retrieveKek

abstract suspend fun retrieveKek(recoveryId: String, kekId: String): ByteArray

Retrieve an escrowed KEK during restore.

Return

The plaintext KEK

Parameters

recoveryId

The recovery record identifier from escrow

kekId

Identifier for the escrowed KEK

Throws

if KEK not found