@imagina-build/ias-cli 0.0.0 → 0.1.1

package/shared/vault/test-vectors/ias-vault-2/sealed.json

@@ -0,0 +1,567 @@
+{
+  "format": "ias-vault-2",
+  "description": "Envelopes made with injected randomness and signed by the team (Ed25519 is deterministic): an implementation must produce the same envelope from the same inputs, signedText is what the signature covers, and every key gets the outcome in opens when it checks the signature against the team key. changes are a grant (rewrap) and a revocation on top of the first case, each signed again.",
+  "warning": "Test vectors: the keys are public. Never use them for anything else.",
+  "server": {
+    "formats": [
+      "ias-vault-2"
+    ],
+    "requiredKids": [
+      "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0"
+    ],
+    "signingKid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y"
+  },
+  "cases": [
+    {
+      "name": "keystore-for-recovery-and-runner-a",
+      "description": "An upload keystore of jscheduler (fake), sealed for the recovery key and runner-a and signed by the team.",
+      "plaintext": "eyJ0eXBlIjoiYW5kcm9pZF91cGxvYWRfa2V5c3RvcmUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJrZXlzdG9yZSI6ImJtOTBJR0VnY21WaGJDQnJaWGx6ZEc5eVpUb2dNTzcxZm1UYWtodFlzWDhSV01nNDNJdkZGa2hxU3NURDdLWGFfVEplcXdzIiwic3RvcmVfcGFzc3dvcmQiOiJub3QtYS1yZWFsLXN0b3JlLXBhc3N3b3JkIiwia2V5X2FsaWFzIjoidXBsb2FkIiwia2V5X3Bhc3N3b3JkIjoibm90LWEtcmVhbC1rZXktcGFzc3dvcmQifQ",
+      "content": {
+        "type": "android_upload_keystore",
+        "application": "jscheduler",
+        "keystore": "bm90IGEgcmVhbCBrZXlzdG9yZTogMO71fmTakhtYsX8RWMg43IvFFkhqSsTD7KXa_TJeqws",
+        "store_password": "not-a-real-store-password",
+        "key_alias": "upload",
+        "key_password": "not-a-real-key-password"
+      },
+      "credential": {
+        "id": "00000000-0000-4000-8000-00000000e001",
+        "type": "android_upload_keystore",
+        "version": 1
+      },
+      "recipients": [
+        "recovery",
+        "runner-a"
+      ],
+      "signer": "team",
+      "random": {
+        "dataKey": "NgXKEJKqfP4eazWKdhiNupzUVuei4eqfpdWzzL8TZwk",
+        "dataIv": "0XaZsTpE_agQ_g89",
+        "wraps": [
+          {
+            "ephemeralPrivateKey": "3Gh4ZFfR4w4YfM7FMZQDwhFvu4JDGavmE1nnmCWLusg",
+            "iv": "KvzUT7AfW9mgBjjq"
+          },
+          {
+            "ephemeralPrivateKey": "nWi5vRUZdP8rZ5wGwFPp8OLsYoRcSKiOpf51Z-H_qlE",
+            "iv": "a3oFvAfEAGJRkhAv"
+          }
+        ]
+      },
+      "aad": "ias-vault-2\ndata\n00000000-0000-4000-8000-00000000e001\nandroid_upload_keystore\n1",
+      "wraps": [
+        {
+          "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+          "ephemeralPrivateKey": "3Gh4ZFfR4w4YfM7FMZQDwhFvu4JDGavmE1nnmCWLusg",
+          "iv": "KvzUT7AfW9mgBjjq",
+          "sharedSecret": "mvzLLqmRD5lFg0NBqt65I4TEw8QsFg_sJujI7_Z1aRo",
+          "hkdfSalt": "f2gDGPbAdYQ9rJX5zaFwDjfCswRnjPGZN0iHNh4ifBXPjzQvJ5h52E83Gp_lCrSAum0jFnlLGQGMvH_lMrWxEg",
+          "wrapKey": "NCDVb5-v81zFiqAkie3U3AeARDKLMLTMJzm4FI_LyNQ",
+          "aad": "ias-vault-2\nwrap\n00000000-0000-4000-8000-00000000e001\nandroid_upload_keystore\n1\ngY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0"
+        },
+        {
+          "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+          "ephemeralPrivateKey": "nWi5vRUZdP8rZ5wGwFPp8OLsYoRcSKiOpf51Z-H_qlE",
+          "iv": "a3oFvAfEAGJRkhAv",
+          "sharedSecret": "3PaAX2G6Hhtsh2PmaLJAly_eUO0uC302TjQMqibYqy8",
+          "hkdfSalt": "7N6B-jhSAl4t6tyP8fR7g81VIEwoTKvAKOUNRAPgcVADxjW5UZFcS-hrXHMY2-UsEVynLntQ7YajZXlZ2OERSA",
+          "wrapKey": "qTHuBWhfFVXTZCB-UQFW72pSLMucFI0ZhG_NAY3o-6c",
+          "aad": "ias-vault-2\nwrap\n00000000-0000-4000-8000-00000000e001\nandroid_upload_keystore\n1\nOHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk"
+        }
+      ],
