Struct RotateableKeySet 

pub struct RotateableKeySet { /* private fields */ }

A set of keys where a given DownstreamKey is protected by an encrypted public/private key-pair. The DownstreamKey is used to encrypt/decrypt data, while the public/private key-pair is used to rotate the DownstreamKey.

The PrivateKey is protected by an UpstreamKey, such as a DeviceKey, or PrfKey, and the PublicKey is protected by the DownstreamKey. This setup allows:

• Access to DownstreamKey by knowing the UpstreamKey
• Rotation to a NewDownstreamKey by knowing the current DownstreamKey, without needing access to the UpstreamKey

Implementations

impl RotateableKeySet

pub fn new<Ids: KeyIds>( ctx: &KeyStoreContext<'_, Ids>, upstream_key: &SymmetricCryptoKey, downstream_key_id: Ids::Symmetric, ) -> Result<Self, CryptoError>

Create a set of keys to allow access to the downstream key via the provided upstream key while allowing the downstream key to be rotated.

Trait Implementations

impl Debug for RotateableKeySet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for RotateableKeySet

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for RotateableKeySet

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.