SERVER-28432 Move key management out from TimeProofService

1 files changed, 7 insertions, 4 deletions

diff --git a/src/mongo/db/time_proof_service.cpp b/src/mongo/db/time_proof_service.cpp
index 1d0d6c0b46b..38b63a3af63 100644
--- a/src/mongo/db/time_proof_service.cpp
+++ b/src/mongo/db/time_proof_service.cpp
@@ -48,14 +48,17 @@ TimeProofService::Key TimeProofService::generateRandomKey() {
                                                  SHA1Block::kHashLength));
 }
 
-TimeProofService::TimeProof TimeProofService::getProof(const LogicalTime& time) const {
+TimeProofService::TimeProof TimeProofService::getProof(const LogicalTime& time,
+                                                       const Key& key) const {
     auto unsignedTimeArray = time.toUnsignedArray();
     return SHA1Block::computeHmac(
-        _key.data(), _key.size(), unsignedTimeArray.data(), unsignedTimeArray.size());
+        key.data(), key.size(), unsignedTimeArray.data(), unsignedTimeArray.size());
 }
 
-Status TimeProofService::checkProof(const LogicalTime& time, const TimeProof& proof) const {
-    auto myProof = getProof(time);
+Status TimeProofService::checkProof(const LogicalTime& time,
+                                    const TimeProof& proof,
+                                    const Key& key) const {
+    auto myProof = getProof(time, key);
     if (myProof != proof) {
         return Status(ErrorCodes::TimeProofMismatch, "Proof does not match the logical time");
     }