Bootstrap initializes a TKA based on the given checkpoint.

ChonkDir returns an implementation of Chonk which uses the given directory to store TKA state.

Create initializes a brand-new TKA, generating a genesis update and committing it to the given storage.

Open initializes an existing TKA from the given tailchonk.

An AddKey AUM describes a new key trusted by the TKA.

A Checkpoint AUM specifies the full state of the TKA.

A DisableNL AUM describes the disablement of TKA.

Valid AUM types.

A NoOp AUM carries no information and is used in tests.

A RemoveKey AUM describes hte removal of a key trusted by TKA.

A UpdateKey AUM updates the metadata or votes of an existing key.

Valid KeyKind values.

Valid KeyKind values.

SigDirect describes a signature over a specific node key, using the keyID specified.

ErrNoIntersection is returned when a shared AUM could not be determined when evaluating a remote sync offer.

ErrNoSuchKey is returned if the key referenced by a KeyID does not exist.

AUM describes an Authority Update Message.

Authority is a Tailnet Key Authority.

FS implements filesystem storage of TKA state.

Key describes the public components of a key known to network-lock.

Mem implements in-memory storage of TKA state, suitable for tests.

NodeKeySignature encapsulates a signature that authorizes a specific node key, based on verification from keys in the tailnet key authority.

State describes Tailnet Key Authority state at an instant in time.

SyncOffer conveys information about the current head & ancestor AUMs, for the purpose of synchronization with some remote end.

UpdateBuilder implements a builder for changes to the tailnet key authority.

Chonk implementations provide durable storage for AUMs and other TKA state.

Types implementing Signer can sign update messages.

AUMHash represents the BLAKE2s digest of an Authority Update Message (AUM).

AUMKind describes valid AUM types.

KeyKind describes the different varieties of a Key.

SigKind describes valid NodeKeySignature types.