Primitive
secret.rewrap
BETAShort name: rewrap
Version: 1.0.0
Re-wraps every sensitive envelope on an atom under a new owner KEK without re-encrypting ciphertext (SOCIALLUX_THEORY §13.3).
Back to primitive libraryInputs
| Key | Type | Required | Description |
|---|---|---|---|
| atomId | objectId | true | Atom to rewrap. |
| fromOwnerId | string | true | Owner whose KEK currently wraps the envelopes. Must match the kid encoded in each envelope. |
| toOwnerId | string | true | Owner whose KEK will wrap the envelopes after this operation. |
Outputs
| Key | Type | Required | Description |
|---|---|---|---|
| atomVersion | number | false | Post-update atom version. |
| rewrapped | number | false | Number of envelopes rewrapped. |