Function openField

  • openField(
        sealed: SealedField,
        encKeyId: string,
        myPrivkey: Uint8Array,
    ): Promise<Uint8Array<ArrayBufferLike>>

    A recipient opens the envelope with their X25519 private key. The server cannot run this — it has no private key. Mirrors open_field in sealed_field.rs, including its two integrity gates:

    • the AAD is RE-DERIVED from the struct fields and must equal the stored one (anti-frankenstein: swapping dfid/event/field/content_type/alg/schema makes the open fail);
    • the plaintext must match the hiding commitment recomputed with the DK.

    Parameters

    • sealed: SealedField
    • encKeyId: string
    • myPrivkey: Uint8Array

    Returns Promise<Uint8Array<ArrayBufferLike>>

Settings

Member Visibility