| components.conf |
|
534 |
- |
| gtest |
|
|
- |
| lockstore_ffi |
|
|
- |
| lockstore_rs |
|
|
- |
| LockstoreService.cpp |
|
23579 |
- |
| LockstoreService.h |
|
6120 |
- |
| moz.build |
|
1161 |
- |
| nsILockstore.idl |
Scriptable wrapper over the Lockstore keystore. A single instance per
process is opened against the current profile's keystore file
(lockstore.keys.sqlite).
KEK references are opaque strings of the form
`lockstore::kek::<type>:<base64url(random_id)>`, minted by
`createKek`. Each DEK (data encryption key) is named by a `dekName` -- an
arbitrary namespace -- and is wrapped by one or more KEKs;
see `createDek`.
Methods that touch SQLite or run PBKDF2 return a `Promise` and
execute on a private background queue so they do not block the main
thread. The cheap in-memory state check (`isKekUnlocked`) remains
synchronous; `lockKek` and `lock` are also cheap but return a Promise
so the API shape is uniform.
|
15814 |
- |
| tests |
|
|
- |