Struct MultiEpochOrgCipher 

pub struct MultiEpochOrgCipher { /* private fields */ }

A multi-epoch org cipher: holds the per-epoch derived audience keys and, on decrypt, selects EXACTLY ONE by the envelope’s kid — it NEVER iterates the keyring (no trial-decrypt / wrong-key-acceptance). Encrypt always uses the NEWEST epoch held and stamps kid. This is what makes rotation expressible: a remaining member holding {N, N+1} decrypts old ops under N and new ops under N+1, deterministically. Fail-closed: an unknown kid, a missing kid, or an empty keyring all error (the op stays opaque) — never a wrong key.

Implementations

impl MultiEpochOrgCipher

pub fn new( audience: impl Into<String>, keys: BTreeMap<u64, Zeroizing<[u8; 32]>>, ) -> Self

Build over the per-epoch derived audience keys (see [OrgAwareKeyProvider]).

Trait Implementations

impl Debug for MultiEpochOrgCipher

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PayloadCipher for MultiEpochOrgCipher

fn encrypt(&self, plaintext: &Value) -> Result<Value, CryptoError>

Encrypt a cleartext payload into a ciphertext Envelope (as a Value).

fn decrypt(&self, envelope: &Value) -> Result<Value, CryptoError>

Recover the cleartext payload from a ciphertext Envelope. Fails (CryptoError::Decrypt) on a wrong key or any tamper.