yasuki_core.accounts.crypto.sub_blind_index#
- sub_blind_index(google_sub)[source]#
Return the banlist tombstone key for a Google identity:
HMAC-SHA256("sub:" + sub, pepper).The subject identifier is opaque and stable, so it is hashed as-is apart from a
sub:domain tag. The tag keeps this index’s value space disjoint from the email index (which the email blind-index construction, frozen by stored data, leaves untagged), so the two banlist columns can never collide. Raise RuntimeError when the pepper is unset.