# SOFA demo per-session keys (WP-104 section 3.4 derived form).
#
# On a real embedded device each layer (Provisioning, Integrator,
# Operator) has a master key and the per-session key is derived via
# HKDF(layer_master, salt, info). SOFA simulates both the masters
# and the derivation step out and uses these values directly.
#
# Format (one row per keyid; '#' and blank lines are ignored):
#     <keyid> <role-label> <hex-bytes>
#
# keyid: 1..15 (4-bit base id; demo uses 1..3 for the three roles).
# role-label: free-form, informational only; parser uses keyid.
# hex-bytes: FBSEC_AEAD_KEY_SIZE bytes (16 for AES-128-GCM, 32 for
#            AES-256-GCM; demo literals are 16 bytes).

1 prov-session  00112233445566778899AABBCCDDEEFF
2 integ-session AABBCCDDEEFF00112233445566778899
3 op-session    FFEEDDCCBBAA99887766554433221100
