CENSUS KEY-ROTATE(1)

NAME
census-key-rotate - Rotate encryption key for an attestation's...

SYNOPSIS
census key-rotate [OPTIONS] ATTESTATION_ID

DESCRIPTION
Rotate encryption key for an attestation's metadata and tags.

    Re-encrypts all client-encrypted data under the new key without
    exposing plaintext to the server (NIST SP 800-57 compliance).

    Examples:
        census key-rotate <att_id> --old-key <hex64> --new-key <hex64>

OPTIONS

--old-key TEXT
    Current AES-256 key (64 hex chars). [required]

--new-key TEXT
    New AES-256 key (64 hex chars). [required]

--api-key TEXT
    CertiSigma API key.

--base-url TEXT
    API base URL override.

--json
    Output as JSON.