Handle of a key encryption key.

interface KekHandle {
    grant: (
        member: Name | NamedEncrypter.PublicKey | Certificate,
    ) => Promise<KeyDecryptionKey>;
    kek: KeyEncryptionKey;
}

Properties

Properties

grant: (
    member: Name | NamedEncrypter.PublicKey | Certificate,
) => Promise<KeyDecryptionKey>

Grant access to a new member.

Caller is responsible for verifying authenticity of the public key or certificate. If passing a key name or certificate name, the retrieved certificate will be verified by Keys.memberVerifier.