Crypto MCP
    Preparing search index...

    Variable kmsWrapConst

    kmsWrap: ToolHandler = ...

    crypto_kms_wrap: wrap the DEK a key handle refers to under a KEK. The DEK is copied before the first await, so a concurrent eviction that wipes the stored key cannot change what gets wrapped; the copy is wiped afterwards.