Method finish

nodedb-array/src/segment/writer.rs:92–110

Finalise the segment by appending the footer + trailer. Consumes the writer and returns the complete byte vector. When `kek` is `Some`, the assembled plaintext buffer is wrapped in an AES-256-GCM `SEGA` envelope before being returned. When `None`, the raw `NDAS` segment bytes are returned.

(
        mut self,
        kek: Option<&nodedb_wal::crypto::WalEncryptionKey>,
    )

    /// AES-256-GCM `SEGA` envelope before being returned. When `None`, the
    /// raw `NDAS` segment bytes are returned.
    pub fn finish(
        mut self,
        kek: Option<&nodedb_wal::crypto::WalEncryptionKey>,
    ) -> ArrayResult<Vec<u8>> {
        if self.finished {
            return Err(ArrayError::SegmentCorruption {
                detail: "SegmentWriter::finish called twice".into(),
            });
        }
        let footer = SegmentFooter::new(self.schema_hash, std::mem::take(&mut self.entries));
        footer.encode_to(&mut self.buf)?;
        self.finished = true;

        if let Some(key) = kek {
            return super::encrypt::encrypt_segment(key, &self.buf);
        }

        Ok(self.buf)
    }

    pub fn header_size(&self) -> usize {
        HEADER_SIZE