signet::forge::crypto::LocalKeyStore::Config Struct Reference

#include <kms_local.hpp>

Public Attributes
std::string	keystore_path
	Directory path (e.g. ~/.signet/keystore)
std::string	passphrase
	Passphrase for KEK derivation.
bool	create_if_missing = true
	Create keystore directory on first use.
uint32_t	pbkdf2_iterations = 600'000u
	PBKDF2-SHA256 iteration count for passphrase → KEK stretching.

Detailed Description

Definition at line 74 of file kms_local.hpp.

Member Data Documentation

create_if_missing

bool signet::forge::crypto::LocalKeyStore::Config::create_if_missing = true

Create keystore directory on first use.

Definition at line 77 of file kms_local.hpp.

keystore_path

std::string signet::forge::crypto::LocalKeyStore::Config::keystore_path

Directory path (e.g. ~/.signet/keystore)

Definition at line 75 of file kms_local.hpp.

passphrase

std::string signet::forge::crypto::LocalKeyStore::Config::passphrase

Passphrase for KEK derivation.

Definition at line 76 of file kms_local.hpp.

pbkdf2_iterations

uint32_t signet::forge::crypto::LocalKeyStore::Config::pbkdf2_iterations = 600'000u

PBKDF2-SHA256 iteration count for passphrase → KEK stretching.

OWASP 2023 / NIST SP 800-132 recommend ≥ 600 000 for production. Reduce only in automated tests (e.g. 1000) — never below 1000.

Definition at line 81 of file kms_local.hpp.

---

The documentation for this struct was generated from the following file:

• include/signet/crypto/kms_local.hpp