Module keys 

Structs

KeyService

UserKeypair

Ed25519 keypair for signing changesets and membership changes. The same seed can derive an X25519 keypair for key wrapping.

Enums

CloudHomeCredentials

Credentials for the cloud home, stored as a single JSON keyring entry.

KeyError

Constants

CURVE25519_PUBLICKEYBYTES

CURVE25519_SECRETKEYBYTES

SEALBYTES

SIGN_BYTES

SIGN_PUBLICKEYBYTES

SIGN_SECRETKEYBYTES

Functions

ed25519_to_x25519_public_key

Convert an Ed25519 public key to an X25519 public key.

keyring_service

The configured keyring service name (see set_keyring_service). Public so host apps store their own credentials under the same service.

read_env

Read an env var, distinguishing “not set” (Ok(None)) from non-utf8 content (Err). An empty value is treated as not set. Mirrors read_keyring’s semantics for dev-mode reads.

read_keyring

Read a keyring password by account name, distinguishing “not set” (Ok(None)) from a backend failure (Err). An empty stored value is treated as not set. Public so host apps read their own namespaced credentials with the same not-set/failure semantics.

seal_box_decrypt

Decrypt a sealed box using the recipient’s X25519 keypair.

seal_box_encrypt

Encrypt a message to a recipient’s X25519 public key using a sealed box. The sender is anonymous – only the recipient can decrypt.

set_keyring_service

Set the keyring service name. Call once at startup, before any keyring access.

verify_signature

Verify a detached Ed25519 signature against a public key.