pb

type EmergencyBackupKey struct {

	// Hint about the physical location of the key mneumonic written down.
	Hint string `protobuf:"bytes,1,opt,name=hint,proto3" json:"hint,omitempty"`
	// contains filtered or unexported fields
}

type EncryptedSymmetricKey struct {

	// The public key of the recipient used to encrypt the symmetric key
	RecipientPublicKey *P256PublicKey `protobuf:"bytes,1,opt,name=recipient_public_key,json=recipientPublicKey,proto3" json:"recipient_public_key,omitempty"`
	// The ephemeral public key of the sender used to encrypt the symmmetric key
	SenderEphemeralPublicKey *P256PublicKey `` /* 137-byte string literal not displayed */
	// The signature of the ephemeral public key by the sender key
	SenderEphemeralPublicKeySign []byte `` /* 151-byte string literal not displayed */
	// The symmetric key encrypted with the recipient's public key
	EncryptedSymmetricKey []byte `` /* 126-byte string literal not displayed */
	// The nonce used to encrypt the symmetric key
	Nonce []byte `protobuf:"bytes,5,opt,name=nonce,proto3" json:"nonce,omitempty"`
	// contains filtered or unexported fields
}

type Envelope struct {
	LetterProto []byte `protobuf:"bytes,1,opt,name=letter_proto,json=letterProto,proto3" json:"letter_proto,omitempty"`
	Signature   []byte `protobuf:"bytes,2,opt,name=signature,proto3" json:"signature,omitempty"`
	// contains filtered or unexported fields
}

type KeyImpl struct {

	// The name of the key, specified by the user when starting a h132 session.
	Name      string         `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	PublicKey *P256PublicKey `protobuf:"bytes,2,opt,name=public_key,json=publicKey,proto3" json:"public_key,omitempty"`
	// Types that are assignable to Impl:
	//
	//	*KeyImpl_DebugRawKey
	//	*KeyImpl_EmergencyBackupKey
	//	*KeyImpl_WebauthnWrappedTpm
	Impl isKeyImpl_Impl `protobuf_oneof:"impl"`
	// contains filtered or unexported fields
}

type KeyImpl_DebugRawKey struct {
	// Private key presented in the clear. Only used for debugging.
	// h132 refuses to operate unless the debug flag is set.
	DebugRawKey *P256PrivateKey `protobuf:"bytes,10,opt,name=debug_raw_key,json=debugRawKey,proto3,oneof"`
}

type KeyImpl_EmergencyBackupKey struct {
	EmergencyBackupKey *EmergencyBackupKey `protobuf:"bytes,11,opt,name=emergency_backup_key,json=emergencyBackupKey,proto3,oneof"`
}

type KeyImpl_WebauthnWrappedTpm struct {
	WebauthnWrappedTpm *WebAuthnWrappedTPMKey `protobuf:"bytes,12,opt,name=webauthn_wrapped_tpm,json=webauthnWrappedTpm,proto3,oneof"`
}

type KeyT interface {
	Pub() (*ecdsa.PublicKey, error)
	SetImplProto(p *KeyImpl) error
}

type Letter struct {
	Ciphertext      []byte                   `protobuf:"bytes,1,opt,name=ciphertext,proto3" json:"ciphertext,omitempty"`
	Nonce           []byte                   `protobuf:"bytes,2,opt,name=nonce,proto3" json:"nonce,omitempty"`
	RecipientKeys   []*EncryptedSymmetricKey `protobuf:"bytes,3,rep,name=recipient_keys,json=recipientKeys,proto3" json:"recipient_keys,omitempty"`
	SenderPublicKey *P256PublicKey           `protobuf:"bytes,4,opt,name=sender_public_key,json=senderPublicKey,proto3" json:"sender_public_key,omitempty"`
	// contains filtered or unexported fields
}

type LetterWritingSet struct {

	// The name of the letter writing set - presented to the user when operating
	// under the letter writing set.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The keys that can decrypt the envelopes.
	Keys []*KeyImpl `protobuf:"bytes,2,rep,name=keys,proto3" json:"keys,omitempty"`
	// Shell command before editing a envelope. The envelope path is passed as an argument.
	PreEditHook string `protobuf:"bytes,10,opt,name=pre_edit_hook,json=preEditHook,proto3" json:"pre_edit_hook,omitempty"`
	// Shell command after new envelope is created or edited. The envelope path is passed as an argument.
	PostEditHook string `protobuf:"bytes,11,opt,name=post_edit_hook,json=postEditHook,proto3" json:"post_edit_hook,omitempty"`
	// contains filtered or unexported fields
}

type P256PrivateKey struct {
	D []byte `protobuf:"bytes,1,opt,name=d,proto3" json:"d,omitempty"`
	// contains filtered or unexported fields
}

type P256PublicKey struct {
	X []byte `protobuf:"bytes,1,opt,name=x,proto3" json:"x,omitempty"`
	Y []byte `protobuf:"bytes,2,opt,name=y,proto3" json:"y,omitempty"`
	// contains filtered or unexported fields
}

type WebAuthnWrappedTPMKey struct {

	// The URL used to trigger WebAuthn interaction.
	ReflectorUrl string `protobuf:"bytes,1,opt,name=reflector_url,json=reflectorUrl,proto3" json:"reflector_url,omitempty"`
	// The key handle used to identify the key in the TPM.
	TpmKeyHandle uint32 `protobuf:"varint,2,opt,name=tpm_key_handle,json=tpmKeyHandle,proto3" json:"tpm_key_handle,omitempty"`
	// The salt given to retrieve PRF output from WebAuthn. Must be 32 bytes.
	PrfSalt []byte `protobuf:"bytes,3,opt,name=prf_salt,json=prfSalt,proto3" json:"prf_salt,omitempty"`
	// The salt given to HKDF to derive the TPM passphrase from the PRF output.
	HkdfSalt []byte `protobuf:"bytes,4,opt,name=hkdf_salt,json=hkdfSalt,proto3" json:"hkdf_salt,omitempty"`
	// The username used to derive the WebAuthn credential {id, name, displayName}.
	WebauthnUsername string `protobuf:"bytes,5,opt,name=webauthn_username,json=webauthnUsername,proto3" json:"webauthn_username,omitempty"`
	// The credential JSON returned by WebAuthn.
	WebauthnCredentialJson []byte `` /* 129-byte string literal not displayed */
	// contains filtered or unexported fields
}