+      "signedText": "ias-vault-2\nsignature\nkj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y\n00000000-0000-4000-8000-00000000e001\nandroid_upload_keystore\n1\n0XaZsTpE_agQ_g89\ntM6ENIdfVPy_YbVYoQ3C1YJTaYYwCrgMEros4BApV6mRDDyxIsFdmXiwH0r5wyK8P-LbbOMIJPM4izcB6ZSyhPwe6NeUP2wQxdKoMVf08fVvFR9ijdHbplTePWBE6myGyY0KefsmVH513JU5AtZ9FpYPH2sSlO_Jc-4oBBeoAoOAmvSff_hk7zp_7rwH4tEFsZWdQlwhV17sbYlb8H0XQV2m3SU1FjIYE_aYHUxEfq02DaY-Hh-MndhciUabSiorhrmhAFa0ZP1SiFtpEGI2iOduIRFZOrpDQeyVaaOULWIwTa155_2txN_t1V2mL5qJvhG7jr5N1J6_DQFjAdGI_9TYQYWdnPptw_w9LdQ\n2\ngY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0\nf2gDGPbAdYQ9rJX5zaFwDjfCswRnjPGZN0iHNh4ifBU\nKvzUT7AfW9mgBjjq\nxeIt4rLJj3AIrN7KChMOdNOQS_ZZ5q4mcWbQeBn_3FXysWuT8zjwDhaT-c5VU3fd\nOHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk\n7N6B-jhSAl4t6tyP8fR7g81VIEwoTKvAKOUNRAPgcVA\na3oFvAfEAGJRkhAv\n4DTOiTVkxA-YeV1uSdtsvBg3jAfroWp_18xfZ_H0OJYo6lpE0Hc5fWryZ7WUaQt5",
+      "envelope": {
+        "format": "ias-vault-2",
+        "credential": {
+          "id": "00000000-0000-4000-8000-00000000e001",
+          "type": "android_upload_keystore",
+          "version": 1
+        },
+        "data": {
+          "iv": "0XaZsTpE_agQ_g89",
+          "ct": "tM6ENIdfVPy_YbVYoQ3C1YJTaYYwCrgMEros4BApV6mRDDyxIsFdmXiwH0r5wyK8P-LbbOMIJPM4izcB6ZSyhPwe6NeUP2wQxdKoMVf08fVvFR9ijdHbplTePWBE6myGyY0KefsmVH513JU5AtZ9FpYPH2sSlO_Jc-4oBBeoAoOAmvSff_hk7zp_7rwH4tEFsZWdQlwhV17sbYlb8H0XQV2m3SU1FjIYE_aYHUxEfq02DaY-Hh-MndhciUabSiorhrmhAFa0ZP1SiFtpEGI2iOduIRFZOrpDQeyVaaOULWIwTa155_2txN_t1V2mL5qJvhG7jr5N1J6_DQFjAdGI_9TYQYWdnPptw_w9LdQ"
+        },
+        "recipients": [
+          {
+            "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+            "epk": "f2gDGPbAdYQ9rJX5zaFwDjfCswRnjPGZN0iHNh4ifBU",
+            "iv": "KvzUT7AfW9mgBjjq",
+            "wk": "xeIt4rLJj3AIrN7KChMOdNOQS_ZZ5q4mcWbQeBn_3FXysWuT8zjwDhaT-c5VU3fd"
+          },
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "epk": "7N6B-jhSAl4t6tyP8fR7g81VIEwoTKvAKOUNRAPgcVA",
+            "iv": "a3oFvAfEAGJRkhAv",
+            "wk": "4DTOiTVkxA-YeV1uSdtsvBg3jAfroWp_18xfZ_H0OJYo6lpE0Hc5fWryZ7WUaQt5"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "dK2mO7LMMxGnQnj9DEldMNEOHJfYmtekHod-bQZXX9JTD-Ftulri6Ssiq9qo1v9UW8bLNqCnB6b6kljngq22Bg"
+        }
+      },
+      "digest": "8zOC-bdcd8avwCDlMq2hExm8S5AG5dKvkxNcY8NPcVA",
+      "opens": {
+        "recovery": {
+          "plaintext": "eyJ0eXBlIjoiYW5kcm9pZF91cGxvYWRfa2V5c3RvcmUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJrZXlzdG9yZSI6ImJtOTBJR0VnY21WaGJDQnJaWGx6ZEc5eVpUb2dNTzcxZm1UYWtodFlzWDhSV01nNDNJdkZGa2hxU3NURDdLWGFfVEplcXdzIiwic3RvcmVfcGFzc3dvcmQiOiJub3QtYS1yZWFsLXN0b3JlLXBhc3N3b3JkIiwia2V5X2FsaWFzIjoidXBsb2FkIiwia2V5X3Bhc3N3b3JkIjoibm90LWEtcmVhbC1rZXktcGFzc3dvcmQifQ"
+        },
+        "runner-a": {
+          "plaintext": "eyJ0eXBlIjoiYW5kcm9pZF91cGxvYWRfa2V5c3RvcmUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJrZXlzdG9yZSI6ImJtOTBJR0VnY21WaGJDQnJaWGx6ZEc5eVpUb2dNTzcxZm1UYWtodFlzWDhSV01nNDNJdkZGa2hxU3NURDdLWGFfVEplcXdzIiwic3RvcmVfcGFzc3dvcmQiOiJub3QtYS1yZWFsLXN0b3JlLXBhc3N3b3JkIiwia2V5X2FsaWFzIjoidXBsb2FkIiwia2V5X3Bhc3N3b3JkIjoibm90LWEtcmVhbC1rZXktcGFzc3dvcmQifQ"
+        },
+        "runner-b": {
+          "error": "not-a-recipient"
+        },
+        "outsider": {
+          "error": "not-a-recipient"
+        }
+      }
+    },
+    {
+      "name": "variable-for-recovery",
+      "description": "A secret environment variable (fake), sealed for the recovery key only, as ias env set does while there are no runners.",
+      "plaintext": "eyJ0eXBlIjoiZW52aXJvbm1lbnRfdmFyaWFibGUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJlbnZpcm9ubWVudCI6InByb2R1Y3Rpb24iLCJuYW1lIjoiU0VOVFJZX0FVVEhfVE9LRU4iLCJ2YWx1ZSI6Im5vdC1hLXJlYWwtc2VudHJ5LXRva2VuIn0",
+      "content": {
+        "type": "environment_variable",
+        "application": "jscheduler",
+        "environment": "production",
+        "name": "SENTRY_AUTH_TOKEN",
+        "value": "not-a-real-sentry-token"
+      },
+      "credential": {
+        "id": "00000000-0000-4000-8000-00000000f002",
+        "type": "environment_variable",
+        "version": 1
+      },
+      "recipients": [
+        "recovery"
+      ],
+      "signer": "team",
+      "random": {
+        "dataKey": "yIPrGgWRAEhxYAo9ENUbkTQRfDCjR9isqiRKEY-vD8I",
+        "dataIv": "Kt2FBzf1mo-HPR8R",
+        "wraps": [
+          {
+            "ephemeralPrivateKey": "t7jf_BnHi89MuTHwGLmk9VG2xMy3N1zREXeufcQxQFY",
+            "iv": "EMKN_NYs3Y-fMXHi"
+          }
+        ]
+      },
+      "aad": "ias-vault-2\ndata\n00000000-0000-4000-8000-00000000f002\nenvironment_variable\n1",
