CkRotationPolicy typedef

CkRotationPolicy = FutureOr<bool> Function(CkRotationContext ck)

Whether the content key for a destination and namespace should be replaced before anything else is written under it.

Asked on the write path, so a policy that awaits makes every encrypting write wait for it. Returning true cuts a fresh content key and conveys it; the superseded conveyance record is retained, so an enrollment that joins later can still read what was written before it.

Implementation

typedef CkRotationPolicy = FutureOr<bool> Function(CkRotationContext ck);