Struct SensitiveBytes 

pub struct SensitiveBytes<const N: usize, O> { /* private fields */ }

N is the byte length and O is a chosen zero-sized type that lets the type system track where the bytes came from (BIP39 seed, dice entropy, AES key, decrypted KEF payload, etc…).

Example

use kdk_zeroize::SensitiveBytes;

// A caller-chosen marker type.
pub enum AesKey {}

type AesKey256 = SensitiveBytes<32, AesKey>;


let key = AesKey256::new([0u8; 32]);

Implementations

impl<const N: usize, O> SensitiveBytes<N, O>

pub const fn new(bytes: [u8; N]) -> Self

Wrap a [u8; N] as origin-tagged sensitive bytes.

pub fn as_slice(&self) -> &[u8]

Same bytes as Sensitive::expose_secret; the looser &[u8] return is fine for non-cryptographic reads (e.g. equality checks in tests).

Trait Implementations

impl<const N: usize, O> Debug for SensitiveBytes<N, O>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<const N: usize, O> Display for SensitiveBytes<N, O>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<const N: usize, O> Drop for SensitiveBytes<N, O>

fn drop(&mut self)

Executes the destructor for this type.

impl<const N: usize, O> Sensitive for SensitiveBytes<N, O>

type Inner = [u8; N]

The type whose bytes are the secret material.

fn expose_secret(&self) -> &[u8; N]

Explicit-secret-access getter. Mirrors the inherent expose_secret every sensitive type provides.

impl<const N: usize, O> SensitiveMut for SensitiveBytes<N, O>

fn expose_secret_mut(&mut self) -> &mut [u8; N]

Mutable explicit-secret-access getter.