+      "wraps": [
+        {
+          "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+          "ephemeralPrivateKey": "t7jf_BnHi89MuTHwGLmk9VG2xMy3N1zREXeufcQxQFY",
+          "iv": "EMKN_NYs3Y-fMXHi",
+          "sharedSecret": "aw2hC-JELSFpmnhdw4Kclv_i7Q7TkfzL3hlCAqK0aRA",
+          "hkdfSalt": "3uORhI4XyCVVJX1QGH9eoxwfYwLGpfYDuKDT_TuC9WXPjzQvJ5h52E83Gp_lCrSAum0jFnlLGQGMvH_lMrWxEg",
+          "wrapKey": "MOQ7X8hFt5XqYm0qWN34-X9E_A-FK9ikUOSdPSyhgh0",
+          "aad": "ias-vault-2\nwrap\n00000000-0000-4000-8000-00000000f002\nenvironment_variable\n1\ngY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0"
+        }
+      ],
+      "signedText": "ias-vault-2\nsignature\nkj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y\n00000000-0000-4000-8000-00000000f002\nenvironment_variable\n1\nKt2FBzf1mo-HPR8R\nQfKnJwaWlu94G9FGJ0qcwQ1Meox-_9r0cR9q-n1B7Hdp6FSyRshn9wK88GEMt5E9775fc-vnqVUydBmIP9zKVF_zAxy5MAZYf8RiKfy5H5FwfZGJudrr3qQP7a6N2ittbcFNQfTojjU9m6kpp2-3NNXqkRjrsM-Zd7MSqfPjqECixprbuJF9K4CDBkmlb9gOcVcG0OOlEUyNcqAkVw_tta6h\n1\ngY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0\n3uORhI4XyCVVJX1QGH9eoxwfYwLGpfYDuKDT_TuC9WU\nEMKN_NYs3Y-fMXHi\n695M5l-bNTViDyU7-CdxJgNalJTTeEoCGT0rQr1MMgpL-afsH6yYkaoAMumKX5gl",
+      "envelope": {
+        "format": "ias-vault-2",
+        "credential": {
+          "id": "00000000-0000-4000-8000-00000000f002",
+          "type": "environment_variable",
+          "version": 1
+        },
+        "data": {
+          "iv": "Kt2FBzf1mo-HPR8R",
+          "ct": "QfKnJwaWlu94G9FGJ0qcwQ1Meox-_9r0cR9q-n1B7Hdp6FSyRshn9wK88GEMt5E9775fc-vnqVUydBmIP9zKVF_zAxy5MAZYf8RiKfy5H5FwfZGJudrr3qQP7a6N2ittbcFNQfTojjU9m6kpp2-3NNXqkRjrsM-Zd7MSqfPjqECixprbuJF9K4CDBkmlb9gOcVcG0OOlEUyNcqAkVw_tta6h"
+        },
+        "recipients": [
+          {
+            "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+            "epk": "3uORhI4XyCVVJX1QGH9eoxwfYwLGpfYDuKDT_TuC9WU",
+            "iv": "EMKN_NYs3Y-fMXHi",
+            "wk": "695M5l-bNTViDyU7-CdxJgNalJTTeEoCGT0rQr1MMgpL-afsH6yYkaoAMumKX5gl"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "lrBp5Xj6e-E4x2A19ShhCzgRHONfpt1NuO3-8dzvTOVAUNRidM1LKf34YPsxJLHqCHwbfPXVxVfyvYWa1wxZAA"
+        }
+      },
+      "digest": "aMELdvlYvrc6nuXlh8mMyMxCMm3uR4wIGR2CXZ1H6dc",
+      "opens": {
+        "recovery": {
+          "plaintext": "eyJ0eXBlIjoiZW52aXJvbm1lbnRfdmFyaWFibGUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJlbnZpcm9ubWVudCI6InByb2R1Y3Rpb24iLCJuYW1lIjoiU0VOVFJZX0FVVEhfVE9LRU4iLCJ2YWx1ZSI6Im5vdC1hLXJlYWwtc2VudHJ5LXRva2VuIn0"
+        },
+        "runner-a": {
+          "error": "not-a-recipient"
+        },
+        "runner-b": {
+          "error": "not-a-recipient"
+        },
+        "outsider": {
+          "error": "not-a-recipient"
+        }
+      }
+    },
+    {
+      "name": "certificate-version-2-for-three",
+      "description": "Version 2 of a distribution certificate of the team (fake), for the recovery key, runner-a and runner-b.",
+      "plaintext": "eyJ0eXBlIjoiYXBwbGVfZGlzdHJpYnV0aW9uX2NlcnRpZmljYXRlIiwicDEyIjoiYm05MElHRWdjbVZoYkNCd01USTZJTEh6cVJZRUtEYVpPdVdGQXVQY2tVN0hmeUhoS0ZoUDVaQTJpS3dSaE4zSyIsInBhc3N3b3JkIjoibm90LWEtcmVhbC1wMTItcGFzc3dvcmQifQ",
+      "content": {
+        "type": "apple_distribution_certificate",
+        "p12": "bm90IGEgcmVhbCBwMTI6ILHzqRYEKDaZOuWFAuPckU7HfyHhKFhP5ZA2iKwRhN3K",
+        "password": "not-a-real-p12-password"
+      },
+      "credential": {
+        "id": "00000000-0000-4000-8000-00000000e010",
+        "type": "apple_distribution_certificate",
+        "version": 2
+      },
+      "recipients": [
+        "recovery",
+        "runner-a",
+        "runner-b"
+      ],
+      "signer": "team",
+      "random": {
+        "dataKey": "wu71mbPmK-a5yFXs5cnKDeHOjYGA7pTOGlPvrTqeia4",
+        "dataIv": "M8WtpiGVOEOTlqNq",
+        "wraps": [
+          {
+            "ephemeralPrivateKey": "InHiHB70q1Nn7oRRvl8JP58NCJ3nedbgpCIdrB5a4lY",
+            "iv": "tkK1rCEmI9bkIXPh"
+          },
+          {
+            "ephemeralPrivateKey": "fs0AhxaqJD-iVaYTME-RJJPo6dtWdeMdQwCIaV18IFE",
+            "iv": "qIiq1Syz4ceUZ_RF"
+          },
+          {
+            "ephemeralPrivateKey": "jP1Hwz6E_6qRObGDWmuG1E5P1aat9N4e_4nPNJJtRsk",
