// Copyright 2021 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

namespace cryptohome;

// The user secret stash payload. Because it contains sensitive secrets, it can
// be stored to disk only in encrypted form.
table UserSecretStashPayload {
  // The raw file system key used for the, say, ext4 file encryption. The actual
  // filesystem encryption implementation used by Chrome OS changes over time.
  file_system_key:[ubyte] (id: 0);
  // In the UserSecretStash world, there is one global reset secret that any
  // PinWeaver backed credential uses.
  reset_secret:[ubyte] (id: 1);
}

root_type UserSecretStashPayload;