Bind Keys to Version and Purpose

[paragonie-security]

Paseto/lib/paseto/v2.ex

Line 69 in 78eb0b9

def decrypt(data, key, footer \\ "") do

Paseto/lib/paseto/v2.ex

Line 102 in 78eb0b9

@spec verify(String.t(), [binary()], String.t() | nil) :: {:ok, binary} | {:error, String.t()}

See https://github.com/paseto-standard/paseto-spec/blob/master/docs/02-Implementation-Guide/03-Algorithm-Lucidity.md

Right now, byte arrays are accepted by this API. There's no mechanism to prevent a user from using a v2 public key as a v2 local key.