Expand description
aes-gcm key creation (caller-nonce — see Aead’s nonce warning).
Functions§
- derive_
key - Mint an AES-GCM key of the declared variant from a parameterized
derivation: the derivation runs at the variant’s key length and the
result is subject to
import_key_raw’s contract. - generate_
key - Generate a fresh random key of the declared AES variant.
- import_
key_ jwk - Import an RFC 7517
octJSON Web Key (as JSON text) as an AES-GCM key of the declared variant. See the WITmac-key.export-key-jwkdoc for the package-wide JWK contract. - import_
key_ raw - Import raw key material as the declared AES variant.
- unwrap_
key_ jwk - Mint an AES-GCM key from unwrapped key material read as an
octJWK, subject toimport_key_jwk’s contract plus the unwrap-pathuse/key_opschecks. Consumes theUnwrapInput. - unwrap_
key_ raw - Mint an AES-GCM key of the declared variant from unwrapped key
material read as raw bytes, subject to
import_key_raw’s contract. Consumes theUnwrapInput.