Close Core Crypto, its PKI environment, and its database after their users have stopped. A native close failure remains a failure on later calls; the account owner must retain its lease because the native binding cannot confirm successful release by retrying.

configurePkiEnvironment

open suspend override fun configurePkiEnvironment(hooks: PkiEnvironmentHooks)

Creates and installs a PKI environment backed by the same encrypted database as Core Crypto.

exportDatabaseCopy

open suspend override fun exportDatabaseCopy(destinationPath: String)

Export a compacted copy of the CoreCrypto database to the specified destination path. Uses SQLite's VACUUM INTO to create an encrypted copy of the database.

getPkiTrustAnchors

open suspend override fun getPkiTrustAnchors(): List<CertificateChain>

hasCredential

open suspend override fun hasCredential(clientId: CryptoQualifiedClientId, cipherSuite: MLSCiphersuite): Boolean

Read installed credentials without initializing a client or creating key material.

installCredential

open suspend override fun installCredential(credential: CryptoCredential): CryptoCredentialRef

Persists credential without taking ownership of it.

mlsClient

open suspend override fun mlsClient(clientId: CryptoQualifiedClientId, defaultCipherSuite: MLSCiphersuite, mlsTransporter: MLSTransporter, epochObserver: MLSEpochObserver, coroutineScope: CoroutineScope): MLSClient

proteusClient

open suspend override fun proteusClient(): ProteusClient

startX509CredentialAcquisition

open suspend override fun startX509CredentialAcquisition(config: X509CredentialAcquisitionConfig, existingCredentialRef: CryptoCredentialRef? = null): CryptoCredential

Starts an X509 acquisition and keeps it alive while PkiEnvironmentHooks.authenticate performs authentication. existingCredentialRef remains valid after this call.

transaction

suspend fun <T> transaction(name: String, block: suspend (context: CoreCryptoContext) -> T): T