Crypto-shred: destroy a KEK and report what that covers
Examples
kek <- as.raw(32:1)
w1 <- wrap_dek(as.raw(1:32), kek, as.raw(1:12), kek_id = "kek-1")
w2 <- wrap_dek(as.raw(33:64), kek, as.raw(13:24), kek_id = "kek-1")
crypto_shred("kek-1", list(w1, w2))
#> $kek_id
#> [1] "kek-1"
#>
#> $records_shredded
#> [1] 2
#>
#> $indices
#> [1] 0 1
#>
#> $still_recoverable
#> integer(0)
#>
#> $complete
#> [1] TRUE
#>
#> $note
#> [1] "any DEK wrapped under a DIFFERENT KEK survives, so a partial rotation leaves data readable"
#>
