Struct KeyBagManager

pub struct KeyBagManager { /* private fields */ }

Manages the persistence of a KeyBag.

All operations on the keybag are atomic.

Implementations

impl KeyBagManager

pub fn open(directory: OwnedFd, path: &Path) -> Result<Option<Self>, OpenError>

Opens a key-bag file. If it doesn’t exist, or is an empty file, returns Ok(None).

pub fn create(directory: OwnedFd, path: &Path) -> Result<Self, OpenError>

Creates a new, empty key-bag file, writing it to disk.

pub fn new_key( &mut self, slot: KeySlot, wrapping_key: &WrappingKey, ) -> Result<Aes256Key, Error>

Generates and stores a new key in the key-bag, based on |wrapping_key|. Returns the unwrapped key contents.

pub fn remove_key(&mut self, slot: KeySlot) -> Result<(), Error>

Removes a key from the key bag.

pub fn unwrap_key( &self, slot: KeySlot, wrapping_key: &WrappingKey, ) -> Result<Aes256Key, UnwrapError>

Attempts to unwrap a key at |slot| with |wrapping_key|.