Type Alias: KeyHandleId

KeyHandleId = `hsm:v1:${string}:${string}`

Defined in: packages/key-custodian/src/port.ts:90

A key's id as the custodian mints it: hsm:v1:<token label>:<CKA_ID in hex>.

The prefix names the backend, so an id stored in a database row says on its own which custody holds the key (chapter 28, section 4). The methods of KeyCustodian accept a plain string rather than this type, on purpose: ids come back from database columns typed string, and an id from another backend must reach the adapter so it can answer null for it.