Class: SubjectKey

Defined in: packages/persistence/src/personal/handle.ts:9

A subject's data key, resolved: the only thing seal and open accept. It holds the key as an opaque KeyObject, never as bytes, so it cannot be logged or serialised into anything useful. Once the subject's key is destroyed, a handle still held by a caller answers erased instead of opening anything.

Properties

keyId

readonly keyId: string

Defined in: packages/persistence/src/personal/handle.ts:13

The key's public identifier, bound into every ciphertext. Not secret.

---

subjectId

readonly subjectId: string

Defined in: packages/persistence/src/personal/handle.ts:11

The subject the key belongs to.