Struct KeyRing 

pub struct KeyRing { /* private fields */ }

Key ring for managing multiple key versions.

Supports key rotation by maintaining multiple key versions. New encryptions use the active key, decryptions use the version embedded in the ciphertext.

Implementations

impl KeyRing

pub fn new() -> Self

Create an empty key ring.

pub fn add_key(&mut self, key: VersionedKey)

Add a key to the ring.

pub fn active_key(&self) -> Option<&VersionedKey>

Get the active key for encryption.

pub fn get_key(&self, version: u32) -> Option<&VersionedKey>

Get a key by version for decryption.

pub fn rotate(&mut self, new_key: EncryptionKey) -> u32

Rotate to a new key.

pub fn all_keys(&self) -> &[VersionedKey]

Get all keys (for re-encryption during rotation).

pub fn len(&self) -> usize

Number of keys in the ring.

pub fn is_empty(&self) -> bool

Check if the ring is empty.

Trait Implementations

impl Debug for KeyRing

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for KeyRing

fn default() -> KeyRing

Returns the “default value” for a type.