cwist_db_crypt_ctx_t Struct Reference

Caller-managed key pair. More...

#include <db_crypt.h>

Public Attributes
unsigned char	kek [CWIST_DB_CRYPT_KEY_LEN]

Detailed Description

Caller-managed key pair.

Both kek and dek are 32-byte (AES-256) keys. kek must be provided by the caller. dek is generated randomly on each cwist_db_crypt_seal() call and stored encrypted in the output blob; it is recovered automatically by cwist_db_crypt_open().

Definition at line 53 of file db_crypt.h.

Member Data Documentation

kek

unsigned char cwist_db_crypt_ctx_t::kek[CWIST_DB_CRYPT_KEY_LEN]

Key Encryption Key.

Definition at line 54 of file db_crypt.h.

Referenced by cwist_db_crypt_open(), and cwist_db_crypt_seal().

---

The documentation for this struct was generated from the following file:

• include/cwist/security/db_crypt/db_crypt.h