Variable seal

seal: (plaintext: any, label: any, tier: any, options: any) => string = seal

Type Declaration

- (plaintext: any, label: any, tier: any, options: any): string
- Seals text under the data encryption key of its realm and class, itself wrapped under the key-encryption key, which never leaves this file (#391).
  Parameters
  - plaintext: any
    the text
  - label: any
    what kind of data it is: its DEK's class, and the row /admin/encryption counts it on
  - tier: any
    'cell' to seal under this cell's own DEKs where a cell key is held (#98); anything else seals under the service's
  - options: any
    { realm }: the realm whose DEK seals it, when that is not the ambient realm (a flush writing another realm's rows)
  Returns string
  the ciphertext, or null without a key-encryption key