pub struct CoreSecrets {
pub store_seal_key: Option<Zeroizing<[u8; 32]>>,
pub backup_key: Option<Zeroizing<[u8; 32]>>,
}Expand description
Secret material a shell supplies once at MessengerCore::open time,
alongside CoreConfig’s static identity fields. The session private
key is not here: it is the Olm account
crate::crypto::account::OlmAccountState::load_or_create generates
(mail4agent_vodozemac::olm::Account::new) and pickles into the store.
These two fields are optional 32-byte keys the caller already holds.
Default leaves both absent. Nothing in this crate reads backup_key
yet.
Fields§
§store_seal_key: Option<Zeroizing<[u8; 32]>>This device’s record-sealing key. None when this core is opened
with a non-sealing codec (every test in this crate uses
[crate::store::InsecurePlainCodecForTests] instead).
MessengerCore::open_sealed is the only consumer: it requires
this field to build its own SealedRecordCodec and fails loudly
if it is absent rather than silently falling back to an unsealed
store.
backup_key: Option<Zeroizing<[u8; 32]>>This account’s server-side key-backup key, supplied by the caller. Carried for a later Megolm session backup/restore; nothing in this crate reads it yet.