namespace ApiDenuncias.Services;

public sealed record EncryptionKeyMaterial(
    DateOnly KeyDate,
    byte[] Key,
    string KeyVersion,
    string Scheme)
{
    public const string EnvelopeScheme = "aes-256-gcm-envelope-v1";

    public byte[] CopyKey() => Key.ToArray();
}
