Handle of a key encryption key.

interface KekHandle {
    grant: ((member: Name | NamedEncrypter.PublicKey | Certificate) => Promise<KeyDecryptionKey>);
    kek: KeyEncryptionKey;
}

Properties

Properties

grant: ((member: Name | NamedEncrypter.PublicKey | Certificate) => Promise<KeyDecryptionKey>)

Grant access to a new member.

Caller is responsible for verifying authenticity of the public key or certificate. If passing a key name or certificate name, the retrieved certificate will be verified by Keys.memberVerifier.