Struct StaticKeyProvider 

pub struct StaticKeyProvider { /* private fields */ }

A key provider holding an active key and zero or more previous keys, in memory. Suitable for production when constructed from real secret material loaded at startup, and for tests/examples.

There is deliberately no Default or empty constructor that would yield a usable-but-keyless provider: you must supply real bytes (INV-2).

Implementations

impl StaticKeyProvider

pub fn new( active_version: impl Into<String>, active_key: Vec<u8>, previous: Vec<(KeyVersion, Vec<u8>)>, ) -> Result<Self, KeyError>

Construct from an active version+key and optional previous versions.

Errors

KeyError::InvalidKeyMaterial if the active key is empty.

pub fn single( version: impl Into<String>, key: Vec<u8>, ) -> Result<Self, KeyError>

Convenience constructor with a single key and no previous versions.

Errors

KeyError::InvalidKeyMaterial if key is empty.

Trait Implementations

impl Clone for StaticKeyProvider

fn clone(&self) -> StaticKeyProvider

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for StaticKeyProvider

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl KeyProvider for StaticKeyProvider

fn active_hmac_key(&self) -> Result<HmacKeyRef<'_>, KeyError>

The active key used for new derivations.

fn hmac_key_by_version( &self, version: &KeyVersion, ) -> Result<HmacKeyRef<'_>, KeyError>

A specific historical key, for validating records written under an older version during rotation.