hisi-keystore defines chip-neutral, no_std, heap-free contracts for opaque
key handles and Bluetooth bond metadata.
The crate deliberately has no key-export API. It reuses hisi-crypto's
SecretBytes, KeyUsage, and provider-owned crypto handle instead of defining
a second incompatible key capability. Importing caller-owned secret bytes
through a borrowed, Debug-redacted KeyMaterial returns a generation-tagged
keystore KeyHandle that wraps that crypto capability and adds key kind and
persistence policy. BondTable<N>
stores only peer identity, security properties, and opaque LTK/IRK/CSRK handles.
Callers reserve table capacity before importing key material, then atomically
commit the complete bond. Dropping the reservation leaves an existing record
unchanged, and replacement returns the retired handles for backend cleanup.
This first alpha does not implement WS63 hardware slots, eFuse/OTP, encrypted
NVS persistence, pairing UI, or radio policy. hisi-nvs remains the owner of KV
format, while a chip backend owns protected key storage and recovery.