Skip to main content

STATIC_KEY_EPOCH

Constant STATIC_KEY_EPOCH 

Source
pub const STATIC_KEY_EPOCH: u32 = 1;
Expand description

Epoch a locally held key resolves at.

A file or environment variable holds one piece of material and has no notion of versions, so it is always epoch 1. Rotating such a key means naming a different identity — which is what corium keys rewrap --kek takes — rather than bumping an epoch the source cannot represent.