coven_keys/lib.rs
1//! Keys: device and master key custody, the sealed-secret files that hold
2//! them, and the cipher every encrypted Coven object is sealed with.
3//!
4//! This crate owns the key-bearing primitives — signing keys, sealed-box keys,
5//! the AEAD cipher, the passphrase KDF, and the platform keyring — so the
6//! layers above it hold custody objects rather than raw key material.
7//!
8//! `envelope` and `keyring_backend` are private: the passphrase vault and the
9//! keyring-store installer are how custody and the key service do their work,
10//! not something a caller composes.
11
12pub mod custody;
13pub mod encryption;
14pub mod identity_custody;
15pub mod keys;
16
17mod envelope;
18mod keyring_backend;