Struct KeyWrapper 

pub struct KeyWrapper { /* private fields */ }

Key wrapper using AES-256-GCM

Implementations

impl KeyWrapper

pub fn new(kek: &KeyEncryptionKey) -> Result<Self, KeyWrapError>

Create a new key wrapper with the given KEK

pub fn wrap(&self, key: &[u8], key_id: &str) -> Result<WrappedKey, KeyWrapError>

Wrap a key

pub fn unwrap(&self, wrapped: &WrappedKey) -> Result<Vec<u8>, KeyWrapError>

Unwrap a key

pub fn rewrap( &self, wrapped: &WrappedKey, new_wrapper: &KeyWrapper, ) -> Result<WrappedKey, KeyWrapError>

Rewrap a key with a new KEK