summaryrefslogtreecommitdiff
path: root/doc/dev/notes/key-management-paths.md
blob: d0d3105c6b8c499260665e448c4a8a580259d91d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
## Reserved `ArtiPath` values

The following table lists the `ArtiPath`s currently recognized by the key
manager.

**Note**: the `Key` column represents the name of the key as specified in
[rend-spec-v3].


| Key                  | Type             | Description                                                             | `ArtiPath`                                                                |
|----------------------|------------------|-------------------------------------------------------------------------|---------------------------------------------------------------------------|
| `KS_hsc_desc_enc`    | x25519           | Client authorization key, used for onion descriptor decryption.         | `client/<client_id>/<hsid>.onion/KS_hsc_desc_enc.x25519_private`          |
| `KS_hsc_intro_auth`  | ed25519          | Client authorization key, used for the introduction protocol.           | `client/<client_id>/<hsid>.onion/KS_hsc_intro_auth.ed25519_private`       |
| `KS_hs_id`           | expanded ed25519 | Service identity keypair.                                               | `hs/<svc_nickname>/KS_hs_id.expanded_ed25519_private`                     |
| `KP_hs_id`           | ed25519          | Service identity public key.                                            | `hs/<svc_nickname>/KS_hs_id.ed25519_public`                               |
| `KS_blind_id`        | expanded ed25519 | Blinded service identity keypair.                                       | `hs/<svc_nickname>/KS_hs_blind_id_<TIME_PERIOD>.expanded_ed25519_private` |
| `KP_blind_id`        | ed25519          | Blinded service identity keypair.                                       | `hs/<svc_nickname>/KS_hs_blind_id_<TIME_PERIOD>.ed25519_public`           |
| `KS_hs_desc_sign`    | ed25519          | Blinded service identity public key.                                    | `hs/<svc_nickname>/KS_hs_desc_sign_<TIME_PERIOD>.ed25519_private`         |

[rend-spec-v3]: https://gitlab.torproject.org/tpo/core/torspec/-/blob/main/rend-spec-v3.txt