@imagina-build/ias-cli 0.0.0-stage → 0.1.0

package/shared/vault/test-vectors/sealed.json

@@ -0,0 +1,384 @@
+{
+  "format": "ias-vault-1",
+  "description": "Envelopes made with injected randomness: an implementation must produce the same envelope from the same inputs, and every key in keys.json must get the outcome in opens. changes are a grant (rewrap) and a revocation on top of the first case.",
+  "warning": "Test vectors: the keys are public. Never use them for anything else.",
+  "cases": [
+    {
+      "name": "text-for-recovery-and-runner-a",
+      "description": "A UTF-8 plaintext sealed for the recovery key and runner-a.",
+      "plaintext": "aWFzLXZhdWx0LTEgdGVzdCB2ZWN0b3I6IG5vdCBhIHJlYWwgc2VjcmV0",
+      "credential": {
+        "id": "0d5e6c9a-4b8f-4c1e-9a3d-2f7b8e1c6a40",
+        "type": "ios-distribution-certificate",
+        "version": 1
+      },
+      "recipients": [
+        "recovery",
+        "runner-a"
+      ],
+      "random": {
+        "dataKey": "YWzaWVkOOB51VzCclITT0AL7jBOcb9tnUAd4oY1pteU",
+        "dataIv": "Hp-AoxVNmWFNSG35",
+        "wraps": [
+          {
+            "ephemeralPrivateKey": "bM7WB00JuyZsrJhRdBDQspuzOMebCP0c5G9jn07obt0",
+            "iv": "gVsaOTmFS8aLqGlS"
+          },
+          {
+            "ephemeralPrivateKey": "kUVRI7yC6JgdlqfY9pwxJICrtSlQILMyNryj-VCoJws",
+            "iv": "kJchZolDykWp1SpX"
+          }
+        ]
+      },
+      "aad": "ias-vault-1\ndata\n0d5e6c9a-4b8f-4c1e-9a3d-2f7b8e1c6a40\nios-distribution-certificate\n1",
+      "wraps": [
+        {
+          "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+          "ephemeralPrivateKey": "bM7WB00JuyZsrJhRdBDQspuzOMebCP0c5G9jn07obt0",
+          "iv": "gVsaOTmFS8aLqGlS",
+          "sharedSecret": "QovClbfoymONopq2ax6sHmFT_hUARRPYkBFizMdL5Tc",
+          "hkdfSalt": "Elwq15U3Nxrb6iCJg-aWOEcfsd9DFbIIX4EgCt06qVPPjzQvJ5h52E83Gp_lCrSAum0jFnlLGQGMvH_lMrWxEg",
+          "wrapKey": "73EKusnDSZeiDXt8dBvIuwI3Y49wfIybJ5rjbUFhpmc",
+          "aad": "ias-vault-1\nwrap\n0d5e6c9a-4b8f-4c1e-9a3d-2f7b8e1c6a40\nios-distribution-certificate\n1\ngY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0"
+        },
+        {
+          "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+          "ephemeralPrivateKey": "kUVRI7yC6JgdlqfY9pwxJICrtSlQILMyNryj-VCoJws",
+          "iv": "kJchZolDykWp1SpX",
+          "sharedSecret": "hi58ntrAdDasG6QYXXAzDFaDVdNZCJzOr1-PwheLi3o",
+          "hkdfSalt": "D4lqNnuzZL65zNTmyaKekxzeSwIPF9rruhZkDNxmXSwDxjW5UZFcS-hrXHMY2-UsEVynLntQ7YajZXlZ2OERSA",
+          "wrapKey": "-NXne312eGWcbLJApQbYBsmR-9TW0pAoyyyaVcdN4b8",
+          "aad": "ias-vault-1\nwrap\n0d5e6c9a-4b8f-4c1e-9a3d-2f7b8e1c6a40\nios-distribution-certificate\n1\nOHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk"
+        }
+      ],
+      "envelope": {
+        "format": "ias-vault-1",
+        "credential": {
+          "id": "0d5e6c9a-4b8f-4c1e-9a3d-2f7b8e1c6a40",
+          "type": "ios-distribution-certificate",
+          "version": 1
+        },
+        "data": {
+          "iv": "Hp-AoxVNmWFNSG35",
+          "ct": "H3bKVI3MnjfMdX1SDz9oNf7pN_Y03jHt_ttDaw42PdbwY_EyN-HXFv7PhsO55OwGFL05nenQXcUYpA"
+        },
+        "recipients": [
+          {
