NewKeyData creates a new KeyData object for the supplied secboot.KeyData.

NewProtectedKey creates a new key that is protected by the registered [KeyProtector].

SetKeyProtector is used to configure the global external key setup hook, used by [NewProtectedKey].

SetKeyRevealer is used to configure the global key reveal hook, used by this platform.

KeyProtectorAEAD indicates that the external key setup hook does not have a way to accept additional authenticated data.

KeyData encapsulates the metadata used to recover keys using the hooks platform.

KeyParams is the parameters for [NewProtectedKey].

KeyProtector is an abstraction for an externally supplied key setup hook.

KeyRevealer is an abstraction for an externally supplied key reveal hook.

KeyProtectorFlags is used to specify features of the external key setup hook.