Lexicon Garden

ch.indiemusi.alpha.grant

A cryptographic grant allowing a streaming service to decrypt the artist's music catalog. This record contains the master content key encrypted with the service's public key.

Repository @indiemusi.ch did:plc:lcmrbur2pydmpelfcs7fjbdx namespace authority
Details · record, key tid
Kindrecord
Record keytid
Authorityalpha.indiemusi.ch
Indexed
Compare Edit in builder → Fork →

Record

record · key tid

Properties

createdAt

requiredstring · datetime

When the grant was created

expiresAt

string · datetime

Optional expiration date. After this, the grant should be considered revoked.

serviceDid

requiredstring · did

The DID of the streaming service being authorized

  • maxLength: 256

wrappedMasterKey

requiredstring

The Master Content Key (32 bytes) encrypted with the service's public key, base64-encoded. Only the service can decrypt this with their private key.

  • maxLength: 512

wrappedMasterKeyIv

string

Base64-encoded IV (12 bytes) used to encrypt the master key. Only present for AES-GCM wrapping; empty for RSA-OAEP.

  • maxLength: 32

wrappingAlgorithm

string

The algorithm used to wrap the master key. Currently RSA-OAEP (asymmetric, using the service's public key).

  • maxLength: 50
  • default: "RSA-OAEP"

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • ch.indiemusi.alpha.track

    record

    An encrypted audio track. The audio blob is encrypted with AES-GCM-256, and the decryption key is wrapped and stored in grant records.