Files
status-go/internal/protocol/requests/change_database_password.go
Sale Djenic 0b8fa059fe feat(accounts): fast password change via DEK envelope scheme
New profiles use the DEK scheme from day one (kdf_iter 3200).

Password change now auto-detects the profile's encryption scheme:
- profile on the DEK scheme, rekey=false → fast path: only the wrapped-DEK file is re-wrapped (no new DEK is generated)
- profile on the DEK scheme, rekey=true → deep rekey: fresh DEK, databases and keystore re-encrypted (new DEK is generated)
- legacy profile → one-time migration to the DEK scheme (full re-encryption, new DEK is generated)

Api changes:
- GetProfileEncryptionInfo endpoint added
- a rekey flag on ChangeDatabasePasswordV2
2026-08-21 21:19:21 +02:00

9 lines
308 B
Go

package requests
type ChangeDatabasePassword struct {
KeyUID string `json:"keyUID"`
OldPassword string `json:"oldPassword"`
NewPassword string `json:"newPassword"`
Rekey bool `json:"rekey"` // if true, a new DEK is generated and the databases and keystore files are re-encrypted with it.
}