NonProductionDeterministicKekEscrowSplitter
in package
implements
KekEscrowSplitterInterface
Table of Contents
Interfaces
Properties
- $environment : string
Methods
- __construct() : mixed
- Constructor.
- reassemble() : SensitiveString
- Reassemble plaintext shares during a controlled DR drill.
- split() : array<int, SensitiveString>
- Split a KEK into escrow shares for sealed-envelope handling.
- assertNonProduction() : void
- Fail closed when the placeholder splitter is accidentally used in production.
Properties
$environment read-only
private
string
$environment
Methods
__construct()
Constructor.
public
__construct(string $environment) : mixed
Parameters
- $environment : string
-
Current runtime environment
reassemble()
Reassemble plaintext shares during a controlled DR drill.
public
reassemble(array<string|int, mixed> $shares) : SensitiveString
Parameters
- $shares : array<string|int, mixed>
-
Share material
Tags
Return values
SensitiveStringsplit()
Split a KEK into escrow shares for sealed-envelope handling.
public
split(SensitiveString $kek, int $threshold, int $shareCount) : array<int, SensitiveString>
Parameters
- $kek : SensitiveString
-
Key-encryption key material
- $threshold : int
-
Reassembly threshold
- $shareCount : int
-
Total shares
Tags
Return values
array<int, SensitiveString>assertNonProduction()
Fail closed when the placeholder splitter is accidentally used in production.
private
assertNonProduction() : void