Package-level declarations

Types

Link copied to clipboard
data class EscrowedKek(val recoveryId: String, val kekId: String, val encryptedKek: ByteArray, val nonce: ByteArray, val createdAt: Long)

An escrowed KEK entry — stores ENCRYPTED KEK (simulating HSM protection). The plaintext KEK is NEVER stored.

Link copied to clipboard

Interface for guardian-gated escrow vault operations.