#if OCTAGON
#import <Foundation/Foundation.h>
#import "keychain/ckks/CKKSItem.h"
#import "keychain/ckks/CKKSSIV.h"
#import "keychain/ckks/CKKSPeer.h"
#import "keychain/ckks/proto/source/CKKSSerializedKey.h"
@interface CKKSKey : CKKSItem
@property (readonly) CKKSAESSIVKey* aessivkey;
@property (copy) CKKSProcessedState* state;
@property (copy) CKKSKeyClass* keyclass;
@property bool currentkey;
+ (instancetype)loadKeyWithUUID:(NSString*)uuid zoneID:(CKRecordZoneID*)zoneID error:(NSError* __autoreleasing*)error;
+ (instancetype)randomKeyWrappedByParent:(CKKSKey*)parentKey error:(NSError* __autoreleasing*)error;
+ (instancetype)randomKeyWrappedByParent:(CKKSKey*)parentKey
keyclass:(CKKSKeyClass*)keyclass
error:(NSError* __autoreleasing*)error;
+ (instancetype)randomKeyWrappedBySelf:(CKRecordZoneID*)zoneID error:(NSError* __autoreleasing*)error;
- (bool)saveKeyMaterialToKeychain:(NSError* __autoreleasing*)error;
- (bool)saveKeyMaterialToKeychain:(bool)stashTLK
error:(NSError* __autoreleasing*)error;
- (bool)loadKeyMaterialFromKeychain:(NSError* __autoreleasing*)error;
- (bool)deleteKeyMaterialFromKeychain:(NSError* __autoreleasing*)error;
+ (NSString*)isItemKeyForKeychainView:(SecDbItemRef)item;
+ (NSDictionary*)setKeyMaterialInKeychain:(NSDictionary*)query error:(NSError* __autoreleasing*)error;
+ (NSDictionary*)queryKeyMaterialInKeychain:(NSDictionary*)query error:(NSError* __autoreleasing*)error;
+ (instancetype)keyFromKeychain:(NSString*)uuid
parentKeyUUID:(NSString*)parentKeyUUID
keyclass:(CKKSKeyClass*)keyclass
state:(CKKSProcessedState*)state
zoneID:(CKRecordZoneID*)zoneID
encodedCKRecord:(NSData*)encodedrecord
currentkey:(NSInteger)currentkey
error:(NSError* __autoreleasing*)error;
+ (instancetype)fromDatabase:(NSString*)uuid zoneID:(CKRecordZoneID*)zoneID error:(NSError* __autoreleasing*)error;
+ (instancetype)tryFromDatabase:(NSString*)uuid zoneID:(CKRecordZoneID*)zoneID error:(NSError* __autoreleasing*)error;
+ (instancetype)tryFromDatabaseAnyState:(NSString*)uuid zoneID:(CKRecordZoneID*)zoneID error:(NSError* __autoreleasing*)error;
+ (NSArray<CKKSKey*>*)selfWrappedKeys:(CKRecordZoneID*)zoneID error:(NSError* __autoreleasing*)error;
+ (instancetype)currentKeyForClass:(CKKSKeyClass*)keyclass zoneID:(CKRecordZoneID*)zoneID error:(NSError* __autoreleasing*)error;
+ (NSArray<CKKSKey*>*)currentKeysForClass:(CKKSKeyClass*)keyclass
state:(CKKSProcessedState*)state
zoneID:(CKRecordZoneID*)zoneID
error:(NSError* __autoreleasing*)error;
+ (NSArray<CKKSKey*>*)allKeys:(CKRecordZoneID*)zoneID error:(NSError* __autoreleasing*)error;
+ (NSArray<CKKSKey*>*)remoteKeys:(CKRecordZoneID*)zoneID error:(NSError* __autoreleasing*)error;
+ (NSArray<CKKSKey*>*)localKeys:(CKRecordZoneID*)zoneID error:(NSError* __autoreleasing*)error;
- (bool)saveToDatabaseAsOnlyCurrentKeyForClassAndState:(NSError* __autoreleasing*)error;
- (instancetype)init NS_UNAVAILABLE;
- (instancetype)initSelfWrappedWithAESKey:(CKKSAESSIVKey*)aeskey
uuid:(NSString*)uuid
keyclass:(CKKSKeyClass*)keyclass
state:(CKKSProcessedState*)state
zoneID:(CKRecordZoneID*)zoneID
encodedCKRecord:(NSData*)encodedrecord
currentkey:(NSInteger)currentkey;
- (instancetype)initWrappedBy:(CKKSKey*)wrappingKey
AESKey:(CKKSAESSIVKey*)aeskey
uuid:(NSString*)uuid
keyclass:(CKKSKeyClass*)keyclass
state:(CKKSProcessedState*)state
zoneID:(CKRecordZoneID*)zoneID
encodedCKRecord:(NSData*)encodedrecord
currentkey:(NSInteger)currentkey;
- (instancetype)initWithWrappedAESKey:(CKKSWrappedAESSIVKey*)wrappedaeskey
uuid:(NSString*)uuid
parentKeyUUID:(NSString*)parentKeyUUID
keyclass:(CKKSKeyClass*)keyclass
state:(CKKSProcessedState*)state
zoneID:(CKRecordZoneID*)zoneID
encodedCKRecord:(NSData*)encodedrecord
currentkey:(NSInteger)currentkey;
- (bool)wrapsSelf;
- (void)zeroKeys;
- (CKKSKey*)topKeyInAnyState:(NSError* __autoreleasing*)error;
- (CKKSAESSIVKey*)ensureKeyLoaded:(NSError* __autoreleasing*)error;
- (CKKSAESSIVKey*)unwrapViaKeyHierarchy:(NSError* __autoreleasing*)error;
- (bool)trySelfWrappedKeyCandidate:(CKKSAESSIVKey*)candidate error:(NSError* __autoreleasing*)error;
- (CKKSWrappedAESSIVKey*)wrapAESKey:(CKKSAESSIVKey*)keyToWrap error:(NSError* __autoreleasing*)error;
- (CKKSAESSIVKey*)unwrapAESKey:(CKKSWrappedAESSIVKey*)keyToUnwrap error:(NSError* __autoreleasing*)error;
- (bool)wrapUnder:(CKKSKey*)wrappingKey error:(NSError* __autoreleasing*)error;
- (bool)unwrapSelfWithAESKey:(CKKSAESSIVKey*)unwrappingKey error:(NSError* __autoreleasing*)error;
- (NSData*)encryptData:(NSData*)plaintext
authenticatedData:(NSDictionary<NSString*, NSData*>*)ad
error:(NSError* __autoreleasing*)error;
- (NSData*)decryptData:(NSData*)ciphertext
authenticatedData:(NSDictionary<NSString*, NSData*>*)ad
error:(NSError* __autoreleasing*)error;
- (NSData*)serializeAsProtobuf:(NSError* __autoreleasing*)error;
+ (CKKSKey*)loadFromProtobuf:(NSData*)data error:(NSError* __autoreleasing*)error;
+ (NSDictionary<NSString*, NSNumber*>*)countsByClass:(CKRecordZoneID*)zoneID error:(NSError* __autoreleasing*)error;
@end
#endif