Struct AuditKeypair 

pub struct AuditKeypair {
    pub public: [u8; 32],
    /* private fields */
}

An audit keypair. The public key is exposed to any session (including the decoy) so it can append sealed records; the secret lives only in the real lane (wrapped under the real key) and is the sole means of reading them.

Fields

public: [u8; 32]

Implementations

impl AuditKeypair

pub fn generate() -> Result<Self, SanctuaryAuditError>

pub fn from_secret(secret: [u8; 32]) -> Self

Construct a keypair from a caller-supplied 32-byte secret (e.g. a KDF-derived key). Lets an envelope keypair be re-derived from a root secret rather than stored at rest. StaticSecret::from clamps the scalar deterministically, so any 32 bytes are a valid secret and seal_to(public) / open_sealed(secret) stay consistent.

pub fn secret_bytes(&self) -> &[u8; 32]

The secret half — hold this only inside the real lane.

Trait Implementations

impl Drop for AuditKeypair

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl Zeroize for AuditKeypair

fn zeroize(&mut self)

Zero out this object from memory using Rust intrinsics which ensure the zeroization operation is not “optimized away” by the compiler.