myc

Self-custodial remote signer for Radroots apps
git clone https://radroots.dev/git/myc.git
Log | Files | Refs | README | LICENSE

encrypted_identity_envelope.v1.json (1286B)

      1 {
      2   "schema": "radroots.myc.encrypted-identity-envelope",
      3   "schema_version": 1,
      4   "contract_version": 1,
      5   "radroots_secrets_envelope_version": 2,
      6   "encoded_max_bytes": 262144,
      7   "identity_secret_bytes": 32,
      8   "wrapping_credential_bytes": 32,
      9   "provisioning_entropy": {
     10     "data_key_bytes": 32,
     11     "envelope_nonce_bytes": 24,
     12     "wrapping_nonce_bytes": 24,
     13     "caller_supplied": true
     14   },
     15   "authenticated_context": {
     16     "purpose": "radroots.myc.encrypted_identity",
     17     "subject_type": "provider_identity",
     18     "subject_value": "<role>:<expected_public_key>",
     19     "payload_schema": "radroots.myc.identity_secret.v1",
     20     "credential_reference_bound": true
     21   },
     22   "artifact": {
     23     "create_new": true,
     24     "overwrite": false,
     25     "symlink_follow": false,
     26     "regular_file": true,
     27     "single_link": true,
     28     "owner_uid": "effective_uid",
     29     "create_mode_octal": "0600",
     30     "read_modes_octal": ["0400", "0600"]
     31   },
     32   "verification": {
     33     "expected_identity_required": true,
     34     "derived_public_key_must_match": true,
     35     "legacy_envelope_accepted": false,
     36     "ordinary_run_provisions": false
     37   },
     38   "backup": {
     39     "state_backup_includes_envelope": false,
     40     "state_backup_includes_wrapping_credential": false,
     41     "state_backup_includes_plaintext_identity": false
     42   }
     43 }