Struct WrappedOrgKey 

pub struct WrappedOrgKey {
    pub car_wrap: String,
    pub org: String,
    pub epoch: u64,
    pub recipient: String,
    pub publisher: String,
    pub ephemeral_pub: String,
    pub recipient_pub: String,
    pub envelope: Value,
    pub signature: String,
}

A shared org master key wrapped for one member — AUTHENTICATED ECIES over X25519. Sealed to the member’s X25519 key (only their secret unwraps it) AND signed by the publisher’s Ed25519 identity (only a caller-trusted publisher is accepted). Every member unwraps the SAME k_org and derives the org-audience AEAD key from it, so org-scoped ops become mutually readable.

Fields

car_wrap: String

Algorithm tag (ALG_ORG_KEY_WRAP, “org-key-wrap/v2”).

org: String

epoch: u64

The key-rotation epoch this k_org belongs to (member removal bumps it).

recipient: String

The member this blob is addressed to. ADVISORY ONLY — not integrity-protected for ROUTING: unwrap binds the CALLER’s own my_user_id into both the KDF and the signature transcript, not this field. Do not route or authorize on it.

publisher: String

The publisher (signer) user id. ADVISORY — a routing/label hint. unwrap authorizes on the injected TRUSTED verifying-key set, NEVER on this field.

ephemeral_pub: String

Ephemeral X25519 public key (hex) — re-fed into the KDF on unwrap.

recipient_pub: String

Recipient’s X25519 public key (hex) — bound into the KDF.

envelope: Value

AEAD envelope over { "k_org": <hex> }.

signature: String

Ed25519 signature (hex, 64 bytes) by the publisher over [wrap_sign_transcript]. Verified with verify_strict against a trusted key on unwrap, BEFORE any decrypt.

Trait Implementations

impl Clone for WrappedOrgKey

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for WrappedOrgKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for WrappedOrgKey

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for WrappedOrgKey

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for WrappedOrgKey

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for WrappedOrgKey