Skip to content

OpaqueKey

OpaqueKey = object

Defined in: src/codecs/opaque/key.ts:30

Opaque imported handle for the Opaque Timestamp codec’s AES-256 key.

Holds the underlying webcrypto.CryptoKey internally; callers never access it directly. Obtain handles via importOpaqueKey and pass them to createOpaqueTimestampId as the key option.

The same raw secret may safely back an OpaqueKey and any other codec’s handle (a primary secret): each codec derives its key under a distinct HKDF label, so the derived keys are independent — but each codec needs its own explicit import. See ADR-0027.

readonly [opaqueKeyBrand]: "OpaqueKey"

Defined in: src/codecs/opaque/key.ts:31