Struct KeyRegistry 

pub struct KeyRegistry { /* private fields */ }

Authoritative registry of master keys and operational-key epochs.

Implementations

impl KeyRegistry

pub fn new() -> Self

Construct an empty registry.

pub fn register_author( &mut self, author: AuthorId, master_key: VerifyingKey, initial_operational_key: VerifyingKey, created_at_version: u64, ) -> Result<()>

Register a new author with a master key and an initial operational key (epoch 0).

Errors

Returns Err if the author is already registered.

pub fn apply_rotation(&mut self, record: &KeyRotationRecord) -> Result<()>

Apply a rotation record to the registry.

Errors

Returns Err if:

• the author is unknown,
• from_epoch is not the current active epoch,
• to_epoch != from_epoch + 1,
• effective_from_version precedes the current active epoch’s created_at_version,
• the master signature does not verify.

pub fn apply_revocation(&mut self, record: &RevocationRecord) -> Result<()>

Apply a revocation record to the registry.

Errors

Returns Err if the author / epoch is unknown, the epoch is already revoked, or the master signature does not verify.

pub fn active_epoch_at( &self, author: AuthorId, version_number: u64, ) -> Option<&KeyEpoch>

Return the operational epoch that was valid for author at version_number, or None if no epoch covers that version.

pub fn master_key(&self, author: AuthorId) -> Option<&VerifyingKey>

Return the registered master key for author, if any.

pub fn epochs_for(&self, author: AuthorId) -> &[KeyEpoch]

Return every recorded epoch for author, in insertion order.

pub fn insert_epoch_unchecked( &mut self, author: AuthorId, epoch: u32, public_key: [u8; 32], active_from_version: u64, ) -> Result<()>

Append an epoch to author without verifying a signed rotation record.

The caller is asserting that this registry is itself the trust anchor — e.g. a pinning file the operator brings to verification. Self::apply_rotation is the signed-record path and is the correct choice when the rotation arrives from an untrusted source (transparency log, network peer).

The prior active epoch is transitioned to KeyStatus::Rotated at active_from_version. The new epoch is inserted with KeyStatus::Active status.

Errors

Returns Err if:

• the author is not registered,
• epoch is not strictly greater than every existing epoch for this author,
• active_from_version is not strictly greater than the prior active epoch’s created_at_version,
• the author currently has no active epoch (i.e. the prior epoch is already revoked or rotated).

pub fn insert_revocation_unchecked( &mut self, author: AuthorId, epoch: u32, reason: RevocationReason, effective_from_version: u64, ) -> Result<()>

Mark epoch as revoked for author without verifying a signed revocation record.

See Self::insert_epoch_unchecked for when this is the correct path vs. Self::apply_revocation.

Errors

Returns Err if the author / epoch is unknown or already revoked.

pub fn from_trusted_json(input: &str) -> Result<Self>

Load a trusted registry from the CLI JSON file format.

The on-disk shape is:

{
  "version": 1,
  "authors": [
    {
      "author_id": 50001,
      "master_key": "<base64-32-bytes>",
      "epochs": [
        { "epoch": 0, "public_key": "<base64-32-bytes>", "active_from_version": 0 }
      ],
      "revocations": []
    }
  ]
}

This is a trusted load: every epoch and revocation is inserted via the _unchecked path. Use it for operator- supplied pinning files; use Self::apply_rotation and Self::apply_revocation for records that arrived from an untrusted source.

Errors

Returns Err if the JSON is malformed, the format version is not 1, any base64 field does not decode to exactly 32 bytes, any author appears twice, any epoch number repeats or is non-monotonic within an author, or any revocation points at an unknown epoch.

pub fn to_trusted_json(&self) -> Result<String>

Serialize the registry to the trusted-JSON format parsed by Self::from_trusted_json. Authors and epochs are emitted in stable, sorted order (author_id ascending, then epoch ascending) so output is deterministic.

Errors

Returns Err if serde_json fails to serialize — which in practice does not happen with the on-disk shape this method constructs.

Trait Implementations

impl Debug for KeyRegistry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for KeyRegistry

fn default() -> KeyRegistry

Returns the “default value” for a type.