pub trait HighEntropySecretSource {
// Required method
fn provide_high_entropy_bytes(&self) -> SensitiveSlice<'_>;
}Expand description
A high entropy secret, generated from a CSPRNG or derived from a high-entropy key. This MUST NOT be:
- An UTF-8 or ASCII string, even if Base64-encoded or hex-encoded high-entropy bytes
- A low-entropy secret
- A static key
Approved sources are:
- A PRF derived from windows-hello biometrics in Bitwarden-Desktop
- A PRF output from a passkey with the hmac-secret extension
- Key-connector-stored bytes
- A high entropy secret generated with
HighEntropySecret::make()
Required Methods§
Sourcefn provide_high_entropy_bytes(&self) -> SensitiveSlice<'_>
fn provide_high_entropy_bytes(&self) -> SensitiveSlice<'_>
Returns the secret bytes as a redacted [SensitiveSlice].