Skip to main content

INTERNAL_KEYS

Constant INTERNAL_KEYS 

Source
pub const INTERNAL_KEYS: &str = "internal_keys";
Expand description

Non-extractable internal signing keys.

Deliberately not IMPORTED_SECRETS: that keyspace wraps its contents under a KEK derived from the BIP-39 master seed, so anything stored there is reconstructible by whoever holds the mnemonic. Internal keys exist precisely to have no such path — their material is generated from the system CSPRNG, never derived, and lives here instead.

In EXCLUDED_FROM_BACKUP by design, not by omission. A backup containing this keyspace would be an export of keys the VTA promises never to export.