Struct GcpKmsStore 

pub struct GcpKmsStore;

Trait Implementations

impl Debug for GcpKmsStore

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl KeyStore for GcpKmsStore

fn generate(&self, _spec: &KeySpec) -> Result<(Vec<u8>, Vec<u8>), JacsError>

fn load_private(&self) -> Result<LockedVec, JacsError>

Load the private key material. Returns LockedVec so that bytes remain mlock’d (pinned to RAM, excluded from core dumps) for the caller’s entire usage lifetime.

fn load_public(&self) -> Result<Vec<u8>, JacsError>

fn sign_detached( &self, _private_key: &[u8], _message: &[u8], _algorithm: &str, ) -> Result<Vec<u8>, JacsError>

fn rotate( &self, _old_version: &str, _spec: &KeySpec, ) -> Result<(Vec<u8>, Vec<u8>), JacsError>

Rotate keys: archive the current keypair with a version suffix and generate a new keypair at the standard paths. Returns (new_private_key, new_public_key).