Skip to content

EcdhDerivationAttributes

Source code in docs_src/capo_payment_cryptography_data/types/ecdh_derivation_attributes.py
class EcdhDerivationAttributes(TypedDict, closed=True):
    certificate_authority_public_key_identifier: "capo_payment_cryptography_data.types.key_arn_or_key_alias_type.KeyArnOrKeyAliasType"
    """<p>The <code>keyArn</code> of the certificate that signed the client's <code>PublicKeyCertificate</code>.</p>"""
    public_key_certificate: (
        "capo_payment_cryptography_data.types.certificate_type.CertificateType"
    )
    """<p>The client's public key certificate in PEM format (base64 encoded) to use for ECDH key derivation.</p>"""
    key_algorithm: "capo_payment_cryptography_data.types.symmetric_key_algorithm.SymmetricKeyAlgorithm"
    """<p>The key algorithm of the derived ECDH key.</p>"""
    key_derivation_function: "capo_payment_cryptography_data.types.key_derivation_function.KeyDerivationFunction"
    """<p>The key derivation function to use for deriving a key using ECDH.</p>"""
    key_derivation_hash_algorithm: "capo_payment_cryptography_data.types.key_derivation_hash_algorithm.KeyDerivationHashAlgorithm"
    """<p>The hash type to use for deriving a key using ECDH.</p>"""
    shared_information: (
        "capo_payment_cryptography_data.types.shared_information.SharedInformation"
    )
    """<p>A byte string containing information that binds the ECDH derived key to the two parties involved or to the context of the key.</p> <p>It may include details like identities of the two parties deriving the key, context of the operation, session IDs, and optionally a nonce. It must not contain zero bytes, and re-using shared information for multiple ECDH key derivations is not recommended.</p>"""

certificate_authority_public_key_identifier instance-attribute

certificate_authority_public_key_identifier: KeyArnOrKeyAliasType

The keyArn of the certificate that signed the client's PublicKeyCertificate.

key_algorithm instance-attribute

key_algorithm: SymmetricKeyAlgorithm

The key algorithm of the derived ECDH key.

key_derivation_function instance-attribute

key_derivation_function: KeyDerivationFunction

The key derivation function to use for deriving a key using ECDH.

key_derivation_hash_algorithm instance-attribute

key_derivation_hash_algorithm: KeyDerivationHashAlgorithm

The hash type to use for deriving a key using ECDH.

public_key_certificate instance-attribute

public_key_certificate: CertificateType

The client's public key certificate in PEM format (base64 encoded) to use for ECDH key derivation.

shared_information instance-attribute

shared_information: SharedInformation

A byte string containing information that binds the ECDH derived key to the two parties involved or to the context of the key.

It may include details like identities of the two parties deriving the key, context of the operation, session IDs, and optionally a nonce. It must not contain zero bytes, and re-using shared information for multiple ECDH key derivations is not recommended.