EscrowBlob
Type Alias: EscrowBlob
EscrowBlob =
object
Defined in: packages/core/src/sealed/kdf.ts:22
Keyring key wrapped by a KDF-derived KEK (AES-GCM), the parameters are stored so they can evolve
kid is the active key the keyring was encrypted for when the escrow was made, in clear and outside the AAD: the
server refuses an escrow made for another key than its active one (a device that missed a rotation).
Properties
ct
ct:
string
Defined in: packages/core/src/sealed/kdf.ts:31
iv
iv:
string
Defined in: packages/core/src/sealed/kdf.ts:30
kdf
kdf:
KdfName
Defined in: packages/core/src/sealed/kdf.ts:27
kdfParams
kdfParams:
object
Defined in: packages/core/src/sealed/kdf.ts:28
kid
kid:
string
Defined in: packages/core/src/sealed/kdf.ts:26
Active key id when the escrow was created
kind
kind:
"password"|"recovery"
Defined in: packages/core/src/sealed/kdf.ts:24
salt
salt:
string
Defined in: packages/core/src/sealed/kdf.ts:29
v
v:
1
Defined in: packages/core/src/sealed/kdf.ts:23