Skip to main content

Interface: KeySpec

Defined in: packages/key-custodian/src/port.ts:118

What to generate, for a signing key.

Properties​

alg​

readonly alg: SigningAlgorithm

Defined in: packages/key-custodian/src/port.ts:126

The algorithm the key will sign with. A key signs with this one only.

label?​

readonly optional label?: string

Defined in: packages/key-custodian/src/port.ts:133

A label written on the token objects (CKA_LABEL), for an operator listing the token. Not an identifier and not unique; nothing looks a key up by it. Defaults to the purpose. 1 to 64 bytes once encoded as UTF-8, which is fewer than 64 characters for anything outside ASCII.

purpose​

readonly purpose: SigningKeyPurpose

Defined in: packages/key-custodian/src/port.ts:124

What the key is for. Checked against the key policy before the token is asked. key-wrap is not accepted here: a wrapping key comes from KeyCustodian.generateWrappingKey.