+            "iv": "nizR1mpBBJDgLfmu"
+          }
+        ]
+      },
+      "aad": "ias-vault-2\ndata\n00000000-0000-4000-8000-00000000e010\napple_distribution_certificate\n2",
+      "wraps": [
+        {
+          "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+          "ephemeralPrivateKey": "InHiHB70q1Nn7oRRvl8JP58NCJ3nedbgpCIdrB5a4lY",
+          "iv": "tkK1rCEmI9bkIXPh",
+          "sharedSecret": "B4LarsrBhY_xtxKYZW1IqOXlBp90aCgj7hmwhODNswk",
+          "hkdfSalt": "qloQrbVMqc2TEXolKiO4Or2svIfFCZsQYmA8UaAWMHLPjzQvJ5h52E83Gp_lCrSAum0jFnlLGQGMvH_lMrWxEg",
+          "wrapKey": "GP_St9F5mywgGd4lVxny3vqAPQyVgT0a6CPM2OEMDMk",
+          "aad": "ias-vault-2\nwrap\n00000000-0000-4000-8000-00000000e010\napple_distribution_certificate\n2\ngY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0"
+        },
+        {
+          "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+          "ephemeralPrivateKey": "fs0AhxaqJD-iVaYTME-RJJPo6dtWdeMdQwCIaV18IFE",
+          "iv": "qIiq1Syz4ceUZ_RF",
+          "sharedSecret": "kUMyoT0TFqEoLDgX2mSzPIW85950dcd1qiiUMwFUgW4",
+          "hkdfSalt": "lhXN_u1CONI0clRi8_S_5n_EmF8P2t2oEDz-WUKHWHMDxjW5UZFcS-hrXHMY2-UsEVynLntQ7YajZXlZ2OERSA",
+          "wrapKey": "roqrOGmaHgLzxH-_MmjV2NgN46r7caxjb5vkMgEMHSE",
+          "aad": "ias-vault-2\nwrap\n00000000-0000-4000-8000-00000000e010\napple_distribution_certificate\n2\nOHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk"
+        },
+        {
+          "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+          "ephemeralPrivateKey": "jP1Hwz6E_6qRObGDWmuG1E5P1aat9N4e_4nPNJJtRsk",
+          "iv": "nizR1mpBBJDgLfmu",
+          "sharedSecret": "RvTDeFEVni9Z-s8FWVQnC79kgJM4Z0Il517gqemUfUg",
+          "hkdfSalt": "6InfhB8V67EbYsOsWqCUQTqKRLzCi4rB1ZatDx0hrgcHAHIdyhghpFL0B93o3vrq2mL-NzcnR54cNCQ58ZsXXA",
+          "wrapKey": "WcSDIFvoCxIse0YWzOUU3w0KR-ZKvEfsDO4QtLYD3Yo",
+          "aad": "ias-vault-2\nwrap\n00000000-0000-4000-8000-00000000e010\napple_distribution_certificate\n2\n3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg"
+        }
+      ],
+      "signedText": "ias-vault-2\nsignature\nkj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y\n00000000-0000-4000-8000-00000000e010\napple_distribution_certificate\n2\nM8WtpiGVOEOTlqNq\nmVx3i0SE7ZbX8o1X32sBZ-L2NcxuIh8Q0Oy1pZfXCoPneKJmfG6Z47yo6WtnOz_gu_DcBxd9L6Bgb-37Fu70CYqOZ08MrZmJkMZuiVXOpvcOslnLp12uqU-uURDsMtBvlG_EpQ2LcZc7cNgBRdmp-GVYZQGW05P30QlcUW5LbYEM_q77Dqz-4SdpfmCgtJP2bNJ0f7FFsC5d-3C5rEeu_hl9WtN6V04\n3\ngY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0\nqloQrbVMqc2TEXolKiO4Or2svIfFCZsQYmA8UaAWMHI\ntkK1rCEmI9bkIXPh\nkwYQrtGsCfOp4ylyYiYYqATT8UVaYNhCNrN7IcKDGiKoTVlxiSmr4O-yP-Y1QCkW\nOHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk\nlhXN_u1CONI0clRi8_S_5n_EmF8P2t2oEDz-WUKHWHM\nqIiq1Syz4ceUZ_RF\nGYXb9NrgogqVdFcc02koG9iEgIbpEBpr-Dl6FdLG-T9d4jvWj36NhIUlePk9Cvjz\n3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg\n6InfhB8V67EbYsOsWqCUQTqKRLzCi4rB1ZatDx0hrgc\nnizR1mpBBJDgLfmu\nJomuGV8XcXHIoqkGcNCCgefV0DI8QAMlf3U6pSpudqCabs3nbmHbNjoGKUbye2zs",
+      "envelope": {
+        "format": "ias-vault-2",
+        "credential": {
+          "id": "00000000-0000-4000-8000-00000000e010",
+          "type": "apple_distribution_certificate",
+          "version": 2
+        },
+        "data": {
+          "iv": "M8WtpiGVOEOTlqNq",
+          "ct": "mVx3i0SE7ZbX8o1X32sBZ-L2NcxuIh8Q0Oy1pZfXCoPneKJmfG6Z47yo6WtnOz_gu_DcBxd9L6Bgb-37Fu70CYqOZ08MrZmJkMZuiVXOpvcOslnLp12uqU-uURDsMtBvlG_EpQ2LcZc7cNgBRdmp-GVYZQGW05P30QlcUW5LbYEM_q77Dqz-4SdpfmCgtJP2bNJ0f7FFsC5d-3C5rEeu_hl9WtN6V04"
+        },
+        "recipients": [
+          {
+            "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+            "epk": "qloQrbVMqc2TEXolKiO4Or2svIfFCZsQYmA8UaAWMHI",
+            "iv": "tkK1rCEmI9bkIXPh",
+            "wk": "kwYQrtGsCfOp4ylyYiYYqATT8UVaYNhCNrN7IcKDGiKoTVlxiSmr4O-yP-Y1QCkW"
+          },
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "epk": "lhXN_u1CONI0clRi8_S_5n_EmF8P2t2oEDz-WUKHWHM",
+            "iv": "qIiq1Syz4ceUZ_RF",
+            "wk": "GYXb9NrgogqVdFcc02koG9iEgIbpEBpr-Dl6FdLG-T9d4jvWj36NhIUlePk9Cvjz"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "epk": "6InfhB8V67EbYsOsWqCUQTqKRLzCi4rB1ZatDx0hrgc",
