Interface: DeviceGrant
Defined in: vault-core/src/device-grant.ts:30 (opens in a new tab)
A vault key sealed to one device. Opaque to anyone without that device's secret key.
PropertiesLink to this section
| Property | Type | Description | Defined in |
|---|---|---|---|
ciphertext | string | b64url(AES-256-GCM(vault key)) | vault-core/src/device-grant.ts:36 (opens in a new tab) |
eph_pk | string | hex(32-byte ephemeral X25519 public key) | vault-core/src/device-grant.ts:32 (opens in a new tab) |
nonce | string | b64url(12-byte nonce) | vault-core/src/device-grant.ts:34 (opens in a new tab) |