Documentation

Encode a key store as a JSON ByteString (discarding any cached cleartext copies of secrets it may have)

Encrypt a clear text message with a name RSA key pair.

Decrypt an RSA-encrypted message (the RSA secret key named in the message must be available.)

Sign a message with a named RSA secret key (which must be available).

Verify that an RSA signature of a message is correct.

Symetrically encrypt a message with a Safeguard (list of names private keys).

Symetrically encrypt a message with a Safeguard (list of names private keys).

Create a private key.

Backup all of the keys in the store with their configured backup keys.

Remember the secret text for a key -- will record the hash and encrypt it with the configured safeguards, generating an error if any of the safeguards are not available.

Primitive to make a cryptographic copy (i.e., a safeguard) of the secret text of a key, storing it in the key (and doing nothing if the that safeguard is already present).

Return all of the keys in the keystore.

List all of the keys in the store, one per line, on the output.

Print out the information of a particular key.

Try to load the secret copy into the key and return it. (No error is raised if it failed to recover the secret.)

Try to load an encryption or decryption key for an encrypted message.