+            "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+            "epk": "Elwq15U3Nxrb6iCJg-aWOEcfsd9DFbIIX4EgCt06qVM",
+            "iv": "gVsaOTmFS8aLqGlS",
+            "wk": "b8ao7aW61LvHQn8xzWHDjT_ocDJGHxclZta5Q2QoV-cS3_84ssTw1zizzVeNBcUF"
+          },
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "epk": "D4lqNnuzZL65zNTmyaKekxzeSwIPF9rruhZkDNxmXSw",
+            "iv": "kJchZolDykWp1SpX",
+            "wk": "AJZjHoXSPJnJydcBz-OiWEtyl5YKjyO1tN0G5vCrX7C6XNcQxsdydovX9zp8j9Ud"
+          }
+        ]
+      },
+      "digest": "pgN8yDYPAQ7Fi-ro0nywQprgXNMGQdDM1zgJGqItvdQ",
+      "opens": {
+        "recovery": {
+          "plaintext": "aWFzLXZhdWx0LTEgdGVzdCB2ZWN0b3I6IG5vdCBhIHJlYWwgc2VjcmV0"
+        },
+        "runner-a": {
+          "plaintext": "aWFzLXZhdWx0LTEgdGVzdCB2ZWN0b3I6IG5vdCBhIHJlYWwgc2VjcmV0"
+        },
+        "runner-b": {
+          "error": "not-a-recipient"
+        },
+        "outsider": {
+          "error": "not-a-recipient"
+        }
+      }
+    },
+    {
+      "name": "binary-for-recovery",
+      "description": "Every byte value once, sealed for the recovery key only, as version 3 of another credential.",
+      "plaintext": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-P0BBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWltcXV5fYGFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6e3x9fn-AgYKDhIWGh4iJiouMjY6PkJGSk5SVlpeYmZqbnJ2en6ChoqOkpaanqKmqq6ytrq-wsbKztLW2t7i5uru8vb6_wMHCw8TFxsfIycrLzM3Oz9DR0tPU1dbX2Nna29zd3t_g4eLj5OXm5-jp6uvs7e7v8PHy8_T19vf4-fr7_P3-_w",
+      "credential": {
+        "id": "android-upload-key",
+        "type": "android-keystore",
+        "version": 3
+      },
+      "recipients": [
+        "recovery"
+      ],
+      "random": {
+        "dataKey": "Msa07yF9r2MLGLXlN4SkGzuc4w_rFrUD7CDRvdZj3No",
+        "dataIv": "SFZHr6FG0YVCdCzz",
+        "wraps": [
+          {
+            "ephemeralPrivateKey": "acKOxNVkxqzHIkAT9mUZnrScKTcG5ADv2gPwyki3VqE",
+            "iv": "jvlIoUtIaO-2cGmj"
+          }
+        ]
+      },
+      "aad": "ias-vault-1\ndata\nandroid-upload-key\nandroid-keystore\n3",
+      "wraps": [
+        {
+          "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+          "ephemeralPrivateKey": "acKOxNVkxqzHIkAT9mUZnrScKTcG5ADv2gPwyki3VqE",
+          "iv": "jvlIoUtIaO-2cGmj",
+          "sharedSecret": "oqp90vNM2e5YsPfK0vrB3a9MU_ZOYqZ0nk9HzGQiOUQ",
+          "hkdfSalt": "Guk6Vno302kiqafqOq6SctusJnksnDV4LADm5GsB2Q3PjzQvJ5h52E83Gp_lCrSAum0jFnlLGQGMvH_lMrWxEg",
+          "wrapKey": "FIBM_wFlHdvaVx730UwpNQjHf2wPHyr5VOarE5XuZtY",
+          "aad": "ias-vault-1\nwrap\nandroid-upload-key\nandroid-keystore\n3\ngY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0"
+        }
+      ],
+      "envelope": {
+        "format": "ias-vault-1",
+        "credential": {
+          "id": "android-upload-key",
+          "type": "android-keystore",
+          "version": 3
+        },
+        "data": {
+          "iv": "SFZHr6FG0YVCdCzz",
+          "ct": "XvKASQIwIaVN0xBvLnoZmk-e3jc2zgmV6-DX2jPOQ2nhGc7x5db8sb5XArKMR5bER60MECrGAsM6kI-TtD0UyEUWnEZS6I7r0M_okvLssMBlQlr7PbFKmsK8jG6oTUKlC6g_00d_mZioGjAqDUprosm9-GZNODVftUOOkeeT33q6yzydLZDM9pYfQxgP1rxealI6Lx9rSHBjA_ORGHW-LQfbdH7e7MQMrGyy7ocIIDaCYTf1JiqfT4c_QPYHD3K__3fZ5dfGI13ZbzPMdRnUnlGa_KMybwnWPSzZZkjoXib0BuM9no1WjBcL_-hWPxqSTnsw2ZhicHa37uSLFVaVV1UhegWCLH74bDuck7ufJJw"
