The install's ads key: the X25519 key pair the app mints once on the device and
names in RegisterGeckoPkForAdsMutation and IGEnigmaEncryptedConversionQuery
(pk_b64url), the key the server encrypts the install's conversion events to.
The app mints it from its native HPKE library (libsodium's, DHKEM(X25519, HKDF-SHA256)): a 32-byte public key and a 32-byte secret key. The public key
goes on the wire as unpadded base64url (43 characters), the secret key stays on
the device. It is minted lazily, at the first use, and kept for the install's
life, so every request that names it names the same key; the registration is
recorded against the key it registered, and a key the app mints anew is
registered anew. The recordings and the decompiled app behind these facts are
in “The recordings and captures behind the facts the @igpapi/core doc
comments state are kept here”.
The install's ads key: the X25519 key pair the app mints once on the device and names in
RegisterGeckoPkForAdsMutationandIGEnigmaEncryptedConversionQuery(pk_b64url), the key the server encrypts the install's conversion events to.The app mints it from its native HPKE library (libsodium's,
DHKEM(X25519, HKDF-SHA256)): a 32-byte public key and a 32-byte secret key. The public key goes on the wire as unpadded base64url (43 characters), the secret key stays on the device. It is minted lazily, at the first use, and kept for the install's life, so every request that names it names the same key; the registration is recorded against the key it registered, and a key the app mints anew is registered anew. The recordings and the decompiled app behind these facts are in “The recordings and captures behind the facts the@igpapi/coredoc comments state are kept here”.