---
title: "locker.public-keys@1 · OpenVibe.Services"
canonical: "https://openvibe.services/docs/contracts/locker.public-keys"
updated: null
---

# locker.public-keys@1 · OpenVibe.Services

HTML: [locker.public-keys@1 · OpenVibe.Services](https://openvibe.services/docs/contracts/locker.public-keys)

# LockerPublicKeys `locker.public-keys@1`

Generated at 2026-11-13 06:25:48 UTC from [`openvibe-contracts v0.419.0`](https://github.com/OpenVibers/OpenVibe.Contracts/tree/v0.419.0) and [`openvibe-sdk v0.161.0`](https://github.com/OpenVibers/OpenVibe.SDK/tree/v0.161.0).

- Version: 1.0.0
- Owner: network
- Visibility: public
- Status: active
- Compatibility: backward
- Schema: [`https://openvibe.network/contracts/locker/public-keys.v1.json`](/docs/contracts/locker.public-keys.json)

locker.public-keys@1: what anyone may read about a person's locker: the two public keys and the eight-word fingerprint. The fingerprint is the first eight bytes of SHA-256 over both public keys, read as eight words in two groups of four, joined by a middle dot, and the signature proves the holder owns the signing key, so a person can compare the eight words out of band and a key change is visible.

## Fields

| Field | Type | Required | Description | Constraints |
| --- | --- | --- | --- | --- |
| `subject` | [identity.subject-ref](/docs/contracts/identity.subject-ref) | yes |  |  |
| `ecdh` | [locker.public-key](/docs/contracts/locker.public-key) | yes |  |  |
| `signing` | [locker.public-key](/docs/contracts/locker.public-key) | yes |  |  |
| `fingerprint` | string | yes | Eight words, lower case, in two groups of four joined by a middle dot: sixty-four bits. Compare them out of band; a change means a changed key. | - `pattern ^[a-z]+ [a-z]+ [a-z]+ [a-z]+ · [a-z]+ [a-z]+ [a-z]+ [a-z]+$` |
| `fingerprint_signature` | string | yes | The ECDSA signature over both public keys, base64. It proves the holder owns the signing key. | - `pattern ^[A-Za-z0-9+/]{86}==$` |
| `updated_at` | string | yes |  | - `format date-time` |

## Examples

From the contract's own test fixtures: valid ones validate, rejected ones must fail.

 Valid: example

~~~~
{
  "subject": {
    "type": "user",
    "id": "usr_01JAB2C3D4E5F6G7H8J9K0MNPQ"
  },
  "ecdh": {
    "kty": "EC",
    "crv": "P-256",
    "x": "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHg",
    "y": "eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXk"
  },
  "signing": {
    "kty": "EC",
    "crv": "P-256",
    "x": "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHg",
    "y": "eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXk"
  },
  "fingerprint": "amber quiet harbor cedar · mist dawn ember willow",
  "fingerprint_signature": "Z2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZw==",
  "updated_at": "2026-11-06T00:00:00Z"
}
~~~~

Rejected: fingerprint-separator

~~~~
{
  "subject": {
    "type": "user",
    "id": "usr_01JAB2C3D4E5F6G7H8J9K0MNPQ"
  },
  "ecdh": {
    "kty": "EC",
    "crv": "P-256",
    "x": "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHg",
    "y": "eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXk"
  },
  "signing": {
    "kty": "EC",
    "crv": "P-256",
    "x": "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHg",
    "y": "eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXk"
  },
  "fingerprint": "amber quiet harbor cedar-mist dawn ember willow",
  "fingerprint_signature": "Z2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZw==",
  "updated_at": "2026-11-06T00:00:00Z"
}
~~~~

Rejected: fingerprint

~~~~
{
  "subject": {
    "type": "user",
    "id": "usr_01JAB2C3D4E5F6G7H8J9K0MNPQ"
  },
  "ecdh": {
    "kty": "EC",
    "crv": "P-256",
    "x": "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHg",
    "y": "eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXk"
  },
  "signing": {
    "kty": "EC",
    "crv": "P-256",
    "x": "eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHg",
    "y": "eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXl5eXk"
  },
  "fingerprint": "amber quiet harbor cedar",
  "fingerprint_signature": "Z2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZ2dnZw==",
  "updated_at": "2026-11-06T00:00:00Z"
}
~~~~

## Validate

~~~~
const contracts = require('openvibe-contracts');
contracts.validate('locker.public-keys@1', value);   // { valid, errors: [{ path, message }] }
~~~~