Skip to content

SigningKey

SigningKey = object

Defined in: src/codecs/signed/key.ts:32

Opaque imported handle for one operator signing key.

Holds a single HMAC-SHA-256 key derived via HKDF under the domain-separation label @smonn/ids/signed/hmac. The underlying webcrypto.CryptoKey is held internally and never exposed to callers. Obtain handles via importSigningKey and pass them to createSignedTimestampId as the keys signing keyring.

Distinct from both the Opaque key and the Wrapping key — the same raw key material must not silently serve multiple codecs without an explicit import.

readonly [signingKeyBrand]: "SigningKey"

Defined in: src/codecs/signed/key.ts:33