Removes every cached key handle.
Call this on logout or whenever the authenticated identity changes to avoid leaving usable decryption capability behind.
Returns the cached key handle for the given key, or undefined on a miss.
Stores a key handle under the given key.
Default DerivedKeyMaterialCache that keeps key handles in memory only.
Nothing is written to disk, so the cache is discarded when the page is reloaded or the tab is closed and there is no at-rest exposure. The trade-off is one extra key derivation per map per page load.