rotation_support

README

This library contains support functions to add, retract or rotate keys or objects. Functions in this library can be used to change object statuses, and add objects with new epoch both by creating new protecting or protector objects and encrypting or reencrypting portions of the key hierarchy to accommodate these changes. It can also find the status of all objects by name and epoch, status, type or validity period. For example, when a protector key corresponding to a new epoch it can change the status of the earlier epochs of this key and reencrypt the protected objects protected by the previous key epoch. Finally, it can roll back epoch changes.

Documentation

Index

• func ActivateObject(l *list.List, name_obj string, epoch int) error
• func AddAndRotateNewKeyEpoch(name_obj string, obj_type string, existing_status string, new_status string, ...) (*protected_objects.ObjectMessage, error)
• func AddNewKeyEpoch(l *list.List, name_obj string, obj_type string, existing_status string, ...) (*protected_objects.ObjectMessage, *protected_objects.ObjectMessage, error)
• func ChangeObjectStatus(l *list.List, name_obj string, epoch int, new_status string) error
• func ForceInclude()
• func InactivateObject(l *list.List, name_obj string, epoch int) error
• func RetireObject(l *list.List, name_obj string, epoch int) error
• func RevokeObject(l *list.List, name_obj string, epoch int) error

Functions

func ActivateObject

func ActivateObject(l *list.List, name_obj string, epoch int) error

Activate indicated object

func AddAndRotateNewKeyEpoch

func AddAndRotateNewKeyEpoch(name_obj string, obj_type string, existing_status string,
	new_status string, notBefore string, notAfter string, value []byte,
	obj_list *list.List, protected_obj_list *list.List) (*protected_objects.ObjectMessage, error)

Find all the objects protected by existing object. For each, make a new protected object with new protector. Add all resulting nodes to the node list. Return new epoch.

func AddNewKeyEpoch

func AddNewKeyEpoch(l *list.List, name_obj string, obj_type string, existing_status string, new_status string,
	notBefore string, notAfter string,
	value []byte) (*protected_objects.ObjectMessage, *protected_objects.ObjectMessage, error)

Make object with new epoch and return it

func ChangeObjectStatus

func ChangeObjectStatus(l *list.List, name_obj string, epoch int, new_status string) error

func ForceInclude

func ForceInclude()

func InactivateObject

func InactivateObject(l *list.List, name_obj string, epoch int) error

Inactivate indicated object

func RetireObject

func RetireObject(l *list.List, name_obj string, epoch int) error

Retire indicated object

func RevokeObject

func RevokeObject(l *list.List, name_obj string, epoch int) error

Revoke indicated object