Skip to content

WrappingKey

WrappingKey = object

Defined in: src/codecs/wrapped/key.ts:31

Opaque imported handle for one operator wrapping secret.

Holds derived AES and HMAC subkeys internally; callers never access subkeys or raw webcrypto.CryptoKey values directly. Obtain handles via importWrappingKey and pass them to createWrappedKeyId as the keys wrapping keyring.

Distinct from the Opaque key used by @smonn/ids/opaque — one raw secret must not silently serve both codecs without an explicit import.

readonly [wrappingKeyBrand]: "WrappingKey"

Defined in: src/codecs/wrapped/key.ts:32