Module visibility 

Tree visibility helpers

Enums

LinkKeyBytes

Opaque link secret or masked key. Its first byte need not identify a suite.

TreeVisibility

Tree visibility modes

Functions

mask_object_key

Preserve an existing 32-byte share secret by encoding a CHK root key in its equivalent legacy form. Randomized roots always require a 33-byte secret.

xor_key_bytes

Mask or unmask a legacy or versioned key with an equally sized link secret. The masked bytes and link secret are opaque, not parsed encryption keys.

xor_keys

XOR two 32-byte keys (used for link-visible key masking)