KekEscrowSplitterInterface
in
Table of Contents
Methods
- reassemble() : SensitiveString
- Reassemble plaintext shares during a controlled DR drill.
- split() : array<int, SensitiveString>
- Split a KEK into escrow shares for sealed-envelope handling.
Methods
reassemble()
Reassemble plaintext shares during a controlled DR drill.
public
reassemble(array<int, SensitiveString> $shares) : SensitiveString
Parameters
- $shares : array<int, SensitiveString>
-
Share material
Return values
SensitiveStringsplit()
Split a KEK into escrow shares for sealed-envelope handling.
public
split(SensitiveString $kek, int $threshold, int $shareCount) : array<int, SensitiveString>
Implementations must never persist plaintext shares or KEKs.
Parameters
- $kek : SensitiveString
-
Key-encryption key material
- $threshold : int
-
Reassembly threshold
- $shareCount : int
-
Total shares