Module organization_shared_key 

Organization shared key: the organization key shared with one member, so that the member can decrypt the organization’s data.

The API names this value the membership’s key.

Versions

• V1: the organization key encapsulated to the member’s public key. Nothing authenticates the sender, so the member cannot tell that the organization made it.
• V2 (planned): the organization key sealed from the organization’s identity to the member’s identity in an identity-sealed key envelope, which authenticates the organization as the sender.

OrganizationSharedKey::make takes the TrustProof for the member’s public key: the fingerprint phrase that an admin compared, or the member’s own private key when the member shares the key with themselves (creating an organization, or self-confirming through an invite link). Some V1 flows have no way to verify the public key, and use OrganizationSharedKey::make_untrusted. V2 has no untrusted variant.

Enums

OrganizationSharedKey

The organization key, shared with one member.

OrganizationSharedKeyMakeError

Errors that can occur when making an organization shared key with a trust proof.

OrganizationSharedKeyMakeUntrustedError

Errors that can occur when making an organization shared key without a trust proof.

OrganizationSharedKeyParseError

Errors that can occur when parsing an organization shared key.

OrganizationSharedKeyUnsealError

Errors that can occur when unsealing an organization shared key.