+        },
+        "recipients": [
+          {
+            "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+            "epk": "Guk6Vno302kiqafqOq6SctusJnksnDV4LADm5GsB2Q0",
+            "iv": "jvlIoUtIaO-2cGmj",
+            "wk": "4Xe6PEwBVTezuZkoGwiyZ26nISplZhv_P8di23OqgRTfjAYtJGWofMLdVUehIN0N"
+          }
+        ]
+      },
+      "digest": "QIHonBGaSZcv59lIl-biO62fHc-AwQoXU6OkVki4HUc",
+      "opens": {
+        "recovery": {
+          "plaintext": "AAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1Njc4OTo7PD0-P0BBQkNERUZHSElKS0xNTk9QUVJTVFVWV1hZWltcXV5fYGFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6e3x9fn-AgYKDhIWGh4iJiouMjY6PkJGSk5SVlpeYmZqbnJ2en6ChoqOkpaanqKmqq6ytrq-wsbKztLW2t7i5uru8vb6_wMHCw8TFxsfIycrLzM3Oz9DR0tPU1dbX2Nna29zd3t_g4eLj5OXm5-jp6uvs7e7v8PHy8_T19vf4-fr7_P3-_w"
+        },
+        "runner-a": {
+          "error": "not-a-recipient"
+        },
+        "runner-b": {
+          "error": "not-a-recipient"
+        },
+        "outsider": {
+          "error": "not-a-recipient"
+        }
+      }
+    },
+    {
+      "name": "same-credential-other-data-key",
+      "description": "The credential of the first case sealed again with another data key, for runner-a and the recovery key. Its runner-a wrap is the one moved in tampered.json (wrap-of-other-envelope).",
+      "plaintext": "aWFzLXZhdWx0LTEgdGVzdCB2ZWN0b3I6IGFub3RoZXIgcGxhaW50ZXh0",
+      "credential": {
+        "id": "0d5e6c9a-4b8f-4c1e-9a3d-2f7b8e1c6a40",
+        "type": "ios-distribution-certificate",
+        "version": 1
+      },
+      "recipients": [
+        "runner-a",
+        "recovery"
+      ],
+      "random": {
+        "dataKey": "Qg0vumZryGq4AxJmIaaE1YZmBLxlFP4ewiW8MPQCzz4",
+        "dataIv": "51Ew6h4vp1cqM3Qd",
+        "wraps": [
+          {
+            "ephemeralPrivateKey": "ifXCF5vEcDlw5JbeOc9K5WHPv36hfZIBg9A9-CDynKE",
+            "iv": "ZkMDyCGR4fn4U327"
+          },
+          {
+            "ephemeralPrivateKey": "PYwVyf6IN143m0NwGDgw3Ir_h3z-SDUJNkklWKiYySU",
+            "iv": "ISX148qHm-A7aDqw"
+          }
+        ]
+      },
+      "aad": "ias-vault-1\ndata\n0d5e6c9a-4b8f-4c1e-9a3d-2f7b8e1c6a40\nios-distribution-certificate\n1",
+      "wraps": [
+        {
+          "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+          "ephemeralPrivateKey": "ifXCF5vEcDlw5JbeOc9K5WHPv36hfZIBg9A9-CDynKE",
+          "iv": "ZkMDyCGR4fn4U327",
+          "sharedSecret": "UQiUF7fcUHaVKpsfbeRsVgvWLQnufVQ3JYlZqqINnBc",
+          "hkdfSalt": "zWtoy2Y9WhXuVvKH1lQmW6jL230r7wMkBgLKv78BhzADxjW5UZFcS-hrXHMY2-UsEVynLntQ7YajZXlZ2OERSA",
+          "wrapKey": "F6gfi1WYCPIT7Wx46uAup9PH2Su35POFPYvvxTrFxOM",
+          "aad": "ias-vault-1\nwrap\n0d5e6c9a-4b8f-4c1e-9a3d-2f7b8e1c6a40\nios-distribution-certificate\n1\nOHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk"
+        },
+        {
+          "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+          "ephemeralPrivateKey": "PYwVyf6IN143m0NwGDgw3Ir_h3z-SDUJNkklWKiYySU",
+          "iv": "ISX148qHm-A7aDqw",
+          "sharedSecret": "UFzus5kA0EXmkgJqmfyZjtCgIeXOIXUyhzQu8NWusBk",
