Class SvrBStoreResponse
-
- All Implemented Interfaces:
public final class SvrBStoreResponseThe result of preparing a backup to be stored with forward secrecy guarantees.
This context contains all the necessary components to encrypt and store a backup using a key derived from both the user's Account Entropy Pool and the SVR-B-protected Forward Secrecy Token.
-
-
Field Summary
Fields Modifier and Type Field Description private final BackupForwardSecrecyTokenforwardSecrecyTokenprivate final ByteArraynextBackupSecretDataprivate final ByteArraymetadata
-
Constructor Summary
Constructors Constructor Description SvrBStoreResponse(BackupForwardSecrecyToken forwardSecrecyToken, ByteArray nextBackupSecretData, ByteArray metadata)
-
Method Summary
Modifier and Type Method Description final BackupForwardSecrecyTokengetForwardSecrecyToken()The forward secrecy token used to derive MessageBackupKey instances. final ByteArraygetNextBackupSecretData()Opaque value that must be persisted and provided to the next call to SvrB.store. final ByteArraygetMetadata()Opaque metadata that must be stored in the backup file. -
-
Constructor Detail
-
SvrBStoreResponse
SvrBStoreResponse(BackupForwardSecrecyToken forwardSecrecyToken, ByteArray nextBackupSecretData, ByteArray metadata)
-
-
Method Detail
-
getForwardSecrecyToken
final BackupForwardSecrecyToken getForwardSecrecyToken()
The forward secrecy token used to derive MessageBackupKey instances.
This token provides forward secrecy guarantees by ensuring that compromise of the backup key alone is insufficient to decrypt backups. Each backup is protected by a value stored on the SVR-B server that must be retrieved during restoration.
-
getNextBackupSecretData
final ByteArray getNextBackupSecretData()
Opaque value that must be persisted and provided to the next call to SvrB.store.
See the SvrB documentation for lifecycle and persistence handling for this value.
-
getMetadata
final ByteArray getMetadata()
Opaque metadata that must be stored in the backup file.
This metadata contains the encrypted forward secrecy token and other information required to restore the backup. It must be retrievable when restoring the backup, as it's required to fetch the forward secrecy token from SVR-B. This is currently stored in the header of the backup file.
-
-
-
-