Struct KeyRotationManager 

pub struct KeyRotationManager { /* private fields */ }

Key rotation manager.

Implementations

impl KeyRotationManager

pub fn new(key: [u8; 32], version: u32) -> Self

Create new manager with initial key.

pub fn current_version(&self) -> u32

Get current key version.

pub fn versions(&self) -> Vec<u32>

Get all available versions.

pub fn add_key(&mut self, key: [u8; 32], version: u32) -> Result<()>

Add a historical key.

pub fn rotate( &mut self, new_key: [u8; 32], new_version: Option<u32>, ) -> Result<u32>

Rotate to new key.

pub fn encrypt(&self, plaintext: &[u8]) -> Result<Vec<u8>>

Encrypt with current key.

Format: version(4) || nonce(16) || ciphertext || mac(16)

pub fn decrypt(&self, encrypted: &[u8]) -> Result<Vec<u8>>

Decrypt with appropriate key version.

pub fn prune_old_keys(&mut self, keep_versions: usize) -> Vec<u32>

Prune old keys, keeping specified number of most recent.

pub fn re_encrypt(&self, encrypted: &[u8]) -> Result<Vec<u8>>

Re-encrypt data with current key.

Trait Implementations

impl Drop for KeyRotationManager

fn drop(&mut self)

Executes the destructor for this type.