Struct KeyManager 

pub struct KeyManager { /* private fields */ }

Key manager for storing and rotating encryption keys.

Implementations

impl KeyManager

pub fn new() -> Self

Create a new key manager.

pub fn generate_key( &self, algorithm: EncryptionAlgorithm, rotation_period_days: Option<u32>, ) -> Result<String>

Generate a new key.

pub fn add_key( &self, key_id: String, key: Vec<u8>, algorithm: EncryptionAlgorithm, rotation_period_days: Option<u32>, ) -> Result<()>

Add an existing key.

pub fn get_key(&self, key_id: &str) -> Result<(Vec<u8>, KeyMetadata)>

Get a key by ID.

pub fn get_current_key(&self) -> Result<(String, Vec<u8>, KeyMetadata)>

Get the current active key.

pub fn set_current_key(&self, key_id: String) -> Result<()>

Set the current active key.

pub fn rotate_key(&self) -> Result<String>

Rotate the current key.

pub fn list_keys(&self) -> Vec<(String, KeyMetadata)>

List all keys.

pub fn list_expired_keys(&self) -> Vec<(String, KeyMetadata)>

List expired keys.

pub fn list_keys_needing_rotation(&self) -> Vec<(String, KeyMetadata)>

List keys that need rotation.

pub fn delete_key(&self, key_id: &str) -> Result<()>

Delete a key.

pub fn create_encryptor(&self, key_id: &str) -> Result<AtRestEncryptor>

Create an encryptor for a specific key.

pub fn create_current_encryptor(&self) -> Result<AtRestEncryptor>

Create an encryptor for the current key.

pub fn key_count(&self) -> usize

Get the number of keys.

pub fn clear(&self)

Clear all keys.

Trait Implementations

impl Default for KeyManager

fn default() -> Self

Returns the “default value” for a type.