Struct PeerIdentityManager 

pub struct PeerIdentityManager { /* private fields */ }

Manages the Ed25519 peer identity key with rotation support.

Example

use std::path::Path;
use ipfrs_network::identity::PeerIdentityManager;

let mut mgr = PeerIdentityManager::load_or_generate(Path::new(".ipfrs/identity.key"))
    .expect("identity load/generate");

println!("PeerId: {}", mgr.peer_id());
println!("Rotations so far: {}", mgr.rotation_count());

Implementations

impl PeerIdentityManager

pub fn load_or_generate(key_path: &Path) -> Result<Self, IdentityError>

Load the identity keypair from key_path, or generate a fresh Ed25519 keypair and persist it if the file does not exist.

pub fn rotate(&mut self) -> Result<PeerId, IdentityError>

Rotate the peer identity key.

1. Generates a fresh Ed25519 keypair.
2. Atomically writes the new keypair to disk (temp-file + rename).
3. Moves the current keypair into previous_keypairs.
4. Returns the new PeerId.

pub fn peer_id(&self) -> PeerId

Return the PeerId of the currently active keypair.

pub fn rotation_count(&self) -> u32

Return how many key rotations have been performed during the lifetime of this manager instance.

pub fn rotation_history(&self) -> &[RotationRecord]

Return the complete rotation history recorded since this manager was created.

pub fn previous_keypairs(&self) -> &[PreviousKeypair]

Return the list of previous (retired) keypairs still in the grace-period buffer.

pub fn keypair(&self) -> &Keypair

Return a reference to the active keypair for use in the libp2p swarm.

pub fn export_public_key_pem(&self) -> String

Export the current public key as a PEM-encoded SubjectPublicKeyInfo block.

The encoding follows RFC 5480 / RFC 8410: the public key bytes are wrapped in a DER SubjectPublicKeyInfo structure and then base64- encoded with standard PEM delimiters.

Format:

-----BEGIN PUBLIC KEY-----
<base64-encoded SubjectPublicKeyInfo DER>
-----END PUBLIC KEY-----

pub fn save(&self) -> Result<(), IdentityError>

Save the current keypair to disk atomically.

Writes the protobuf-encoded keypair bytes to a temporary file in the same directory as key_path, then renames it into place. This ensures that a crash mid-write cannot leave the key file in a corrupt state.

pub fn prune_retired(&mut self, max_age: Duration)

Remove retired keypairs older than max_age from the grace-period buffer.

Call this periodically (e.g., once per hour) to prevent unbounded memory growth when many rotations have been performed.