Struct KeyRotationManager 

pub struct KeyRotationManager { /* private fields */ }

Key rotation manager.

Manages multiple versions of keys and supports:

• rotating to generate a new key version
• signing with the latest key
• verifying with any historical key (backward compatibility)
• automatic eviction of expired keys

Implementations

impl KeyRotationManager

pub fn new(max_versions: usize) -> Self

Create a key rotation manager with the specified maximum number of retained versions.

pub fn with_initial_key(key: Vec<u8>) -> Self

Initialize with the first key version.

pub fn rotate_key(&mut self, new_key: Vec<u8>) -> u32

Rotate to a new key and return the new version number.

pub fn sign(&self, message: &[u8]) -> (u32, Vec<u8>)

Sign with the current (latest) key.

pub fn verify(&self, message: &[u8], version: u32, signature: &[u8]) -> bool

Verify a signature (tries all retained key versions).

pub fn current_version(&self) -> u32

Return the current key version number.

pub fn version_count(&self) -> usize

Return the number of retained key versions.

pub fn versions(&self) -> Vec<u32>

Return all retained version numbers.

pub fn key_created_at(&self, version: u32) -> Option<u64>

Return the creation time (Unix seconds) of the key for the specified version, or None if the version does not exist.