Expand description

keystore defines a structure for persisting a “master key” on disk, via key wrapping.

Structs

DiskKeyStore is a very simple wrapper around KeyStore, which deals with persisting it to disk. This is provided because it is expected this is a very common use case, but users of this library can just use KeyStore directly and persist it however they like.
A KeyStore is a structure which contains a single “master key”, wrapped with one or more other keys. This is useful in cases where we want to encrypt data with a single key, while allowing users to add or remove keys at will, without having to a) re-encrypt the data when the keys change, or b) store multiple copies of the plaintext encrypted with the various different keys.