KeyBag is a store for collections of wrapped keys. This is stored in plaintext, and each key is only accessible if the appropriate wrapping key is known.
Manages the persistence of a KeyBag.
A raw byte-string containing a wrapped AES256 key.
An AES256 key which has been wrapped using an AEAD, e.g. AES256-GCM-SIV. This can be safely stored in plaintext, and requires the wrapping key to be decoded.