feat(vault): add recovery passphrase handling for bootstrap and unseal processes

This commit is contained in:
CleverWild
2026-06-13 23:09:49 +02:00
committed by Skipper
parent 547cb9325b
commit 8d940daf90
5 changed files with 107 additions and 2 deletions

View File

@@ -246,9 +246,19 @@ create table if not exists proposal_result (
) STRICT;
-- ===============================
-- Recovery Operators (§3.5/§3.6)
-- Recovery Operators (§3.4/§3.5/§3.6)
-- ===============================
-- Encrypted Shamir shares for recovery operators (mirrors the `operator` table).
create table if not exists recovery_operator (
id integer not null primary key references recovery_operator_identity(id) on delete restrict,
share blob not null,
share_nonce blob not null,
share_salt blob not null,
created_at integer not null default(unixepoch('now')),
updated_at integer not null default(unixepoch('now'))
) STRICT;
create table if not exists recovery_operator_identity (
id integer not null primary key,
public_key blob not null unique,