+            "iv": "nizR1mpBBJDgLfmu",
+            "wk": "JomuGV8XcXHIoqkGcNCCgefV0DI8QAMlf3U6pSpudqCabs3nbmHbNjoGKUbye2zs"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "YG9SBez3weICl1Oi8gM6NoBzbMVid2eRez2HK9DSNt70nrpFuJLS0151x6dZ4PEnbamfktQBVyUPmdPxGl10Cg"
+        }
+      },
+      "digest": "n5nKW2m9RtlTy1V89F9R-hfEjcYHfIs98fNr-NMxsPI",
+      "opens": {
+        "recovery": {
+          "plaintext": "eyJ0eXBlIjoiYXBwbGVfZGlzdHJpYnV0aW9uX2NlcnRpZmljYXRlIiwicDEyIjoiYm05MElHRWdjbVZoYkNCd01USTZJTEh6cVJZRUtEYVpPdVdGQXVQY2tVN0hmeUhoS0ZoUDVaQTJpS3dSaE4zSyIsInBhc3N3b3JkIjoibm90LWEtcmVhbC1wMTItcGFzc3dvcmQifQ"
+        },
+        "runner-a": {
+          "plaintext": "eyJ0eXBlIjoiYXBwbGVfZGlzdHJpYnV0aW9uX2NlcnRpZmljYXRlIiwicDEyIjoiYm05MElHRWdjbVZoYkNCd01USTZJTEh6cVJZRUtEYVpPdVdGQXVQY2tVN0hmeUhoS0ZoUDVaQTJpS3dSaE4zSyIsInBhc3N3b3JkIjoibm90LWEtcmVhbC1wMTItcGFzc3dvcmQifQ"
+        },
+        "runner-b": {
+          "plaintext": "eyJ0eXBlIjoiYXBwbGVfZGlzdHJpYnV0aW9uX2NlcnRpZmljYXRlIiwicDEyIjoiYm05MElHRWdjbVZoYkNCd01USTZJTEh6cVJZRUtEYVpPdVdGQXVQY2tVN0hmeUhoS0ZoUDVaQTJpS3dSaE4zSyIsInBhc3N3b3JkIjoibm90LWEtcmVhbC1wMTItcGFzc3dvcmQifQ"
+        },
+        "outsider": {
+          "error": "not-a-recipient"
+        }
+      }
+    },
+    {
+      "name": "same-credential-other-data-key",
+      "description": "The credential of the first case sealed again with another data key, for runner-a and the recovery key. tampered.json moves its pieces into the first case.",
+      "plaintext": "eyJ0eXBlIjoiYW5kcm9pZF91cGxvYWRfa2V5c3RvcmUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJrZXlzdG9yZSI6ImJtOTBJR0VnY21WaGJDQnZkR2hsY2lCclpYbHpkRzl5WlRvZ0dybVRDRDlLTTVXbHVMZ3RzWTFIUDBSbWJOWDlOX2xxNXl0SHRUcmlNVTAiLCJzdG9yZV9wYXNzd29yZCI6Im5vdC1hLXJlYWwtc3RvcmUtcGFzc3dvcmQiLCJrZXlfYWxpYXMiOiJ1cGxvYWQiLCJrZXlfcGFzc3dvcmQiOiJub3QtYS1yZWFsLWtleS1wYXNzd29yZCJ9",
+      "content": {
+        "type": "android_upload_keystore",
+        "application": "jscheduler",
+        "keystore": "bm90IGEgcmVhbCBvdGhlciBrZXlzdG9yZTogGrmTCD9KM5WluLgtsY1HP0RmbNX9N_lq5ytHtTriMU0",
+        "store_password": "not-a-real-store-password",
+        "key_alias": "upload",
+        "key_password": "not-a-real-key-password"
+      },
+      "credential": {
+        "id": "00000000-0000-4000-8000-00000000e001",
+        "type": "android_upload_keystore",
+        "version": 1
+      },
+      "recipients": [
+        "runner-a",
+        "recovery"
+      ],
+      "signer": "team",
+      "random": {
+        "dataKey": "x7LDtFqWvSdHij3S_al5PkWYk6nBrffKtW68GcQWoFI",
+        "dataIv": "Ca5vCsNsCKAHKWb4",
+        "wraps": [
+          {
+            "ephemeralPrivateKey": "atayEhTY56tzLbE1a0flzxnTKWElxYiJXKA_3bLoldk",
+            "iv": "ofubjoZ7H7iFMoY5"
+          },
+          {
+            "ephemeralPrivateKey": "amWa6zqRLuvau4zpr9o8c-TsIMs_l7Rw_-1Shf0oem0",
+            "iv": "O4SR5DRT_RDNo_QS"
+          }
+        ]
+      },
+      "aad": "ias-vault-2\ndata\n00000000-0000-4000-8000-00000000e001\nandroid_upload_keystore\n1",
+      "wraps": [
+        {
+          "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+          "ephemeralPrivateKey": "atayEhTY56tzLbE1a0flzxnTKWElxYiJXKA_3bLoldk",
+          "iv": "ofubjoZ7H7iFMoY5",
+          "sharedSecret": "W1a7oVBm_YGZjuQP68knibLogQtIxPvH_LiPmjjIsB0",
+          "hkdfSalt": "1HC14Kn2H4kYohhULZ4TT-tf3_sBYPm_92kcBjLf7jcDxjW5UZFcS-hrXHMY2-UsEVynLntQ7YajZXlZ2OERSA",
+          "wrapKey": "c_SRDE3gDGginumLgAqxBuOSwXWnh2MU7tuveg8NrSU",
+          "aad": "ias-vault-2\nwrap\n00000000-0000-4000-8000-00000000e001\nandroid_upload_keystore\n1\nOHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk"
+        },
+        {
+          "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+          "ephemeralPrivateKey": "amWa6zqRLuvau4zpr9o8c-TsIMs_l7Rw_-1Shf0oem0",
+          "iv": "O4SR5DRT_RDNo_QS",
+          "sharedSecret": "T08thR9xOTJhLDNeIuw22oW-HEm1xyDiB33JF0jF9TM",
+          "hkdfSalt": "pdnQLF7GbJtCybaVbIOupm6KB-RWSaXasMcO47i-OBLPjzQvJ5h52E83Gp_lCrSAum0jFnlLGQGMvH_lMrWxEg",
+          "wrapKey": "9TkmqCzThbjznieQAGzmi0_MFn_ipjQl3avw4aMzvjc",
+          "aad": "ias-vault-2\nwrap\n00000000-0000-4000-8000-00000000e001\nandroid_upload_keystore\n1\ngY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0"
