Struct FileStore 

pub struct FileStore { /* private fields */ }

File-based key store with optional encryption

Provides persistent storage of cryptographic keys with optional encryption at rest The key are cached in memory for performamce and automatically loaded from disk

Implementations

impl FileStore

pub fn new<P: AsRef<Path>>(path: P, config: StorageConfig) -> Result<Self>

Create a new FileStore at the given path

pub fn set_master_key(&mut self, key: SecretKey) -> Result<()>

Set master key for encryption

pub fn init_with_password(&mut self, password: &[u8]) -> Result<()>

Initialize with password-derived master key (now using Argon2)

pub fn derive_master_key(password: &[u8], salt: &[u8]) -> Result<SecretKey>

Derive a master key from a password using Argon2id

Trait Implementations

impl EncryptedStore for FileStore

fn init_with_password(&mut self, password: &[u8]) -> Result<()>

Initialise with password-derived master key

fn is_unlocked(&self) -> bool

Check if the store is unlocked (has a master key available)

Returns true if a master key has been set and the store can decrypt keys

fn rekey(&mut self, new_password: &[u8]) -> Result<()>

Re-encrypt all keys with a new master key

impl KeyLifeCycle for FileStore

fn deprecate_key(&mut self, id: &KeyId) -> Result<()>

Mark a particular key as deprecated (key should be able to decrypt but not encrypt)

fn revoke_key(&mut self, id: &KeyId) -> Result<()>

Revoke a key (key should not be used for any operations)

fn cleanup_old_versions( &mut self, id: &KeyId, keep_versions: usize, ) -> Result<Vec<KeyId>>

Clean up old versions based on policy

impl KeyStore for FileStore

fn store(&mut self, key: VersionedKey) -> Result<()>

Store a versioned key

fn retrieve(&self, id: &KeyId) -> Result<VersionedKey>

Retrieve a key by ID

fn delete(&mut self, id: &KeyId) -> Result<()>

Delete a key

fn list(&self) -> Result<Vec<KeyId>>

List all kety IDs

fn update_metadata(&mut self, id: &KeyId, metadata: KeyMetadata) -> Result<()>

Update key metadata

fn find_by_state(&self, state: KeyState) -> Result<Vec<KeyId>>

Find keys by state

fn rotate_key(&mut self, id: &KeyId) -> Result<VersionedKey>

Rotate a key to a new version

fn get_key_versions(&self, id: &KeyId) -> Result<Vec<VersionedKey>>

Get all verions of a key (sorted by version number)

fn get_latest_key(&self, id: &KeyId) -> Result<VersionedKey>

Get the latest active version of a key

impl PersistentStorage for FileStore

fn flush(&mut self) -> Result<()>

Flush any pending writes to persistent storage

fn load(&mut self) -> Result<()>

Load keys from persistent storage

fn location(&self) -> &str

Get the storage location/path