fde

type DeviceSetupParams struct {
	Key           []byte
	Device        string
	PartitionName string
}

type DeviceUnlockParams struct {
	Key    []byte
	Device string
	// Name of the partition
	PartitionName string
}

type DeviceUnlockRequest struct {
	Op string `json:"op"`

	Key []byte `json:"key,omitempty"`

	// Device is the device to unlock in /dev/ somewhere such as
	// /dev/disk/by-partuuid/foo.
	Device string `json:"device,omitempty"`

	PartitionName string `json:"partition-name,omitempty"`
}

type InitialSetupParams struct {
	Key     []byte
	KeyName string
}

type InitialSetupResult struct {
	// result when called with "initial-setup"
	// XXX call this encrypted-key if possible?
	EncryptedKey []byte           `json:"sealed-key"`
	Handle       *json.RawMessage `json:"handle"`
}

type RevealKeyRequest struct {
	Op string `json:"op"`

	SealedKey []byte           `json:"sealed-key,omitempty"`
	Handle    *json.RawMessage `json:"handle,omitempty"`
	// deprecated for v1
	KeyName string `json:"key-name,omitempty"`
}

type RevealParams struct {
	SealedKey []byte
	Handle    *json.RawMessage
	// V2Payload is set true if SealedKey is expected to contain a v2 payload
	// (disk key + aux key)
	V2Payload bool
}

type RunSetupHookFunc func(req *SetupRequest) ([]byte, error)

type SetupRequest struct {
	Op string `json:"op"`

	// This needs to be a []byte so that Go's standard library will base64
	// encode it automatically for us
	Key []byte `json:"key,omitempty"`

	// Only used when called with "initial-setup"
	KeyName string `json:"key-name,omitempty"`

	// The part of the device kernel path for a "setup-device" call.
	// Only used when called with "device-setup"
	Device string `json:"device,omitempty"`

	// Name of the partition
	PartitionName string `json:"partition-name,omitempty"`
}