Key Wrap API

[tarcieri]

This is a tracking issue for adding a key wrapping API to Miscreant. Key wrapping was the original impetus for the creation of the AES-SIV construction, and also the impetus for creating Miscreant in the first place.

This API should generate a random encryption key of the desired length (with e.g. a 128-bit minimum), encrypt it under a given algorithm, and return both the randomly generated key and its encrypted form.

Since the key is guaranteed to be generated randomly and therefore never repeats, thanks to the SIV construction we can entirely omit a nonce/associated data, ensuring that ciphertext for wrapped keys are as small as possible.

Implementation Status

This is a tracking issue for adding key wrap support to the various language-specific implementations in this project:

Language	Support
Go	⛔
Python	⛔
Ruby	⛔
Rust	⛔
TypeScript	⛔