Struct KeymintSealedData 

pub struct KeymintSealedData {
    pub sealing_key_info: Vec<u8>,
    pub sealing_key_blob: Vec<u8>,
    pub sealed_keys: BTreeMap<String, Vec<u8>>,
}

Bundles together a handle to a Keymint sealing key together with a list of keys sealed by the sealing key. The contents of this struct can be persistently stored, as it contains no plaintext secrets.

Note that it is intentional that this struct does not implement serde::{Serialize, Deserialize}; clients of KeymintSealedKeySource are better equipped to choose an appropriate format and manage versioning.

Fields

sealing_key_info: Vec<u8>

sealing_key_blob: Vec<u8>

sealed_keys: BTreeMap<String, Vec<u8>>

Implementations

impl KeymintSealedData

pub async fn new() -> Result<Self, Error>

Generates a new hardware-backed sealing key based off of sealing_key_info and creates a new instance of KeymintSealedData which uses this sealing key.

Note that repeated calls to this will yield different sealing keys. The sealing key should be persisted if it needs to be reused.

pub async fn create_key(&mut self, label: &str) -> Result<Vec<u8>, Error>

Generates and seals a new key named label. Updates this struct to contain the sealed key (to be retrieved later by Self::unseal_key), and returns the unsealed key.

pub async fn unseal_key(&self, label: &str) -> Result<Vec<u8>, Error>

Unseals a key previously created via Self::create_key. Returns the unsealed key.