Struct EscrowBlob 

pub struct EscrowBlob {
    pub recipient_quorum_id: String,
    pub encapsulated_key: Vec<u8>,
    pub ciphertext: Vec<u8>,
    pub nonce: Vec<u8>,
    pub aad: Vec<u8>,
    pub metadata: EscrowMetadata,
}

An escrowed key (or any secret) — encrypted to a threshold KEM public key.

Recovery requires T-of-N custodians to participate in an async threshold decryption ceremony. The structure intentionally mirrors CMS-style “envelope” patterns.

Fields

recipient_quorum_id: String

Identifies the recipient quorum (e.g., “biml-escrow-quorum”).

encapsulated_key: Vec<u8>

Threshold KEM encapsulated key (algorithm-specific bytes).

ciphertext: Vec<u8>

AEAD ciphertext of the plaintext key, using the KEM-derived shared secret.

nonce: Vec<u8>

AEAD nonce.

aad: Vec<u8>

AEAD additional data (typically the metadata hash).

metadata: EscrowMetadata

Escrow metadata.

Implementations

impl EscrowBlob

pub fn fingerprint(&self) -> [u8; 32]

Compute the SHA-256 fingerprint of this blob (canonical JSON, then hash).

Trait Implementations

impl Clone for EscrowBlob

fn clone(&self) -> EscrowBlob

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EscrowBlob

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EscrowBlob

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for EscrowBlob

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.