Trevixal API
    Preparing search index...

    Interface EncryptedEnvelope

    Serialized form of an encrypted document. Binary fields are base64 so the envelope survives JSON.

    interface EncryptedEnvelope {
        cipher: "AES-GCM";
        createdAt: number;
        data: string;
        expiresAt: number | null;
        format: "trevixal-encrypted";
        iterations: number;
        iv: string;
        kdf: "PBKDF2-SHA256";
        salt: string;
        title?: string;
        version: 1;
    }
    Index
    cipher createdAt data expiresAt format iterations iv kdf salt title? version
    cipher: "AES-GCM"
    createdAt: number
    data: string

    Ciphertext followed by the GCM tag, base64.

    expiresAt: number | null

    Epoch milliseconds after which the document refuses to open, or null for never. Authenticated together with the ciphertext, so it cannot be edited to extend a deadline.

    format: "trevixal-encrypted"
    iterations: number

    PBKDF2 rounds: slows down guessing attacks at the cost of unlock time.

    iv: string

    12 random bytes (the GCM nonce), base64.

    kdf: "PBKDF2-SHA256"
    salt: string

    16 random bytes, base64.

    title?: string

    Label for the lock screen. Readable without the password and NOT authenticated.

    version: 1

    Settings
    Member Visibility

    On This Page
    Properties