{"id":"c0101","filename":"c0101_t5_fenixvault_tee.dok.json","weise3_id":"","tip":"feat","naziv":"T5 — FenixVault TEE Key Storage (non-extractable ECDSA P-256)","kreator":"genesis","datum":"2026-05-07","snippet":"fenixvault-tee.js: ECDSA P-256 via Web Crypto — extractable:false (KRITIČNO) · getOrCreate(keyId): generira ili vraća cached key par — IDB pohrana CryptoKey objekta (structured clone) · sign(keyId,data): sign() transparentno delegira na TEE (Android Keystore/iOS Secure Enclave)","status":"DONE","prev_weise3":"","bunker_l":"#00d4ff","full":{"tip":"feat","naziv":"T5 — FenixVault TEE Key Storage (non-extractable ECDSA P-256)","commit":"93fe654","datum":"2026-05-07","zakon":["ZAKON 1A — FenixVault™ ML-DSA-65"],"sto_je_napravljeno":["fenixvault-tee.js: ECDSA P-256 via Web Crypto — extractable:false (KRITIČNO)","getOrCreate(keyId): generira ili vraća cached key par — IDB pohrana CryptoKey objekta (structured clone)","sign(keyId,data): sign() transparentno delegira na TEE (Android Keystore/iOS Secure Enclave)","verifySignature(sigHex,data,publicKeyJwk): stateless verifikacija s JWK public key","bpz9L5Seal(weise3_id,keyId): BunkerSeal BPZ-9 L5 integracija","revoke(keyId), listKeys(): upravljanje ključevima","Napomena: Ed25519 pending W3C standard → P-256 je trenutni max u Web Crypto"],"status":"DONE"}}