security/lockstore

	Name	Description	Size	Coverage
	components.conf		534	-
	gtest			0 %
	lockstore_ffi			93 %
	lockstore_rs			72 %
	LockstoreService.cpp		26738	0 %
	LockstoreService.h		6635	-
	moz.build		1161	-
	nsILockstore.idl	Scriptable wrapper over the Lockstore keystore. A single instance per process is opened against the current profile's keystore file (lockstore.keys.sqlite). KEK references are opaque strings of the form `lockstore::kek::<type>:<base64url(random_id)>`, minted by `createKek`. Each DEK (data encryption key) is named by a `dekName` -- an arbitrary namespace -- and is wrapped by one or more KEKs; see `createDek`. Methods that touch SQLite or run PBKDF2 return a `Promise` and execute on a private background queue so they do not block the main thread. The cheap in-memory state check (`isKekUnlocked`) remains synchronous; `lockKek` and `lock` are also cheap but return a Promise so the API shape is uniform.	19277	-
<1%	tests			0 %