+          "hkdfSalt": "BZrX9eHn-GQ3JgtB5Ne31a0zkfjE9HCgqiZlhO_nLUbPjzQvJ5h52E83Gp_lCrSAum0jFnlLGQGMvH_lMrWxEg",
+          "wrapKey": "34pEPEuXjwY-CX41LZeieV6Ma3t3LTtpqjC5JOqDzfM",
+          "aad": "ias-vault-1\nwrap\n0d5e6c9a-4b8f-4c1e-9a3d-2f7b8e1c6a40\nios-distribution-certificate\n1\ngY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0"
+        }
+      ],
+      "envelope": {
+        "format": "ias-vault-1",
+        "credential": {
+          "id": "0d5e6c9a-4b8f-4c1e-9a3d-2f7b8e1c6a40",
+          "type": "ios-distribution-certificate",
+          "version": 1
+        },
+        "data": {
+          "iv": "51Ew6h4vp1cqM3Qd",
+          "ct": "NBW1kV5khGN67RONaqkSUPdE5tK7kaoBxE6tuq6DkoruZIxNBHTciwxxDl54Cd7KmPPPGDDCCySwHQ"
+        },
+        "recipients": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "epk": "zWtoy2Y9WhXuVvKH1lQmW6jL230r7wMkBgLKv78BhzA",
+            "iv": "ZkMDyCGR4fn4U327",
+            "wk": "QHIp0aCx4kc38VMSebyXGB8yBZ5dxiA7Hgf9jh_FoZKzRJ0z26N8NBcUCcbvQoI-"
+          },
+          {
+            "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+            "epk": "BZrX9eHn-GQ3JgtB5Ne31a0zkfjE9HCgqiZlhO_nLUY",
+            "iv": "ISX148qHm-A7aDqw",
+            "wk": "1_v-t2NuvAP8hLHXqj3xAPZFQleqAio2aUTNuR1RBNaRDgm89IyFYdla4Qv302vv"
+          }
+        ]
+      },
+      "digest": "M97CmJdEgnxlXM1RtRhYeafNBhTpNj6Nq-lo8djS82Q",
+      "opens": {
+        "recovery": {
+          "plaintext": "aWFzLXZhdWx0LTEgdGVzdCB2ZWN0b3I6IGFub3RoZXIgcGxhaW50ZXh0"
+        },
+        "runner-a": {
+          "plaintext": "aWFzLXZhdWx0LTEgdGVzdCB2ZWN0b3I6IGFub3RoZXIgcGxhaW50ZXh0"
+        },
+        "runner-b": {
+          "error": "not-a-recipient"
+        },
+        "outsider": {
+          "error": "not-a-recipient"
+        }
+      }
+    }
+  ],
+  "changes": [
+    {
+      "name": "grant-runner-b",
+      "description": "ias vault grant: the recovery key opens the first case and wraps its data key for runner-b. runner-a is already a recipient and keeps its wrap.",
+      "operation": "rewrap",
+      "from": "text-for-recovery-and-runner-a",
+      "opener": "recovery",
+      "add": [
+        "runner-b",
+        "runner-a"
+      ],
+      "random": {
+        "wraps": [
+          {
+            "ephemeralPrivateKey": "0TbO2d8XEFastnCXJvFHxjt9Y4jQ-wEQO2W2oQ104H4",
+            "iv": "2puuuf3f6vCQyRjq"
+          }
+        ]
+      },
+      "wraps": [
+        {
+          "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+          "ephemeralPrivateKey": "0TbO2d8XEFastnCXJvFHxjt9Y4jQ-wEQO2W2oQ104H4",
+          "iv": "2puuuf3f6vCQyRjq",
+          "sharedSecret": "gXAa1XD8Y4jwE7uoqX8lqvVJwtHiSr5HEz1IxItrWCk",
+          "hkdfSalt": "_WtawL4wS55ePjiLMn6FcPc55kKiIA3Q9ySrlSSL0j0HAHIdyhghpFL0B93o3vrq2mL-NzcnR54cNCQ58ZsXXA",
+          "wrapKey": "2ziWNJQ3_lBRiNfL4cYksQxJpLi458a0G66vB4tAD9U",
+          "aad": "ias-vault-1\nwrap\n0d5e6c9a-4b8f-4c1e-9a3d-2f7b8e1c6a40\nios-distribution-certificate\n1\n3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg"
+        }
+      ],
+      "envelope": {
+        "format": "ias-vault-1",
+        "credential": {
+          "id": "0d5e6c9a-4b8f-4c1e-9a3d-2f7b8e1c6a40",
+          "type": "ios-distribution-certificate",
