111 lines
2.6 KiB
JSON
111 lines
2.6 KiB
JSON
{
|
|
"$schema": "https://json-schema.org/draft/2020-12/schema",
|
|
"$id": "https://thinkloom.app/schemas/provenance/1.0/recovery-key-envelope.schema.json",
|
|
"title": "Recovery key envelope",
|
|
"description": "Portable recovery envelope for a protected project key.",
|
|
"type": "object",
|
|
"properties": {
|
|
"schema_version": {
|
|
"const": "1.0"
|
|
},
|
|
"envelope_id": {
|
|
"type": "string",
|
|
"pattern": "^record_[0-9A-HJKMNP-TV-Z]{26}$"
|
|
},
|
|
"key_id": {
|
|
"type": "string",
|
|
"pattern": "^key_[0-9A-HJKMNP-TV-Z]{26}$"
|
|
},
|
|
"envelope_type": {
|
|
"const": "recovery"
|
|
},
|
|
"algorithm": {
|
|
"enum": [
|
|
"xchacha20-poly1305"
|
|
]
|
|
},
|
|
"key_derivation": {
|
|
"type": "object",
|
|
"properties": {
|
|
"algorithm": {
|
|
"const": "argon2id"
|
|
},
|
|
"memory_kib": {
|
|
"type": "integer",
|
|
"minimum": 65536
|
|
},
|
|
"iterations": {
|
|
"type": "integer",
|
|
"minimum": 1
|
|
},
|
|
"parallelism": {
|
|
"type": "integer",
|
|
"minimum": 1
|
|
},
|
|
"salt": {
|
|
"type": "string",
|
|
"minLength": 16
|
|
}
|
|
},
|
|
"required": [
|
|
"algorithm",
|
|
"memory_kib",
|
|
"iterations",
|
|
"parallelism",
|
|
"salt"
|
|
],
|
|
"additionalProperties": false
|
|
},
|
|
"nonce": {
|
|
"type": "string",
|
|
"minLength": 32
|
|
},
|
|
"wrapped_key": {
|
|
"type": "string",
|
|
"minLength": 16
|
|
},
|
|
"ciphertext_sha256": {
|
|
"type": "string",
|
|
"pattern": "^sha256:[a-f0-9]{64}$"
|
|
},
|
|
"created_at": {
|
|
"type": "string",
|
|
"format": "date-time",
|
|
"pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$"
|
|
}
|
|
},
|
|
"required": [
|
|
"schema_version",
|
|
"envelope_id",
|
|
"key_id",
|
|
"envelope_type",
|
|
"algorithm",
|
|
"key_derivation",
|
|
"nonce",
|
|
"wrapped_key",
|
|
"ciphertext_sha256",
|
|
"created_at"
|
|
],
|
|
"additionalProperties": false,
|
|
"examples": [
|
|
{
|
|
"schema_version": "1.0",
|
|
"envelope_id": "record_01J0000000000000000000000S",
|
|
"key_id": "key_01J0000000000000000000000G",
|
|
"envelope_type": "recovery",
|
|
"algorithm": "xchacha20-poly1305",
|
|
"key_derivation": {
|
|
"algorithm": "argon2id",
|
|
"memory_kib": 65536,
|
|
"iterations": 3,
|
|
"parallelism": 1,
|
|
"salt": "c2FsdC1mb3ItdGhpbmtsb29t"
|
|
},
|
|
"nonce": "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA",
|
|
"wrapped_key": "d3JhcHBlZC1wcm9qZWN0LWtleQ==",
|
|
"ciphertext_sha256": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
|
|
"created_at": "2026-07-17T18:42:10.123Z"
|
|
}
|
|
]
|
|
}
|