GenerateKeyPair creates a new RSA key pair.

NewKeyDerivation creates key derivation parameters.

MaxUsernameLen defines maximum username length in bytes.

MinIterations defines minimum allowed PBKDF2 iterations.

DEK specific errors.

KeyPair specific errors.

ErrIterationsInvalid indicates iteration count is below minimum.

Common key operation errors.

ErrUsernameEmpty indicates an empty username was provided.

ErrUsernameInvalid indicates username contains invalid characters.

ErrUsernameLength indicates username exceeds maximum length.

InitialKeyDerivation represents parameters before storage.

InitialKeyPair represents a newly generated key pair before server storage.

KeyDerivation represents parameters as stored in the backend.

KeyPair represents a key pair as stored in the backend.

UnsealedKeyPair represents an active key pair with access to private key operations.