more

Drops the object pointed to by the given pointer. Read more

Should always be Self

The resulting type after obtaining ownership.

Creates owned data from borrowed data, usually by cloning. Read more

🔬 This is a nightly-only experimental API. (toowned_clone_into)

Uses borrowed data to replace owned data, usually by cloning. Read more

The type returned in the event of a conversion error.

Performs the conversion.

The type returned in the event of a conversion error.

Performs the conversion.

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more