Stretch a password into a non-extractable AES-256-GCM key. Exposed so a lock screen (or createEncryptedStorage) can derive once and reuse the key for many envelopes that share a salt, instead of paying for PBKDF2 each time.
Stretch a password into a non-extractable AES-256-GCM key. Exposed so a lock screen (or createEncryptedStorage) can derive once and reuse the key for many envelopes that share a salt, instead of paying for PBKDF2 each time.