@@ -36,7 +36,7 @@ in this document are to be interpreted as described in [RFC 2119](https://tools.
36
36
On keyring initialization, a keyring MUST define at least one of the following:
37
37
38
38
- [ Generator Keyring] ( #generator-keyring )
39
- - [ Children Keyrings] ( #children -keyrings )
39
+ - [ Child Keyrings] ( #child -keyrings )
40
40
41
41
### Generator Keyring
42
42
@@ -47,10 +47,10 @@ during [OnEncrypt](keyring-interface.md#onencrypt).
47
47
This means that this keyring MUST return [ encryption materials] ( structures.md#encryption-materials ) containing
48
48
a plaintext data key on [ OnEncrypt] ( keyring-interface.md#onencrypt ) .
49
49
50
- If the list of [ children keyrings] ( #children -keyrings ) is empty,
50
+ If the list of [ child keyrings] ( #child -keyrings ) is empty,
51
51
a [ generator keyring] ( #generator-keyring ) MUST be defined for the keyring.
52
52
53
- ### Children Keyrings
53
+ ### Child Keyrings
54
54
55
55
A list of [ keyrings] ( keyring-interface.md ) to be used to modify the [ encryption] ( structures.md#encryption-materials )
56
56
or [ decryption materials] ( structures.md#decryption-materials ) .
@@ -72,7 +72,7 @@ If this keyring does not have a [generator keyring](#generator-keyring),
72
72
and the input [ encryption materials] ( structures.md#encryption-materials )
73
73
does not include a plaintext data key, OnEncrypt MUST fail.
74
74
75
- Next, for each [ keyring] ( keyring-interface.md ) in this keyring's [ children keyrings] ( #children -keyrings ) ,
75
+ Next, for each [ keyring] ( keyring-interface.md ) in this keyring's list of [ child keyrings] ( #child -keyrings ) ,
76
76
the keyring MUST call [ OnEncrypt] ( keyring-interface.md#onencrypt ) .
77
77
The [ encryption materials] ( structures.md#encryption-materials ) inputted into OnEncrypt is the
78
78
input encryption materials if this is the first OnEncrypt call.
@@ -90,7 +90,7 @@ OnDecrypt MUST immediately return the unmodified decryption materials.
90
90
91
91
Otherwise, OnDecrypt MUST attempt to decrypt the [ encrypted data keys] ( structures.md#encrypted-data-keys-1 )
92
92
in the input [ decryption materials] ( structures.md#decryption-materials ) using it's
93
- [ children keyrings] ( #children -keyrings ) and, if it is specified, [ generator keyring] ( #generator-keyring ) .
93
+ [ child keyrings] ( #child -keyrings ) and, if it is specified, [ generator keyring] ( #generator-keyring ) .
94
94
It MUST attempt to decrypt using these keyrings until it either succeeds in decryption,
95
95
or it has no more child keyrings or generator keyring to attempt decryption with.
96
96
If a generator keyring is specified, it MUST be used first.
@@ -102,7 +102,7 @@ the unmodified [decryption materials](structures.md#decryption-materials) and in
102
102
If [ OnDecrypt] ( keyring-interface.md#ondecrypt ) returns [ decryption materials] ( structures.md#decryption-materials )
103
103
containing a plaintext data key, the keyring MUST immediately return the modified decryption materials.
104
104
105
- If, after calling [ OnDecrypt] ( keyring-interface.md#ondecrypt ) on every one of this keyring's [ children keyrings] ( #children -keyrings )
105
+ If, after calling [ OnDecrypt] ( keyring-interface.md#ondecrypt ) on every one of this keyring's [ child keyrings] ( #child -keyrings )
106
106
(and possibly the [ generator keyring] ( #generator-keyring ) ), the [ decryption materials] ( structures.md#decryption-materials )
107
107
still do not contain a plaintext data key:
108
108
@@ -124,7 +124,7 @@ In more detail:
124
124
125
125
Multi-keyrings will produce a set of [ encrypted data keys] ( structures.md#encrypted-data-key ) on
126
126
[ OnEncrypt] ( keyring-interface.md#onencrypt ) that includes the encrypted data keys of every sub-keyring
127
- (a keyring which is either the [ generator keyring] ( #generator-keyring ) or a member of [ children keyrings] ( #children -keyrings ) )
127
+ (a keyring which is either the [ generator keyring] ( #generator-keyring ) or a member of [ child keyrings] ( #child -keyrings ) )
128
128
that is capable of producing encrypted data keys.
129
129
130
130
As such, any [ keyring] ( keyring-interface.md ) that is capable of obtaining the plaintext data key from
0 commit comments