Variable: KEK_ID_PATTERN

const KEK_ID_PATTERN: "^(?:soft:v[1-9][0-9]{0,3}:[0-9a-f]{16}|hsm:v[1-9][0-9]{0,3}:[A-Za-z0-9._-]{1,32}:[0-9a-f]{32})$" = '^(?:soft:v[1-9][0-9]{0,3}:[0-9a-f]{16}|hsm:v[1-9][0-9]{0,3}:[A-Za-z0-9._-]{1,32}:[0-9a-f]{32})$'

Defined in: packages/contracts/src/schemas/audit-actions.ts:372

A key-encryption key's id, as subject-key.rewrap records it: soft:v<n>:<16 hex> for the software adapter, or the custodian's handle hsm:v<n>:<token label>:<32 hex> for a key on a token. It names an adapter, a version and a key, and is no secret: the key itself never leaves where it lives. This is the one place a custodian handle is recorded, because a wrapping key has no public half to name it by.