function deriveKEK
deriveKEK(passwordHash: PasswordHash): Promise<CryptoKey>

Legacy (v1) KEK derived from the stored password hash. Retained only to unwrap and migrate existing wrapped_data_keys — new wraps use deriveKEKFromPassword. Salt prefix is empty so this stays byte-compatible with keys wrapped before the v2 split.

Parameters

passwordHash: PasswordHash

Return Type

Promise<CryptoKey>

Usage

import { deriveKEK } from "docs/crypto.ts";