Variable: HSM_KEK_ID_PATTERN

const HSM_KEK_ID_PATTERN: "^hsm:v1:([A-Za-z0-9._-]{1,32}):([0-9a-f]{32})$" = '^hsm:v1:([A-Za-z0-9._-]{1,32}):([0-9a-f]{32})$'

Defined in: packages/key-wrap/src/kek-id.ts:39

The grammar of a hardware key id, which is a KeyCustodian handle: hsm:v1:, the token's label, a colon, and the key's CKA_ID as 32 lowercase hex digits. Exported as a pattern string so a configuration schema can refuse a malformed handle when the file is loaded, before any token is opened. parseKekId reads ids with the regular expression built from this constant, so the grammar has one home.