唐小鸭 7ecb44ea60 feat(kms): object-level DEK rewrap adapter and Transit context-bound rewrap (#6644) ...

* feat(kms): object-level DEK rewrap adapter and Transit context-bound rewrap

* fix(kms): zeroize rewrap plaintext on cancellation

---------

Co-authored-by: overtrue <anzhengchao@gmail.com>

2026-08-26 15:18:12 +08:00

..

backends

feat(kms): object-level DEK rewrap adapter and Transit context-bound rewrap (#6644)

2026-08-26 15:18:12 +08:00

backup

feat(kms): wire Vault custom CA and mTLS client identity (#6638)

2026-08-26 13:32:29 +08:00

encryption

feat(kms): bind encryption context into DEK envelopes as AAD (#6639)

2026-08-26 13:58:13 +08:00

snapshots

feat(kms): wire Vault custom CA and mTLS client identity (#6638)

2026-08-26 13:32:29 +08:00

api_types.rs

feat(kms): wire Vault custom CA and mTLS client identity (#6638)

2026-08-26 13:32:29 +08:00

audit.rs

feat(kms): add the data key rewrap primitive (#5607)

2026-08-02 05:51:12 +00:00

cache.rs

fix(kms): honour the configured metadata cache TTL and metrics switch (#5569)

2026-08-01 13:27:33 +00:00

config_secret.rs

fix(ci): restore merged main Clippy lanes (#6612)

2026-08-26 10:19:47 +08:00

config.rs

feat(kms): bind encryption context into DEK envelopes as AAD (#6639)

2026-08-26 13:58:13 +08:00

deletion_worker.rs

feat(kms): reserve and expose KV2 wrap-budget consumption (#6019)

2026-08-13 08:05:00 +08:00

error.rs

feat(kms): add the data key rewrap primitive (#5607)

2026-08-02 05:51:12 +00:00

key_impact.rs

feat(kms): report the configuration references that block a key deletion (#5598)

2026-08-02 08:37:37 +08:00

lib.rs

feat(kms): seal persisted config secrets with RUSTFS_KMS_CONFIG_SECRET (#6599)

2026-08-26 09:35:53 +08:00

manager.rs

feat(kms): report a key as due for rotation once its wrap budget is spent (#6059)

2026-08-13 23:21:37 +08:00

persisted_observability.rs

fix(kms): bound persisted format parsing (#5652)

2026-08-02 17:53:01 +00:00

policy.rs

fix(kms): report unreadable keys and bound list-keys page size (#5764)

2026-08-06 22:01:30 +08:00

probe.rs

feat(kms): add a synthetic encrypt-decrypt probe worker (#5543)

2026-08-01 12:30:35 +08:00

service_manager.rs

feat(kms): surface non-production backend positioning at runtime (#6633)

2026-08-26 13:25:49 +08:00

service.rs

feat(kms): object-level DEK rewrap adapter and Transit context-bound rewrap (#6644)

2026-08-26 15:18:12 +08:00

time_serde.rs

feat(s3): advance parity coverage (#2278)

2026-03-24 17:29:33 +08:00

types.rs

feat(kms): report a key as due for rotation once its wrap budget is spent (#6059)

2026-08-13 23:21:37 +08:00