+        }
+      ],
+      "signedText": "ias-vault-2\nsignature\nkj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y\n00000000-0000-4000-8000-00000000e001\nandroid_upload_keystore\n1\nCa5vCsNsCKAHKWb4\n1ClCW8J8qQWj6sqcW8ksrPJUiaDmSakIQ4S-XvIqXZHNfWT5w_iyId3M49crCpA0YMz4PpF6JjWEDnRYffA7Ti_p75DM1qL8VoF1RttCPa3fVXUBa_gGXKgyG2fgD1AIAXtOCN_yCq4zXBMOzZKj9pjR2baIVeWbGO4E1_5LlDL81iBzAq7pp7-mSZxndXZyv6Ix5UTb5wIWxzFRSOcQBhbTWqhONPEQDNJ_uCbp0vEPMAxfPywGd60WyWEIg2nxMuV7A8-i3ojhB6HFTVuRqQHxNZlsoowePgYHBus7DHSFOEeeMHqV1ZQSkmdFt-FnHw63fZazrQ1hs6Z3Da0FxfDQ1NZphyq-M-y8mz-6_e9O-tEyMQ\n2\nOHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk\n1HC14Kn2H4kYohhULZ4TT-tf3_sBYPm_92kcBjLf7jc\nofubjoZ7H7iFMoY5\nvuYYZhPOBY-BWfx2Qg-w5UWVjYL-yvrnNpzYX-srZowzLYqzJVwz01TP_LCDzfdb\ngY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0\npdnQLF7GbJtCybaVbIOupm6KB-RWSaXasMcO47i-OBI\nO4SR5DRT_RDNo_QS\n6wLEGNyUuAsSfOOU-uxUxmQreCaQSHeRd1ExoNi___pIlHVRVBO8RZhqZiuO04pt",
+      "envelope": {
+        "format": "ias-vault-2",
+        "credential": {
+          "id": "00000000-0000-4000-8000-00000000e001",
+          "type": "android_upload_keystore",
+          "version": 1
+        },
+        "data": {
+          "iv": "Ca5vCsNsCKAHKWb4",
+          "ct": "1ClCW8J8qQWj6sqcW8ksrPJUiaDmSakIQ4S-XvIqXZHNfWT5w_iyId3M49crCpA0YMz4PpF6JjWEDnRYffA7Ti_p75DM1qL8VoF1RttCPa3fVXUBa_gGXKgyG2fgD1AIAXtOCN_yCq4zXBMOzZKj9pjR2baIVeWbGO4E1_5LlDL81iBzAq7pp7-mSZxndXZyv6Ix5UTb5wIWxzFRSOcQBhbTWqhONPEQDNJ_uCbp0vEPMAxfPywGd60WyWEIg2nxMuV7A8-i3ojhB6HFTVuRqQHxNZlsoowePgYHBus7DHSFOEeeMHqV1ZQSkmdFt-FnHw63fZazrQ1hs6Z3Da0FxfDQ1NZphyq-M-y8mz-6_e9O-tEyMQ"
+        },
+        "recipients": [
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "epk": "1HC14Kn2H4kYohhULZ4TT-tf3_sBYPm_92kcBjLf7jc",
+            "iv": "ofubjoZ7H7iFMoY5",
+            "wk": "vuYYZhPOBY-BWfx2Qg-w5UWVjYL-yvrnNpzYX-srZowzLYqzJVwz01TP_LCDzfdb"
+          },
+          {
+            "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+            "epk": "pdnQLF7GbJtCybaVbIOupm6KB-RWSaXasMcO47i-OBI",
+            "iv": "O4SR5DRT_RDNo_QS",
+            "wk": "6wLEGNyUuAsSfOOU-uxUxmQreCaQSHeRd1ExoNi___pIlHVRVBO8RZhqZiuO04pt"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "4c4ok7vsZOjVFgh-DEVH2Fr5kwhQaw4bFm9udEAVSoz_TeN6uieA1dNa2_HKz-iu1hlqh1IIVcatcJ_PFtFWCQ"
+        }
+      },
+      "digest": "gvc8Tc542thunYa4eDXxvpoQjCt7uPh5ny9RWaclC0k",
+      "opens": {
+        "recovery": {
+          "plaintext": "eyJ0eXBlIjoiYW5kcm9pZF91cGxvYWRfa2V5c3RvcmUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJrZXlzdG9yZSI6ImJtOTBJR0VnY21WaGJDQnZkR2hsY2lCclpYbHpkRzl5WlRvZ0dybVRDRDlLTTVXbHVMZ3RzWTFIUDBSbWJOWDlOX2xxNXl0SHRUcmlNVTAiLCJzdG9yZV9wYXNzd29yZCI6Im5vdC1hLXJlYWwtc3RvcmUtcGFzc3dvcmQiLCJrZXlfYWxpYXMiOiJ1cGxvYWQiLCJrZXlfcGFzc3dvcmQiOiJub3QtYS1yZWFsLWtleS1wYXNzd29yZCJ9"
+        },
+        "runner-a": {
+          "plaintext": "eyJ0eXBlIjoiYW5kcm9pZF91cGxvYWRfa2V5c3RvcmUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJrZXlzdG9yZSI6ImJtOTBJR0VnY21WaGJDQnZkR2hsY2lCclpYbHpkRzl5WlRvZ0dybVRDRDlLTTVXbHVMZ3RzWTFIUDBSbWJOWDlOX2xxNXl0SHRUcmlNVTAiLCJzdG9yZV9wYXNzd29yZCI6Im5vdC1hLXJlYWwtc3RvcmUtcGFzc3dvcmQiLCJrZXlfYWxpYXMiOiJ1cGxvYWQiLCJrZXlfcGFzc3dvcmQiOiJub3QtYS1yZWFsLWtleS1wYXNzd29yZCJ9"
+        },
+        "runner-b": {
+          "error": "not-a-recipient"
+        },
+        "outsider": {
+          "error": "not-a-recipient"
+        }
+      }
+    }
+  ],
+  "changes": [
+    {
+      "name": "grant-runner-b",
+      "description": "ias vault grant: the recovery key opens the first case, wraps its data key for runner-b and the team signs the envelope again. runner-a is already a recipient and keeps its wrap.",
+      "operation": "rewrap",
+      "from": "keystore-for-recovery-and-runner-a",
+      "opener": "recovery",
+      "add": [
+        "runner-b",
+        "runner-a"
+      ],
+      "signer": "team",
+      "random": {
+        "wraps": [
+          {
+            "ephemeralPrivateKey": "28R1YRSSSJUqlsum_a8W2nGfOTG4A4-qSS3be3y-NJ8",
+            "iv": "mPcpYC89IJ9aekfA"
+          }
+        ]
+      },
+      "wraps": [
+        {
+          "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+          "ephemeralPrivateKey": "28R1YRSSSJUqlsum_a8W2nGfOTG4A4-qSS3be3y-NJ8",
