Struct TicketRotator 

pub struct TicketRotator { /* private fields */ }

Available on crate feature std only.

A ticketer that has a ‘current’ sub-ticketer and a single ‘previous’ ticketer. It creates a new ticketer every so often, demoting the current ticketer.

Implementations

impl TicketRotator

pub fn new( lifetime: Duration, generator: fn() -> Result<Box<dyn TicketProducer>, Error>, ) -> Result<Self, Error>

Creates a new TicketRotator, which rotates through sub-ticketers based on the passage of time.

lifetime is in seconds, and is how long the current ticketer is used to generate new tickets. Tickets are accepted for no longer than twice this duration. This means a given ticket will be usable for at least one lifetime, and at most two lifetimes (depending on when its creation falls in the replacement cycle.)

generator produces a new TicketProducer implementation.

Trait Implementations

impl Debug for TicketRotator

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl TicketProducer for TicketRotator

fn encrypt(&self, message: &[u8]) -> Option<Vec<u8>>

Encrypt and authenticate plain, returning the resulting ticket. Return None if plain cannot be encrypted for some reason: an empty ticket will be sent and the connection will continue.

fn decrypt(&self, ciphertext: &[u8]) -> Option<Vec<u8>>

Decrypt cipher, validating its authenticity protection and recovering the plaintext. cipher is fully attacker controlled, so this decryption must be side-channel free, panic-proof, and otherwise bullet-proof. If the decryption fails, return None.

fn lifetime(&self) -> Duration

Returns the lifetime of tickets produced now. The lifetime is provided as a hint to clients that the ticket will not be useful after the given time.