NewProtectorKey creates a new random ProtectorKey.

The auxiliary key is used to bind keys to models.

The encryption key size is set so it has the same entropy as the derived key.

XXX: needs to be in sync with github.com/snapcore/secboot/crypto.go:"type RecoveryKey" Size of the recovery key.

PlainKey is a wrapper for a secboot KeyData representing a plainkey.

KeyDataWriter is a the same as KeyDataWriter from github.com/canonical/secboot.

AuxKey is the key to bind models to keys.

EncryptionKey is the key used to encrypt the data partition.

ProtectorKey is a key that can be used to protect "plainkey" keys.

RecoveryKey is a key used to unlock the encrypted partition when the encryption key can't be used, for example when unseal fails.