key

type Config struct {
	Db state.DBManager
}

type EllipticJwk struct {
	Crv string `json:"crv"`
	Kty string `json:"kty"`
	X   string `json:"x"`
	Y   string `json:"y"`
}

type KeyManager interface {
	// InitSeed creates the master key encrypted with a passphrase, returns the mnemonic
	InitSeed(seedImport string, passphrase string) (string, error)

	// UnlockSeed unlocks the master key with passphrase
	UnlockSeed(passphrase string) error

	// GetSeed gets the seed phrase mnemonic that was used to initialize this daemon
	GetSeed() (string, error)

	IsLocked() bool

	// New Child will create a new child key from the master key.
	// If current index is specified, that will be used. Otherwise generated.
	// Master seed should be unlocked first. Child ID should be tracked
	// by the caller. Private key bytes are also returned.
	NewChild(parentId int64, keyIndex uint32) (int64, []byte, uint32, error)

	// GetChildKey gets the private key bytes for a certain child derrivation.
	GetChildKey(childId int64) ([]byte, error)

	GetIndex(id int64) (uint32, error)

	// GetChildrenKeys gets all the children private keys created from parent
	GetChildrenKeys(parentId int64) ([][]byte, []uint32, error)

	// CreateNewED25519Key will create a new ED25519 keypair and save to DB under the identity key passed in.
	// Returns public key, private key, the backing store ID, and the backing key index.
	CreateNewED25519Key(int64) ([]byte, []byte, int64, uint32, error)

	// CreateNewSECP256K1Key will create a new SECP256K1 keypair and save to DB under the identity key passed in.
	// Returns private key, the backing store ID, and the backing key index.
	CreateNewSECP256K1Key(int64) (*ecdsa.PrivateKey, int64, uint32, error)

	// CreateNewP384Key will create a new P384 keypair and save to DB under the identity key passed in.
	// Returns private key, the backing store ID, and the backing key index.
	CreateNewP384Key(int64) (*ecdsa.PrivateKey, int64, uint32, error)

	// Decrypt will attempt to decrypt a message with one of the saved keys
	// Returns the decrypted message as bytes.
	Decrypt(protected, ciphertext, iv, tag string) ([]byte, error)
}