Struct IbctKey 

pub struct IbctKey {
    pub key_id: String,
    pub key_bytes: Vec<u8>,
}

A key entry in the IBCT key set.

Multiple entries allow key rotation: old keys are kept until all in-flight tokens signed with them expire.

Serialize is hand-written and redacts key_bytes to "[REDACTED]" (mirroring the Debug impl below); Deserialize is derived and reads the real key bytes untouched.

Fields

key_id: String

Unique key identifier. Embedded in the token so the verifier can look it up.

key_bytes: Vec<u8>

HMAC-SHA256 signing key (raw bytes, hex-encoded in config).

Implementations

impl IbctKey

pub fn from_hex( key_id: impl Into<String>, hex_key: &str, ) -> Result<Self, FromHexError>

Construct an IbctKey from a hex-encoded signing key, as used by [a2a] ibct_keys[].key_hex in config and by vault-resolved IBCT secrets (ibct_signing_key_vault_ref).

Errors

Returns hex::FromHexError if hex_key is not valid hex.

Examples

use zeph_a2a::IbctKey;

let key = IbctKey::from_hex("k1", "68656c6c6f2d7365637265742d6b6579").unwrap();
assert_eq!(key.key_id, "k1");
assert!(IbctKey::from_hex("k1", "not-hex").is_err());

Trait Implementations

impl Clone for IbctKey

fn clone(&self) -> IbctKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IbctKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for IbctKey

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for IbctKey

fn serialize<S: Serializer>(&self, serializer: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.