RequestSeal.KeyIdentity (RequestSeal v0.2.0)

Internal trusted key equivalence, redacted from default inspection.

Public identities use validated RequestSeal.PublicKey components, with :rsa_pss normalized to :rsa. Symmetric identities are opaque, nonsecret custodian-supplied binaries of 1–256 bytes. RequestSeal never derives one from a secret. A caller must supply the same identity for aliases within its trusted scope. Unknown equivalence never establishes equality, including with itself. Do not place these internal values in general results, logs, or telemetry.

Summary

Types

t()

Functions

same?(arg1, arg2)

Compare known, validated identities; unknown or malformed identities never match.

Types

t()

@type t() :: %RequestSeal.KeyIdentity{
  kind: :public | :symmetric | :unknown,
  value: term()
}

Functions

same?(arg1, arg2)

@spec same?(t(), t()) :: boolean()

Compare known, validated identities; unknown or malformed identities never match.