| components.conf |
|
534 |
- |
| gtest |
|
|
- |
| lockstore_ffi |
|
|
- |
| lockstore_rs |
|
|
- |
| LockstoreService.cpp |
|
21162 |
- |
| LockstoreService.h |
|
6196 |
- |
| moz.build |
|
1161 |
- |
| nsILockstore.idl |
Scriptable wrapper over the Lockstore keystore. A single instance per
process is opened against the current profile's keystore file
(lockstore.keys.sqlite).
KEK references are opaque strings of the form
`lockstore::kek::<type>:<base64url(random_id)>`, minted by
`createKek`. A collection is an arbitrary namespace under which a
single DEK (data encryption key) is wrapped by one or more KEKs;
see `createDek`.
Methods that touch SQLite or run PBKDF2 return a `Promise` and
execute on a private background queue so they do not block the main
thread. The cheap in-memory state check (`isKekUnlocked`) remains
synchronous; `lockKek` and `lock` are also cheap but return a Promise
so the API shape is uniform.
|
15530 |
- |
| tests |
|
|
- |