+          "iv": "mPcpYC89IJ9aekfA",
+          "sharedSecret": "XmwbKq5bueJxtaSuTwv6tY3dBOYBroXG8lFHoYbmMl0",
+          "hkdfSalt": "f70uUGZmE5VeaUBtSB8Z-NEyEoZFfx_kAll6XHwGCXcHAHIdyhghpFL0B93o3vrq2mL-NzcnR54cNCQ58ZsXXA",
+          "wrapKey": "92ydzOcXblMVnJ5fWbP60mkCxogK-TvDZ53LQaPd-4s",
+          "aad": "ias-vault-2\nwrap\n00000000-0000-4000-8000-00000000e001\nandroid_upload_keystore\n1\n3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg"
+        }
+      ],
+      "signedText": "ias-vault-2\nsignature\nkj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y\n00000000-0000-4000-8000-00000000e001\nandroid_upload_keystore\n1\n0XaZsTpE_agQ_g89\ntM6ENIdfVPy_YbVYoQ3C1YJTaYYwCrgMEros4BApV6mRDDyxIsFdmXiwH0r5wyK8P-LbbOMIJPM4izcB6ZSyhPwe6NeUP2wQxdKoMVf08fVvFR9ijdHbplTePWBE6myGyY0KefsmVH513JU5AtZ9FpYPH2sSlO_Jc-4oBBeoAoOAmvSff_hk7zp_7rwH4tEFsZWdQlwhV17sbYlb8H0XQV2m3SU1FjIYE_aYHUxEfq02DaY-Hh-MndhciUabSiorhrmhAFa0ZP1SiFtpEGI2iOduIRFZOrpDQeyVaaOULWIwTa155_2txN_t1V2mL5qJvhG7jr5N1J6_DQFjAdGI_9TYQYWdnPptw_w9LdQ\n3\ngY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0\nf2gDGPbAdYQ9rJX5zaFwDjfCswRnjPGZN0iHNh4ifBU\nKvzUT7AfW9mgBjjq\nxeIt4rLJj3AIrN7KChMOdNOQS_ZZ5q4mcWbQeBn_3FXysWuT8zjwDhaT-c5VU3fd\nOHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk\n7N6B-jhSAl4t6tyP8fR7g81VIEwoTKvAKOUNRAPgcVA\na3oFvAfEAGJRkhAv\n4DTOiTVkxA-YeV1uSdtsvBg3jAfroWp_18xfZ_H0OJYo6lpE0Hc5fWryZ7WUaQt5\n3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg\nf70uUGZmE5VeaUBtSB8Z-NEyEoZFfx_kAll6XHwGCXc\nmPcpYC89IJ9aekfA\nC19eGc_bOsrmwy1xjVPYW6pGSM4Srw7r9M-OCbqgxHpuAGjrZSZJ7b24R66IHhrR",
+      "envelope": {
+        "format": "ias-vault-2",
+        "credential": {
+          "id": "00000000-0000-4000-8000-00000000e001",
+          "type": "android_upload_keystore",
+          "version": 1
+        },
+        "data": {
+          "iv": "0XaZsTpE_agQ_g89",
+          "ct": "tM6ENIdfVPy_YbVYoQ3C1YJTaYYwCrgMEros4BApV6mRDDyxIsFdmXiwH0r5wyK8P-LbbOMIJPM4izcB6ZSyhPwe6NeUP2wQxdKoMVf08fVvFR9ijdHbplTePWBE6myGyY0KefsmVH513JU5AtZ9FpYPH2sSlO_Jc-4oBBeoAoOAmvSff_hk7zp_7rwH4tEFsZWdQlwhV17sbYlb8H0XQV2m3SU1FjIYE_aYHUxEfq02DaY-Hh-MndhciUabSiorhrmhAFa0ZP1SiFtpEGI2iOduIRFZOrpDQeyVaaOULWIwTa155_2txN_t1V2mL5qJvhG7jr5N1J6_DQFjAdGI_9TYQYWdnPptw_w9LdQ"
+        },
+        "recipients": [
+          {
+            "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+            "epk": "f2gDGPbAdYQ9rJX5zaFwDjfCswRnjPGZN0iHNh4ifBU",
+            "iv": "KvzUT7AfW9mgBjjq",
+            "wk": "xeIt4rLJj3AIrN7KChMOdNOQS_ZZ5q4mcWbQeBn_3FXysWuT8zjwDhaT-c5VU3fd"
+          },
+          {
+            "kid": "OHeCFPD25tPd2DRaYj34dS7DLtio-1gUq_-NYsYmqNk",
+            "epk": "7N6B-jhSAl4t6tyP8fR7g81VIEwoTKvAKOUNRAPgcVA",
+            "iv": "a3oFvAfEAGJRkhAv",
+            "wk": "4DTOiTVkxA-YeV1uSdtsvBg3jAfroWp_18xfZ_H0OJYo6lpE0Hc5fWryZ7WUaQt5"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "epk": "f70uUGZmE5VeaUBtSB8Z-NEyEoZFfx_kAll6XHwGCXc",
+            "iv": "mPcpYC89IJ9aekfA",
+            "wk": "C19eGc_bOsrmwy1xjVPYW6pGSM4Srw7r9M-OCbqgxHpuAGjrZSZJ7b24R66IHhrR"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "4vtYvT1T6j5YhzspoAIi4EqcLJHZIXLWnEiP2ozECTgDvU1i017D5ejS0ph3RGTFQlGtDoU7CC4A4WG_5yWiDQ"
+        }
+      },
+      "digest": "8zOC-bdcd8avwCDlMq2hExm8S5AG5dKvkxNcY8NPcVA",
+      "opens": {
+        "recovery": {
+          "plaintext": "eyJ0eXBlIjoiYW5kcm9pZF91cGxvYWRfa2V5c3RvcmUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJrZXlzdG9yZSI6ImJtOTBJR0VnY21WaGJDQnJaWGx6ZEc5eVpUb2dNTzcxZm1UYWtodFlzWDhSV01nNDNJdkZGa2hxU3NURDdLWGFfVEplcXdzIiwic3RvcmVfcGFzc3dvcmQiOiJub3QtYS1yZWFsLXN0b3JlLXBhc3N3b3JkIiwia2V5X2FsaWFzIjoidXBsb2FkIiwia2V5X3Bhc3N3b3JkIjoibm90LWEtcmVhbC1rZXktcGFzc3dvcmQifQ"
+        },
+        "runner-a": {
+          "plaintext": "eyJ0eXBlIjoiYW5kcm9pZF91cGxvYWRfa2V5c3RvcmUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJrZXlzdG9yZSI6ImJtOTBJR0VnY21WaGJDQnJaWGx6ZEc5eVpUb2dNTzcxZm1UYWtodFlzWDhSV01nNDNJdkZGa2hxU3NURDdLWGFfVEplcXdzIiwic3RvcmVfcGFzc3dvcmQiOiJub3QtYS1yZWFsLXN0b3JlLXBhc3N3b3JkIiwia2V5X2FsaWFzIjoidXBsb2FkIiwia2V5X3Bhc3N3b3JkIjoibm90LWEtcmVhbC1rZXktcGFzc3dvcmQifQ"
+        },
+        "runner-b": {
