One secret of a wallet. BIP39 and RAW hold AES-256-GCM ciphertext
(nonce, ciphertext, tag) under a data key (DEK) that exists only wrapped,
once per holder, in wallet_keyshare; a rotation re-encrypts under a new DEK
and bumps dekGeneration, touching no address. LEGACY_MINTFX holds no key,
only the ledger account the mintfx program moves its PDA's funds by; UTILA
holds none either, only the Utila wallet that signs.
One secret of a wallet.
BIP39andRAWhold AES-256-GCM ciphertext (nonce, ciphertext, tag) under a data key (DEK) that exists only wrapped, once per holder, inwallet_keyshare; a rotation re-encrypts under a new DEK and bumpsdekGeneration, touching no address.LEGACY_MINTFXholds no key, only the ledger account the mintfx program moves its PDA's funds by;UTILAholds none either, only the Utila wallet that signs.