Struct KeyManager 

pub struct KeyManager { /* private fields */ }

Key manager (supports rotation).

Maintains a current active key and at most 3 historical keys (for the decryption transition period), and supports automatic rotation checks at a fixed time interval. All fields are protected by RwLock and can be safely shared across threads.

Implementations

impl KeyManager

pub fn new(initial_key: Vec<u8>) -> Self

Create a key manager with the given initial key (version numbering starts at 1).

pub fn with_rotation_interval(self, interval: Duration) -> Self

Set the rotation interval.

pub fn rotate(&self, new_key: Vec<u8>) -> Result<(), CryptoError>

Rotate the key.

pub fn needs_rotation(&self) -> bool

Check whether rotation is needed.

pub fn current_key(&self) -> VersionedKey

Get the current key.

pub fn key_by_version(&self, version: u32) -> Option<VersionedKey>

Look up a key by version.

pub fn previous_count(&self) -> usize

Return the number of retained old keys.