+          "version": 1
+        },
+        "data": {
+          "iv": "Hp-AoxVNmWFNSG35",
+          "ct": "H3bKVI3MnjfMdX1SDz9oNf7pN_Y03jHt_ttDaw42PdbwY_EyN-HXFv7PhsO55OwGFL05nenQXcUYpA"
+        },
+        "recipients": [
+          {
+            "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+            "epk": "Elwq15U3Nxrb6iCJg-aWOEcfsd9DFbIIX4EgCt06qVM",
+            "iv": "gVsaOTmFS8aLqGlS",
+            "wk": "b8ao7aW61LvHQn8xzWHDjT_ocDJGHxclZta5Q2QoV-cS3_84ssTw1zizzVeNBcUF"
+          },
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "epk": "D4lqNnuzZL65zNTmyaKekxzeSwIPF9rruhZkDNxmXSw",
+            "iv": "kJchZolDykWp1SpX",
+            "wk": "AJZjHoXSPJnJydcBz-OiWEtyl5YKjyO1tN0G5vCrX7C6XNcQxsdydovX9zp8j9Ud"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "epk": "_WtawL4wS55ePjiLMn6FcPc55kKiIA3Q9ySrlSSL0j0",
+            "iv": "2puuuf3f6vCQyRjq",
+            "wk": "A19EQYJ1bAfCmBH7JAzTuSMtLttMoL1AX3BzfsqkelBq3u1IFovzFSmzcb9Ar1zK"
+          }
+        ]
+      },
+      "digest": "pgN8yDYPAQ7Fi-ro0nywQprgXNMGQdDM1zgJGqItvdQ",
+      "opens": {
+        "recovery": {
+          "plaintext": "aWFzLXZhdWx0LTEgdGVzdCB2ZWN0b3I6IG5vdCBhIHJlYWwgc2VjcmV0"
+        },
+        "runner-a": {
+          "plaintext": "aWFzLXZhdWx0LTEgdGVzdCB2ZWN0b3I6IG5vdCBhIHJlYWwgc2VjcmV0"
+        },
+        "runner-b": {
+          "plaintext": "aWFzLXZhdWx0LTEgdGVzdCB2ZWN0b3I6IG5vdCBhIHJlYWwgc2VjcmV0"
+        },
+        "outsider": {
+          "error": "not-a-recipient"
+        }
+      }
+    },
+    {
+      "name": "revoke-runner-a",
+      "description": "Revoking runner-a removes its wrap from the previous case; the data and the other wraps do not change.",
+      "operation": "remove",
+      "from": "grant-runner-b",
+      "remove": "runner-a",
+      "envelope": {
+        "format": "ias-vault-1",
+        "credential": {
+          "id": "0d5e6c9a-4b8f-4c1e-9a3d-2f7b8e1c6a40",
+          "type": "ios-distribution-certificate",
+          "version": 1
+        },
+        "data": {
+          "iv": "Hp-AoxVNmWFNSG35",
+          "ct": "H3bKVI3MnjfMdX1SDz9oNf7pN_Y03jHt_ttDaw42PdbwY_EyN-HXFv7PhsO55OwGFL05nenQXcUYpA"
+        },
+        "recipients": [
+          {
+            "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+            "epk": "Elwq15U3Nxrb6iCJg-aWOEcfsd9DFbIIX4EgCt06qVM",
+            "iv": "gVsaOTmFS8aLqGlS",
+            "wk": "b8ao7aW61LvHQn8xzWHDjT_ocDJGHxclZta5Q2QoV-cS3_84ssTw1zizzVeNBcUF"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "epk": "_WtawL4wS55ePjiLMn6FcPc55kKiIA3Q9ySrlSSL0j0",
+            "iv": "2puuuf3f6vCQyRjq",
+            "wk": "A19EQYJ1bAfCmBH7JAzTuSMtLttMoL1AX3BzfsqkelBq3u1IFovzFSmzcb9Ar1zK"
+          }
+        ]
+      },
+      "digest": "pgN8yDYPAQ7Fi-ro0nywQprgXNMGQdDM1zgJGqItvdQ",
+      "opens": {
+        "recovery": {
+          "plaintext": "aWFzLXZhdWx0LTEgdGVzdCB2ZWN0b3I6IG5vdCBhIHJlYWwgc2VjcmV0"
+        },
+        "runner-a": {
+          "error": "not-a-recipient"
+        },
+        "runner-b": {
+          "plaintext": "aWFzLXZhdWx0LTEgdGVzdCB2ZWN0b3I6IG5vdCBhIHJlYWwgc2VjcmV0"
+        },
+        "outsider": {
+          "error": "not-a-recipient"
+        }
+      }
+    }
+  ]
+}