Expand description
User account cryptographic state
This module contains initialization and unwrapping of the user account cryptographic state. The user account cryptographic state contains keys and cryptographic objects unlocked by the user-key, or protected by keys unlocked by the user-key.
V1 users have only a private key protected by an AES256-CBC-HMAC user key. V2 users have a private key, a signing key, a signed public key and a signed security state, all protected by a Cose serialized AEAD key, currently XChaCha20-Poly1305.
Enums§
- Account
Cryptography Initialization Error - Errors that can occur during initialization of the account cryptographic state.
- Wrapped
Account Cryptographic State - Any keys / cryptographic protection “downstream” from the account symmetric key (user key). Private keys are protected by the user key.