Skip to main content

Type Alias: EncryptedPayload

type EncryptedPayload = object;

Defined in: packages/client/src/core/crypto-engine/utils.ts:3

Properties

PropertyTypeDescriptionDefined in
__enctrue-packages/client/src/core/crypto-engine/utils.ts:4
alg"AES-GCM"-packages/client/src/core/crypto-engine/utils.ts:7
datastring-packages/client/src/core/crypto-engine/utils.ts:6
ivstring-packages/client/src/core/crypto-engine/utils.ts:5
kid?stringIdentifies the document key this value was encrypted under. Without it a database that holds two keys is illegible: a field either opens or it does not, and nothing says which key it wanted, so re-keying has to be all-or-nothing and cannot be resumed after an interruption. With it, the fields still under an old key can be found, so re-keying becomes incremental and restartable. Optional because payloads written before it existed do not carry one. A payload without a kid is assumed to belong to the primary key - which is what it meant when there could only be one. See deriveKeyIdpackages/client/src/core/crypto-engine/utils.ts:23