Struct KeyRotationManager 

pub struct KeyRotationManager {
    store: Arc<dyn SecretStore>,
    current_version: RwLock<RawRwLock, u64>,
    rotation_interval: Duration,
    last_rotation: RwLock<RawRwLock, Instant>,
    key_prefix: String,
}

Manages automatic key rotation for encryption keys.

Fields

store: Arc<dyn SecretStore>

current_version: RwLock<RawRwLock, u64>

rotation_interval: Duration

last_rotation: RwLock<RawRwLock, Instant>

key_prefix: String

Implementations

impl KeyRotationManager

pub fn new( store: Arc<dyn SecretStore>, key_prefix: impl Into<String>, ) -> KeyRotationManager

Create a new key rotation manager.

pub fn with_rotation_interval(self, interval: Duration) -> KeyRotationManager

Set the rotation interval.

pub async fn get_current_key(&self) -> Result<SecretValue, SecretError>

Get the current encryption key.

pub async fn get_key_version( &self, version: u64, ) -> Result<SecretValue, SecretError>

Get a specific key version.

pub fn needs_rotation(&self) -> bool

Check if rotation is needed.

pub fn rotate(&self)

Rotate to a new key version.

Note: The actual key must be pre-provisioned in the secret store.

pub fn current_version(&self) -> u64

Get the current key version number.