Skip to content

Interface: PqEnvelope

Defined in: core/src/schema/crypto-pq.ts:42

Post-quantum wrapping shape. kem carries the KEM ciphertext and identifier; inner is the classic AEAD envelope with the wrapped DEK as its content key. Down-stream storage (SQL / IDB) just sees an opaque JSON object — no protocol version bump on the PROTOCOL_VERSION boundary because the outer field is nested inside the same column shape.

readonly v: 1

Defined in: core/src/schema/crypto-pq.ts:43


readonly kind: "pq-hybrid"

Defined in: core/src/schema/crypto-pq.ts:44


readonly kem: { alg: string; ct: string; }

Defined in: core/src/schema/crypto-pq.ts:46

KEM ciphertext, base64. Fed to the provider on decrypt.

readonly alg: string

readonly ct: string


readonly inner: Envelope

Defined in: core/src/schema/crypto-pq.ts:51

The classic AEAD envelope produced under the KEM shared secret.