Add corekeys package with CSA/OCRKeyBundle types

[cedric-cordenier]

Requires

Supports

[github-actions]

👋 cedric-cordenier, thanks for creating this pull request!

To help reviewers, please consider creating future PRs as drafts first. This allows you to self-review and make any final changes before notifying the team.

Once you're ready, you can mark it as "Ready for review" to request feedback. Thanks!

[Copilot]

Pull request overview

This PR introduces the corekeys package to generate and handle CSA (Connection Signing Authority) and OCR (Off-Chain Reporting) key bundles compatible with the core node.

Changes:

• Adds csa.go with GenerateEncryptedCSAKey and FromEncryptedCSAKey functions for CSA key management
• Adds ocrkeybundle.go with GenerateEncryptedOCRKeyBundle and FromEncryptedOCRKeyBundle functions for OCR key bundle management
• Includes comprehensive test coverage for both CSA and OCR key bundle round-trip operations, password validation, and invalid format handling

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 2 comments.

File	Description
keystore/corekeys/csa.go	Core implementation of CSA key generation, encryption, and decryption utilities
keystore/corekeys/csa_test.go	Test coverage for CSA key operations including round-trip, wrong password, and invalid format scenarios
keystore/corekeys/ocrkeybundle.go	Core implementation of OCR key bundle generation with support for offchain signing/encryption and onchain signing keys
keystore/corekeys/ocrkeybundle_test.go	Test coverage for OCR key bundle operations including round-trip, password validation, invalid format, and invalid key type scenarios

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

✅ API Diff Results - No breaking changes

---

📄 View full apidiff report