Skip to main content

HighEntropySecretSource

bitwarden_crypto::safe::high_entropy_secret

Trait HighEntropySecretSource 

Source 
pub trait HighEntropySecretSource {
    // Required method
    fn provide_high_entropy_bytes(&self) -> SensitiveSlice<'_>;
}
Expand description

A high entropy secret, generated from a CSPRNG or derived from a high-entropy key. This MUST NOT be:

  • An UTF-8 or ASCII string, even if Base64-encoded or hex-encoded high-entropy bytes
  • A low-entropy secret
  • A static key

Approved sources are:

  • A PRF derived from windows-hello biometrics in Bitwarden-Desktop
  • A PRF output from a passkey with the hmac-secret extension
  • Key-connector-stored bytes
  • A high entropy secret generated with HighEntropySecret::make()

Required Methods§

Source

fn provide_high_entropy_bytes(&self) -> SensitiveSlice<'_>

Returns the secret bytes as a redacted [SensitiveSlice].

Implementors§