Skip to main content

Type Alias: SigningKeyPurpose

SigningKeyPurpose = "trust-chain" | "identifier-update" | "identifier-assertion" | "audit-checkpoint"

Defined in: packages/key-custodian/src/port.ts:45

What a signing key is for:

  • trust-chain: the federation entity keys that sign entity statements (slice 2).
  • identifier-update: the key that signs the entries of a did:webvh log, which is the key that controls the identifier.
  • identifier-assertion: the key an identifier's document publishes for signing credentials.
  • audit-checkpoint: the key that signs the audit chain's checkpoints.

They are separate purposes, although the policy rows are alike today, so that a process is started for the ones it needs and refuses the rest: the audit deployable cannot be asked for a trust-chain key.