Struct StaticKeyring 

pub struct StaticKeyring { /* private fields */ }

In-memory keyring for tests and keys loaded from files or environment variables by a higher-level configuration layer.

Implementations

impl StaticKeyring

pub fn resolve(ids: impl IntoIterator<Item = KeyId>) -> Result<Self, KeyError>

Resolves each identity from its own source and returns the keyring.

Resolution happens once, here, so a misconfigured process fails at startup naming the key it could not read, rather than at its first blob read.

Errors

Returns KeyError when any identity names an unsupported scheme, cannot be read, or does not hold 256 bits of material.

pub fn insert(&mut self, id: KeyId, epoch: u32, key: SecretKey, current: bool)

Inserts material and optionally makes its epoch current for writes.

Trait Implementations

impl Clone for StaticKeyring

fn clone(&self) -> StaticKeyring

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for StaticKeyring

fn default() -> StaticKeyring

Returns the “default value” for a type.

impl Keyring for StaticKeyring

fn key<'life0, 'life1, 'async_trait>( &'life0 self, id: &'life1 KeyId, epoch: u32, ) -> Pin<Box<dyn Future<Output = Result<SecretKey, KeyError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Resolves material for a specific epoch.

fn current_epoch<'life0, 'life1, 'async_trait>( &'life0 self, id: &'life1 KeyId, ) -> Pin<Box<dyn Future<Output = Result<u32, KeyError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Returns the epoch new writes should use.

fn wrap<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, id: &'life1 KeyId, epoch: u32, dek: &'life2 SecretKey, ) -> Pin<Box<dyn Future<Output = Result<Vec<u8>, KeyError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Wraps a data-encryption key under the requested key and epoch.

fn unwrap<'life0, 'life1, 'life2, 'async_trait>( &'life0 self, id: &'life1 KeyId, epoch: u32, wrapped: &'life2 [u8], ) -> Pin<Box<dyn Future<Output = Result<SecretKey, KeyError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait, 'life2: 'async_trait,

Unwraps a stored data-encryption key.

fn key_ids(&self) -> &[KeyId]

Lists the key identities this process can resolve.