Struct DecryptionKeyOptions 

pub struct DecryptionKeyOptions { /* private fields */ }

Mint-time policy for decryption-keys, following the package-wide options contract (see README.md). The two grants separate disclosure from minting: decrypt returns plaintext to the caller, while unwrap mints keys whose material the caller never sees — a key granted only can-unwrap cannot leak what it transports (the derive-bits/derive-key split’s reasoning).

Implementations

impl DecryptionKeyOptions

pub fn new() -> Self

impl DecryptionKeyOptions

pub fn can_decrypt(&self, allowed: bool)

Whether the minted key may decrypt. Disabled by default.

impl DecryptionKeyOptions

pub fn can_unwrap(&self, allowed: bool)

Whether the minted key may unwrap. Disabled by default.

impl DecryptionKeyOptions

pub fn extractable(&self, allowed: bool)

Whether the minted key’s material may be exported (decryption-key.export-key-jwk/-pkcs8 and the to-wrap-input-* functions). Disabled by default.

Trait Implementations

impl Debug for DecryptionKeyOptions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.