Struct KeyRing 

pub struct KeyRing { /* private fields */ }

One active key for sealing plus any number of retired keys kept only for opening. This is what makes the master key rotatable: run with both, rewrap the store, then drop the old key.

Implementations

impl KeyRing

pub fn new(active: &[u8; 32], retired: &[[u8; 32]]) -> Self

pub fn active_key_id(&self) -> u32

pub fn retired_key_count(&self) -> usize

The number of keys that exist only to read old data. Zero means the store is fully rewrapped, or was never rotated.

Trait Implementations

impl Aead for KeyRing

fn seal(&self, plaintext: &[u8]) -> Result<Vec<u8>, CryptoError>

fn open(&self, blob: &[u8]) -> Result<Vec<u8>, CryptoError>

fn is_current(&self, blob: &[u8]) -> bool

Whether this blob is already sealed under the key seal would use. Rewrapping asks this so it can skip values that need no work; a single-key implementation has nothing to rotate to, hence the default.

fn active_key_id(&self) -> String

A short, stable label for the key seal is using, so an operator can confirm which key a replica actually holds.