keymanager

type DataEncryption struct {
	// contains filtered or unexported fields
}

type KeyEntry struct {
	Metadata KeyMetadata `json:"metadata"`
	Key      []byte      `json:"key"` // Encrypted key material
	IV       []byte      `json:"iv,omitempty"`
	Nonce    []byte      `json:"nonce,omitempty"`
}

type KeyFilter struct {
	Purpose KeyPurpose
	State   KeyState
	Type    KeyType
}

type KeyManager struct {
	// contains filtered or unexported fields
}

type KeyMetadata struct {
	ID           string            `json:"id"`
	Name         string            `json:"name"`
	Type         KeyType           `json:"type"`
	Purpose      KeyPurpose        `json:"purpose"`
	State        KeyState          `json:"state"`
	Version      int               `json:"version"`
	CreatedAt    time.Time         `json:"created_at"`
	UpdatedAt    time.Time         `json:"updated_at"`
	ExpiresAt    *time.Time        `json:"expires_at,omitempty"`
	RotatedAt    *time.Time        `json:"rotated_at,omitempty"`
	RotatedFrom  string            `json:"rotated_from,omitempty"`
	RotationDays int               `json:"rotation_days,omitempty"`
	Labels       map[string]string `json:"labels,omitempty"`
	CreatedBy    string            `json:"created_by"`
	Description  string            `json:"description,omitempty"`
}

type KeyOption func(*KeyMetadata)

type KeyPurpose string

type KeyRotationNotifier interface {
	OnKeyRotated(ctx context.Context, oldKey, newKey *KeyMetadata)
	OnKeyExpiring(ctx context.Context, key *KeyMetadata, daysRemaining int)
}

type KeyState string

type KeyStore interface {
	Create(entry *KeyEntry) error
	Get(id string) (*KeyEntry, error)
	Update(entry *KeyEntry) error
	Delete(id string) error
	List(filter KeyFilter) ([]*KeyMetadata, error)
	GetActiveKey(purpose KeyPurpose) (*KeyEntry, error)
}

type KeyType string

type MemoryKeyStore struct {
	// contains filtered or unexported fields
}

type RotationJob struct {
	// contains filtered or unexported fields
}