This adds support for encrypting and decrypting secrets. It implements the APIs required for unsealing. The APIs are not complete or compliant. Reviewed-on: #1 Co-authored-by: C0ffeeCode <ritters_werth@outlook.com> Co-committed-by: C0ffeeCode <ritters_werth@outlook.com>
8 lines
209 B
SQL
8 lines
209 B
SQL
-- Sealing Key
|
|
|
|
CREATE TABLE root_key (
|
|
version INTEGER PRIMARY KEY CHECK ( version = 1 ),
|
|
encrypted_key BLOB NOT NULL,
|
|
nonce BLOB,
|
|
type TEXT NOT NULL CHECK ( type IN ('dev_only', 'simple', 'shamir') )
|
|
);
|