crypto/io.github.jdbenitez94.criollo.kmp.foundation.kryptostore.crypto

Package-level declarations

Types

AlgorithmProvider

interface AlgorithmProvider<T>

AndroidCryptoContextHolder

object AndroidCryptoContextHolder

Cipher

interface Cipher

CryptoRuntime

class CryptoRuntime(stack: PlatformCryptoStack, storeRegistry: StoreRegistry = StoreRegistry(), log: KryptoLog = KryptoLog.NoOp)

Initializes platform crypto (key rotation + re-encrypt + post-init hooks) behind a mutex.

CryptoRuntimeState

sealed interface CryptoRuntimeState

EncryptedStoreHandle

fun interface EncryptedStoreHandle

Handle for an encrypted store that can rewrite ciphertext under the current Cipher after key rotation (REQ-ROT-01).

KeyRotationConfig

data class KeyRotationConfig(val rotationPeriod: Duration = 90.days, val initialBackoff: Duration = 500.milliseconds, val maxRetries: Int = 3)

KeyRotator

interface KeyRotator

KryptoLog

fun interface KryptoLog

Optional logging hook for KryptoStore. Default is a no-op so the library has no hard dependency on app logging frameworks.

PlatformCryptoStack

data class PlatformCryptoStack(val cipher: Cipher, val keyRotator: KeyRotator, val postRotationInit: suspend () -> Unit = {}, val postMigrationCleanup: suspend () -> Unit = {})

StoreRegistry

class StoreRegistry

Registry of encrypted stores to re-encrypt when KeyRotator.rotateKeyIfNeeded returns true.

StreamingAeadCipher

class StreamingAeadCipher(streamingAead: StreamingAead, dispatcher: ERROR CLASS: Symbol not found for CoroutineDispatcher = Dispatchers.Default) : Cipher

Optional Cipher backed by Tink StreamingAead for large payloads (REQ-HRD-03).

Properties

ENCRYPTED_BLOB_MAGIC

const val ENCRYPTED_BLOB_MAGIC: String

Magic header prepended to encrypted DataStore payloads (historical wire name; keep for blob compat).

WEB_CRYPTO_DB_NAME

const val WEB_CRYPTO_DB_NAME: String

IndexedDB database name used by the WebCrypto worker — keys must not be stored in localStorage.

Functions

createPlatformCryptoStack

actual fun createPlatformCryptoStack(appId: String, rotationConfig: KeyRotationConfig): PlatformCryptoStack

Platform entry: Android needs AndroidCryptoContextHolder registration before use.

expect fun createPlatformCryptoStack(appId: String, rotationConfig: KeyRotationConfig = KeyRotationConfig.DEFAULT): PlatformCryptoStack

Platform entry: Android needs AndroidCryptoContextHolder registration before use.

actual fun createPlatformCryptoStack(appId: String, rotationConfig: KeyRotationConfig): PlatformCryptoStack

Platform entry: Android needs AndroidCryptoContextHolder registration before use.

actual fun createPlatformCryptoStack(appId: String, rotationConfig: KeyRotationConfig): PlatformCryptoStack

Platform entry: Android needs AndroidCryptoContextHolder registration before use.

createStreamingAeadCipher

fun createStreamingAeadCipher(dispatcher: ERROR CLASS: Symbol not found for CoroutineDispatcher = Dispatchers.Default): StreamingAeadCipher

Creates a standalone StreamingAeadCipher with AES256_GCM_HKDF_1MB (REQ-HRD-03).