aeat.adapters.persistence.storage.crypto package¶
Crypto substrate: AEAD primitives plus encrypted SQLAlchemy helpers.
Public surface for the at-rest crypto stack. Re-exports the AEAD
primitives (encrypt_record(), decrypt_record(),
derive_key(), EncryptedBlob, and the
KEY_SIZE / NONCE_SIZE / GCM_TAG_SIZE
constants) alongside the SQLAlchemy TypeDecorator set
(EncryptedString, EncryptedBytes,
EncryptedJSON, HashedLookup), the
EncryptedPayload JSON guard, and
secure_object_key_digest() for secure-object row AAD binding.
Column-level decrypt and encrypt operations resolve key bytes through
adapters.persistence.storage.master_key._active_session.get_active_master_key()
on the active
adapters.persistence.storage.master_key._bucket_session.BucketSession.
This facade only re-exports crypto objects; it does not acquire key
material or activate a session at import time.
Submodules¶
- aeat.adapters.persistence.storage.crypto._crypto module
- aeat.adapters.persistence.storage.crypto._encrypted_columns module