Crate basil_keystore_backend 

Optional materialize-to-use key-store support for Basil.

To use within basil, the basil-bin crate needs to be compiled with either db-keystore or onepassword features. see Backends & custody

This crate holds the storage adapters and local crypto needed when Basil is backed by a key/value store rather than an in-place transit engine. Secret bytes are returned in Zeroizing owners and local crypto materializes a key for exactly one operation.

Re-exports

pub use store::SecretStore;

pub use store::StoreConfig;

pub use store::StoreError;

Modules

store

Unified key/value secret store for Basil’s key-store backend.

Enums

CryptoError

Local materialize-to-use crypto failure.

Functions

decrypt_aead

Decrypt with a materialized 32-byte AEAD key.

encrypt_aead

Encrypt with a materialized 32-byte AEAD key. Basil owns the nonce.

generate_key_material

Generate fresh 32-byte key material for key-store-backed keys.

keystore_version

Key-store-backed crypto uses a fixed single version.

public_ed25519

Derive the Ed25519 public key from a materialized 32-byte seed.

sign_ed25519

Sign message as raw Ed25519 using a materialized 32-byte seed.

verify_ed25519

Verify an Ed25519 signature with public bytes.