No description available.
Record Key
literal:self
Fixed literal value
Properties
alg
string
Required
AEAD algorithm used to wrap the master key
Known values:
A256GCMcreatedAt
string
datetime
Required
An RFC 3339 formatted timestamp.
kdf
string
Required
Key derivation function used to derive the wrapping key from the passphrase
Known values:
argon2idkdfIterations
integer
Optional
Argon2id iteration count
kdfLanes
integer
Optional
Argon2id parallelism
kdfMemory
integer
Optional
Argon2id memory cost in KiB
salt
string
Required
Random 16-byte KDF salt, base64url. Public; losing it makes unwrap impossible.
wrappedMek
string
Required
The 32-byte master encryption key sealed with the passphrase-derived key, base64url
View raw schema
{
"key": "literal:self",
"type": "record",
"record": {
"type": "object",
"required": [
"kdf",
"salt",
"wrappedMek",
"alg",
"createdAt"
],
"properties": {
"alg": {
"type": "string",
"description": "AEAD algorithm used to wrap the master key",
"knownValues": [
"A256GCM"
]
},
"kdf": {
"type": "string",
"description": "Key derivation function used to derive the wrapping key from the passphrase",
"knownValues": [
"argon2id"
]
},
"salt": {
"type": "string",
"description": "Random 16-byte KDF salt, base64url. Public; losing it makes unwrap impossible."
},
"kdfLanes": {
"type": "integer",
"description": "Argon2id parallelism"
},
"createdAt": {
"type": "string",
"format": "datetime"
},
"kdfMemory": {
"type": "integer",
"description": "Argon2id memory cost in KiB"
},
"wrappedMek": {
"type": "string",
"description": "The 32-byte master encryption key sealed with the passphrase-derived key, base64url"
},
"kdfIterations": {
"type": "integer",
"description": "Argon2id iteration count"
}
}
}
}