+          "plaintext": "eyJ0eXBlIjoiYW5kcm9pZF91cGxvYWRfa2V5c3RvcmUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJrZXlzdG9yZSI6ImJtOTBJR0VnY21WaGJDQnJaWGx6ZEc5eVpUb2dNTzcxZm1UYWtodFlzWDhSV01nNDNJdkZGa2hxU3NURDdLWGFfVEplcXdzIiwic3RvcmVfcGFzc3dvcmQiOiJub3QtYS1yZWFsLXN0b3JlLXBhc3N3b3JkIiwia2V5X2FsaWFzIjoidXBsb2FkIiwia2V5X3Bhc3N3b3JkIjoibm90LWEtcmVhbC1rZXktcGFzc3dvcmQifQ"
+        },
+        "outsider": {
+          "error": "not-a-recipient"
+        }
+      }
+    },
+    {
+      "name": "revoke-runner-a",
+      "description": "ias vault revoke: the wrap of runner-a removed from the previous case and the envelope signed again. The data and the other wraps do not change; the signature does.",
+      "operation": "remove",
+      "from": "grant-runner-b",
+      "remove": "runner-a",
+      "signer": "team",
+      "signedText": "ias-vault-2\nsignature\nkj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y\n00000000-0000-4000-8000-00000000e001\nandroid_upload_keystore\n1\n0XaZsTpE_agQ_g89\ntM6ENIdfVPy_YbVYoQ3C1YJTaYYwCrgMEros4BApV6mRDDyxIsFdmXiwH0r5wyK8P-LbbOMIJPM4izcB6ZSyhPwe6NeUP2wQxdKoMVf08fVvFR9ijdHbplTePWBE6myGyY0KefsmVH513JU5AtZ9FpYPH2sSlO_Jc-4oBBeoAoOAmvSff_hk7zp_7rwH4tEFsZWdQlwhV17sbYlb8H0XQV2m3SU1FjIYE_aYHUxEfq02DaY-Hh-MndhciUabSiorhrmhAFa0ZP1SiFtpEGI2iOduIRFZOrpDQeyVaaOULWIwTa155_2txN_t1V2mL5qJvhG7jr5N1J6_DQFjAdGI_9TYQYWdnPptw_w9LdQ\n2\ngY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0\nf2gDGPbAdYQ9rJX5zaFwDjfCswRnjPGZN0iHNh4ifBU\nKvzUT7AfW9mgBjjq\nxeIt4rLJj3AIrN7KChMOdNOQS_ZZ5q4mcWbQeBn_3FXysWuT8zjwDhaT-c5VU3fd\n3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg\nf70uUGZmE5VeaUBtSB8Z-NEyEoZFfx_kAll6XHwGCXc\nmPcpYC89IJ9aekfA\nC19eGc_bOsrmwy1xjVPYW6pGSM4Srw7r9M-OCbqgxHpuAGjrZSZJ7b24R66IHhrR",
+      "envelope": {
+        "format": "ias-vault-2",
+        "credential": {
+          "id": "00000000-0000-4000-8000-00000000e001",
+          "type": "android_upload_keystore",
+          "version": 1
+        },
+        "data": {
+          "iv": "0XaZsTpE_agQ_g89",
+          "ct": "tM6ENIdfVPy_YbVYoQ3C1YJTaYYwCrgMEros4BApV6mRDDyxIsFdmXiwH0r5wyK8P-LbbOMIJPM4izcB6ZSyhPwe6NeUP2wQxdKoMVf08fVvFR9ijdHbplTePWBE6myGyY0KefsmVH513JU5AtZ9FpYPH2sSlO_Jc-4oBBeoAoOAmvSff_hk7zp_7rwH4tEFsZWdQlwhV17sbYlb8H0XQV2m3SU1FjIYE_aYHUxEfq02DaY-Hh-MndhciUabSiorhrmhAFa0ZP1SiFtpEGI2iOduIRFZOrpDQeyVaaOULWIwTa155_2txN_t1V2mL5qJvhG7jr5N1J6_DQFjAdGI_9TYQYWdnPptw_w9LdQ"
+        },
+        "recipients": [
+          {
+            "kid": "gY6AuqT5ADs7vK-fmj9UEb5Gf6ZSdOLxT1mBWwD5hA0",
+            "epk": "f2gDGPbAdYQ9rJX5zaFwDjfCswRnjPGZN0iHNh4ifBU",
+            "iv": "KvzUT7AfW9mgBjjq",
+            "wk": "xeIt4rLJj3AIrN7KChMOdNOQS_ZZ5q4mcWbQeBn_3FXysWuT8zjwDhaT-c5VU3fd"
+          },
+          {
+            "kid": "3ZL6nCkm1BcKR1Nd5MqK3OMzPTijlc-wKtLHjIB-5hg",
+            "epk": "f70uUGZmE5VeaUBtSB8Z-NEyEoZFfx_kAll6XHwGCXc",
+            "iv": "mPcpYC89IJ9aekfA",
+            "wk": "C19eGc_bOsrmwy1xjVPYW6pGSM4Srw7r9M-OCbqgxHpuAGjrZSZJ7b24R66IHhrR"
+          }
+        ],
+        "signature": {
+          "kid": "kj5ytQ8v8H2A7tnrk0fVw6kOrYCNTqLXnqk1JcG104Y",
+          "sig": "kuvM6QtJTWpfQ9jUcWQbwCtA6Qt2LbPIwRT9I4XLYyqal8oV051ryZIgWX4fmd7hddBNIflmAgvxiAucR2eLBg"
+        }
+      },
+      "digest": "8zOC-bdcd8avwCDlMq2hExm8S5AG5dKvkxNcY8NPcVA",
+      "opens": {
+        "recovery": {
+          "plaintext": "eyJ0eXBlIjoiYW5kcm9pZF91cGxvYWRfa2V5c3RvcmUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJrZXlzdG9yZSI6ImJtOTBJR0VnY21WaGJDQnJaWGx6ZEc5eVpUb2dNTzcxZm1UYWtodFlzWDhSV01nNDNJdkZGa2hxU3NURDdLWGFfVEplcXdzIiwic3RvcmVfcGFzc3dvcmQiOiJub3QtYS1yZWFsLXN0b3JlLXBhc3N3b3JkIiwia2V5X2FsaWFzIjoidXBsb2FkIiwia2V5X3Bhc3N3b3JkIjoibm90LWEtcmVhbC1rZXktcGFzc3dvcmQifQ"
+        },
+        "runner-a": {
+          "error": "not-a-recipient"
+        },
+        "runner-b": {
+          "plaintext": "eyJ0eXBlIjoiYW5kcm9pZF91cGxvYWRfa2V5c3RvcmUiLCJhcHBsaWNhdGlvbiI6ImpzY2hlZHVsZXIiLCJrZXlzdG9yZSI6ImJtOTBJR0VnY21WaGJDQnJaWGx6ZEc5eVpUb2dNTzcxZm1UYWtodFlzWDhSV01nNDNJdkZGa2hxU3NURDdLWGFfVEplcXdzIiwic3RvcmVfcGFzc3dvcmQiOiJub3QtYS1yZWFsLXN0b3JlLXBhc3N3b3JkIiwia2V5X2FsaWFzIjoidXBsb2FkIiwia2V5X3Bhc3N3b3JkIjoibm90LWEtcmVhbC1rZXktcGFzc3dvcmQifQ"
+        },
+        "outsider": {
+          "error": "not-a-recipient"
+        }
+      }
+    }
+  ]
+}