identity/com.midnight.kuira.core.identity.backup/SeedDeriver/SIGIL_SALT

SIGIL_SALT

val SIGIL_SALT: ByteArray

Purpose-bound salt: SHA-256("kuira:sigil:v1"). Deterministic, public. PRF output under this salt seeds the user's sigil identity Ed25519 keypair (see Ed25519PrfSigilProvider).

Independent from SEED_SALT and AppStateBackup.BACKUP_SALT: three different salts ⇒ three independent secrets from the same passkey credential. Compromise of one doesn't leak the others.