kiosk-ops-sdk/com.sarastarquant.kioskops.sdk.crypto/VersionedCryptoProvider

VersionedCryptoProvider

class VersionedCryptoProvider(context: Context, baseAlias: String = "kioskops_versioned", rotationPolicy: KeyRotationPolicy = KeyRotationPolicy.default(), clock: () -> Long = { System.currentTimeMillis() }) : CryptoProvider

Crypto provider with key versioning and rotation support.

Manages multiple key versions to support:

Key rotation without data loss
Backward-compatible decryption of old data
Gradual migration to new keys

Blob format (backward compatible):

[version:1 byte] - Key version (1-255)
[ivLen:1 byte]   - IV length (12-32)
[iv:N bytes]     - Initialization vector
[ciphertext]     - Encrypted data with GCM tag

Constructors

VersionedCryptoProvider

constructor(context: Context, baseAlias: String = "kioskops_versioned", rotationPolicy: KeyRotationPolicy = KeyRotationPolicy.default(), clock: () -> Long = { System.currentTimeMillis() })