basalt / drives/src / DriveEncryptionKey

Interface: DriveEncryptionKey

Defined in: drives/src/secret-box.ts:32

One entry of the key ring.

Properties

id

> id: string

Defined in: drives/src/secret-box.ts:37

Stable identifier stored with every ciphertext. Keep it forever: dropping a key id from the ring makes every row sealed with it unreadable.

---

key

> key: string | Uint8Array<ArrayBufferLike>

Defined in: drives/src/secret-box.ts:42

Key material. Any length ≥ 32 bytes (or 32+ characters); the AES key is derived with HKDF-SHA256, so this is never used raw.