Struct SigningKeyHistory 

pub struct SigningKeyHistory { /* private fields */ }

Append-only public-key history for one signing role.

The record contains public identities only. Custody persists the current private key under a separate secret reference and stores this record as the durable verification history.

Implementations

impl SigningKeyHistory

pub fn current<R: SigningRole>(signer: &RoleSigner<R>) -> Self

Starts a history at one role’s current signer.

pub const fn current_identity(&self) -> &SigningKeyIdentity

Public identity recorded as current.

pub fn retired_identities(&self) -> &[SigningKeyIdentity]

Append-only public identities recorded as retired.

pub fn reconcile<R: SigningRole>( &mut self, current: &SigningKeyIdentity, ) -> Result<(RoleTrustSet<R>, bool), SigningIdentityError>

Reconciles a stored history with the current signer identity.

A rotation appends the previous current identity to retired. Cycling back to an earlier key never removes it from the stored retired set, while the returned trust set lists each identity once with current first.

Errors

Refuses a malformed identity, an identity from another role, or a duplicate retired identity.

Trait Implementations

impl Clone for SigningKeyHistory

fn clone(&self) -> SigningKeyHistory

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SigningKeyHistory

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SigningKeyHistory

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SigningKeyHistory

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.