Skip to content

WebCryptoGroupStateProtector

Defined in: packages/core/src/webcrypto-group-state-protector.ts:63

AES-256-GCM implementation of the encrypted provider-state boundary.

Direct construction requires a host-native CryptoKey so the protector can detach it with structuredClone. Use generate() with an alternate Web Crypto implementation; generated keys remain owned by that trusted provider and are never exposed by the protector.

new WebCryptoGroupStateProtector(keyId, key, cryptoProvider?): WebCryptoGroupStateProtector

Defined in: packages/core/src/webcrypto-group-state-protector.ts:69

string

CryptoKey

Crypto

WebCryptoGroupStateProtector

readonly algorithm: "AES-256-GCM" = WEBCRYPTO_GROUP_STATE_ALGORITHM

Defined in: packages/core/src/webcrypto-group-state-protector.ts:64

GroupStateProtector.algorithm


readonly keyId: string

Defined in: packages/core/src/webcrypto-group-state-protector.ts:65

GroupStateProtector.keyId

open(sealed, associatedData): Promise<Uint8Array<ArrayBufferLike>>

Defined in: packages/core/src/webcrypto-group-state-protector.ts:167

GroupStateCiphertext

Uint8Array

Promise<Uint8Array<ArrayBufferLike>>

GroupStateProtector.open


seal(plaintext, associatedData): Promise<GroupStateCiphertext>

Defined in: packages/core/src/webcrypto-group-state-protector.ts:123

Uint8Array

Uint8Array

Promise<GroupStateCiphertext>

GroupStateProtector.seal


static generate(keyId, cryptoProvider?): Promise<WebCryptoGroupStateProtector>

Defined in: packages/core/src/webcrypto-group-state-protector.ts:92

string

Crypto

Promise<WebCryptoGroupStateProtector>