Module keychain 

Key store keyed by kid, scheme dispatch, and keyset topological decrypt.

Structs

Keychain 🔒

A store of AES and RSA keys keyed by their kid.

Constants

AES_SCHEME 🔒

MASTER_KEY_ID 🔒

RSA_SCHEMES 🔒

Functions

decryption_order 🔒

Orders keysets so each one comes after the key that encrypts it, starting from root_id. Keysets the root cannot reach are left out.

derive_master_key 🔒

Derives the key of the newest master keyset, the only one carrying KDF parameters.

encrypted_by 🔒

The key id that encrypts a keyset: its explicit encryptedBy, or the symmetric key’s kid when that is empty.