Struct SingleKeyProvider 

pub struct SingleKeyProvider { /* private fields */ }

The default single-key provider: writes and reads under exactly one key. This is what DiskArtifactStore::new wraps the caller’s [u8; 32] in, so the historical single-key constructor keeps its exact behaviour (one active key, that same key the only accepted read key).

The key is held in a Zeroizing so it is scrubbed on drop, matching the store’s own hmac_key handling.

Implementations

impl SingleKeyProvider

pub fn new(key: [u8; 32]) -> Self

Wrap a single key as a provider.

Trait Implementations

impl KeyProvider for SingleKeyProvider

fn active_key(&self) -> [u8; 32]

The key new puts sign with. MUST be one of Self::read_keys.

fn read_keys(&self) -> Vec<[u8; 32]>

Every key a read (get / list) may try, conventionally newest first so the common “just-written under the active key” case hits on the first probe. The active key MUST be present.