Module unlock 

Functionality for re-encrypting unlock (decryption) methods during user key rotation. During key-rotation, a new user-key is sampled. The unlock module then creates a set of newly encrypted copies, one for each decryption/unlock method.

Structs

ParsingError 🔒

ReencryptUnlockInput 🔒

Input data for re-encrypting unlock methods during user key rotation.

V1EmergencyAccessMembership

The data necessary to re-share the user-key to a V1 emergency access membership. Note: The Public-key must be verified/trusted. Further, there is no sender authentication possible here.

V1OrganizationMembership

The data necessary to re-share the user-key to a V1 organization membership. Note: The Public-key must be verified/trusted. Further, there is no sender authentication possible here.

Enums

MasterkeyUnlockMethod 🔒

The unlock method that uses the master-key field on the user’s account. This can be either the master password, or the key-connector. For TDE users without a master password, this field is empty.

ReencryptError 🔒

Functions

reencrypt_emergency_access_keys 🔒

Re-encrypt emergency access keys for the new user key.

reencrypt_organization_memberships 🔒

Re-encrypt organization membership keys for the new user key.

reencrypt_passkey_credentials 🔒

Re-encrypt passkey (WebAuthn PRF) credentials for the new user key.

reencrypt_tde_devices 🔒

Re-encrypt TDE device keys for the new user key.

reencrypt_unlock 🔒

Update the unlock methods for the updated user-key.

reencrypt_userkey_for_masterpassword_unlock 🔒

to_authentication_and_unlock_data 🔒