Trait KekSource 

pub trait KekSource:
    Send
    + Sync
    + 'static {
    // Required methods
    fn load_keyring(
        &self,
    ) -> Pin<Box<dyn Future<Output = Result<Vec<(KeyId, Vec<DataKey>)>, CryptoError>> + Send + '_>>;
    fn provision(
        &self,
        id: &KeyId,
    ) -> Pin<Box<dyn Future<Output = Result<DataKey, CryptoError>> + Send + '_>>;
    fn destroy(
        &self,
        id: &KeyId,
    ) -> Pin<Box<dyn Future<Output = Result<(), CryptoError>> + Send + '_>>;
}

Required Methods

fn load_keyring( &self, ) -> Pin<Box<dyn Future<Output = Result<Vec<(KeyId, Vec<DataKey>)>, CryptoError>> + Send + '_>>

Unwrap and return every (key, all live versions) pair. Called once at boot; the result seeds the in-memory ring.

fn provision( &self, id: &KeyId, ) -> Pin<Box<dyn Future<Output = Result<DataKey, CryptoError>> + Send + '_>>

Create + persist (wrapped) the next version of id — version 1 if the key is new. Returns the unwrapped DEK.

fn destroy( &self, id: &KeyId, ) -> Pin<Box<dyn Future<Output = Result<(), CryptoError>> + Send + '_>>

Destroy every wrapped version of id permanently. After this returns the data sealed under id is unrecoverable from any sink.

Dyn Compatibility

This trait is dyn compatible.

In older versions of Rust, dyn compatibility was called "object safety".

Implementors