Struct EncryptionKey 

pub struct EncryptionKey {
    pub id: String,
    pub name: String,
    pub key_material_encrypted: Vec<u8>,
    pub algorithm: String,
    pub version: u16,
    pub created_at: DateTime<Utc>,
    pub rotated_at: Option<DateTime<Utc>>,
    pub status: String,
    pub metadata: HashMap<String, String>,
}

Encryption key record

Fields

id: String

Unique key ID

name: String

Key name (e.g., “fraiseql/database-encryption”)

key_material_encrypted: Vec<u8>

Encrypted key material (stored as encrypted bytes)

algorithm: String

Encryption algorithm (e.g., “AES-256-GCM”)

version: u16

Version number (incremented on rotation)

created_at: DateTime<Utc>

When key was created

rotated_at: Option<DateTime<Utc>>

When key was last rotated

status: String

Key status: “active”, “rotating”, “retired”

metadata: HashMap<String, String>

Additional metadata (JSON)

Implementations

impl EncryptionKey

pub fn new( name: impl Into<String>, key_material_encrypted: Vec<u8>, algorithm: impl Into<String>, ) -> Self

Create new encryption key

pub fn start_rotation(self) -> Self

Mark key as rotating

pub fn complete_rotation(self, new_key_material: Vec<u8>) -> Self

Complete rotation and increment version

pub fn retire(self) -> Self

Retire key (for historical decryption only)

pub fn is_active(&self) -> bool

Check if key is active

pub fn is_rotating(&self) -> bool

Check if key is rotating

pub fn add_metadata( self, key: impl Into<String>, value: impl Into<String>, ) -> Self

Add metadata

Trait Implementations

impl Clone for EncryptionKey

fn clone(&self) -> EncryptionKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EncryptionKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EncryptionKey

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for EncryptionKey

fn eq(&self, other: &EncryptionKey) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for EncryptionKey

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for EncryptionKey

impl StructuralPartialEq for EncryptionKey