//! This module is where all relay related keys are declared along their key specifier for the

//! KeyMgr so some of them can be stored on disk.

use tor_key_forge::{define_curve25519_keypair, define_ed25519_keypair, define_rsa_keypair};

define_ed25519_keypair!(

    /// [KP_relayid_ed] Long-term identity keypair. Never rotates.

    pub RelayIdentity

);

define_rsa_keypair!(

    /// [KP_relayid_rsa] Legacy RSA long-term identity keypair. Never rotates.

    pub RelayIdentityRsa

);

define_ed25519_keypair!(

    /// [KP_relaysign_ed] Medium-term signing keypair. Rotated periodically.

    pub RelaySigning

);

define_ed25519_keypair!(

    /// [KP_link_ed] Short-term signing keypair for link authentication. Rotated frequently.

    pub RelayLinkSigning

);

define_curve25519_keypair!(

    /// [KP_ntor] Medium-term keypair for the circuit extension handshake. Rotated periodically.

    #[derive(Clone)]

    pub RelayNtor

);

/// The relay’s ntor key set contains both the current key and the previous one, allowing it to

/// handle clients or relays that may be using different consensus views.

#[derive(Clone)]

pub struct RelayNtorKeys {

    /// The latest Ntor key.

    latest: RelayNtorKeypair,

    /// The previous Ntor key. First run, not previous key or if expired.

    previous: Option<RelayNtorKeypair>,

}

impl RelayNtorKeys {

    /// Constructor.

    /// Set the previous Ntor key.

    /// Return the latest.

    /// Return the previous key, if any.

}