Struct EscrowService 

pub struct EscrowService;

The escrow service.

Implementations

impl EscrowService

pub fn new() -> Self

Construct a new escrow service.

pub fn escrow( &self, plaintext_key: &[u8], recipient: &QuorumPublicKey, escrowed_by: &str, key_id: &str, key_type: &str, encapsulator: &dyn Encapsulator, aead: &dyn Aead, ) -> Result<EscrowBlob, EscrowError>

Escrow a key (or any secret) to a recipient quorum.

pub fn recover( &self, blob: &EscrowBlob, shared_secret: &[u8], aead: &dyn Aead, ) -> Result<Vec<u8>, EscrowError>

Recover a key from a blob, given the recovered shared secret.

The caller is responsible for running the threshold decryption ceremony to recover the shared secret (typically via confium-tc-kem). This function takes the recovered secret and performs the final AEAD decryption.

Trait Implementations

impl Default for EscrowService

fn default() -> Self

Returns the “default value” for a type.