xyz.quasigod.lab.letta.encryptionWrap

{
  "id": "xyz.quasigod.lab.letta.encryptionWrap",
  "defs": {
    "main": {
      "key": "literal:self",
      "type": "record",
      "record": {
        "type": "object",
        "required": [
          "kdf",
          "salt",
          "wrappedMek",
          "alg",
          "createdAt"
        ],
        "properties": {
          "alg": {
            "type": "string",
            "description": "AEAD algorithm used to wrap the master key",
            "knownValues": [
              "A256GCM"
            ]
          },
          "kdf": {
            "type": "string",
            "description": "Key derivation function used to derive the wrapping key from the passphrase",
            "knownValues": [
              "argon2id"
            ]
          },
          "salt": {
            "type": "string",
            "description": "Random 16-byte KDF salt, base64url. Public; losing it makes unwrap impossible."
          },
          "kdfLanes": {
            "type": "integer",
            "description": "Argon2id parallelism"
          },
          "createdAt": {
            "type": "string",
            "format": "datetime"
          },
          "kdfMemory": {
            "type": "integer",
            "description": "Argon2id memory cost in KiB"
          },
          "wrappedMek": {
            "type": "string",
            "description": "The 32-byte master encryption key sealed with the passphrase-derived key, base64url"
          },
          "kdfIterations": {
            "type": "integer",
            "description": "Argon2id iteration count"
          }
        }
      }
    }
  },
  "$type": "com.atproto.lexicon.schema",
  "lexicon": 1
}