Private key storage

A private key is stored as an encrypted PKCS #8 structure in the PEM format. It is protected by a key generated from the key chain's passPhrase using PBKDF2. It is managed with the KeyApi.

A key file is found in the repository's keys folder. To support case insensitive file systems the file name is the base-32 encoding of the key's name as a UTF-8 string.

key storage

Example

A key is stored as JSON.

{
  "Name": "x1",
  "Id": "QmPtBXBV3xS2FR6emopGLhHNFR2nsBdwuxitLfsHSBjuYC",
  "Pem": "-----BEGIN ENCRYPTED PRIVATE KEY-----
          MIIE9jAoB43t9wa4 ... 
          -----END ENCRYPTED PRIVATE KEY-----
          "
}