kv

type KV ¶

type KV struct {
	// contains filtered or unexported fields
}

KV is a FileVault storage backend based on a key-value store. Its primary storage duties are initially generating and then subsequently loading the keypair from storage. It uses a single keypair for all FileVault PSK encryption/decryption. The actual PSK storage and retrieval (i.e. once decrypted) is abstracted to another storage interface.

func New(ctx context.Context, b kv.Bucket, p storage.PRKStorage) (*KV, error)

func (s *KV) EscrowPRK(ctx context.Context, id string, cms []byte) error

func (s *KV) RetrievePRK(ctx context.Context, id string) (string, error)

func (s *KV) RetrievePRKCertRaw(ctx context.Context, _ string) ([]byte, error)