Handle of a key encryption key.

interface KekHandle {
    grant: ((member) => Promise<KeyDecryptionKey>);
    kek: KeyEncryptionKey;
}

Properties

Properties

grant: ((member) => Promise<KeyDecryptionKey>)

Grant access to a new member.

Type declaration

Remarks

Caller is responsible for verifying authenticity of the public key or certificate. If passing a key name or certificate name, the retrieved certificate will be verified by Keys.memberVerifier.