feat(server::key_holder): unique index on (root_key_id, nonce) to avoid nonce reuse

2026-02-16 20:41:00 +01:00
parent 6c8a67c520
commit 46a3c1768c
4 changed files with 68 additions and 58 deletions
--- a/server/crates/arbiter-server/src/db/models.rs
+++ b/server/crates/arbiter-server/src/db/models.rs
@@ -24,6 +24,7 @@ pub struct AeadEncrypted {
    pub tag: Vec<u8>,
    pub current_nonce: Vec<u8>,
    pub schema_version: i32,
+    pub associated_root_key_id: i32, // references root_key_history.id
    pub created_at: i32,
 }