crypto

type Data []byte

type Encrypter interface {
	Encrypt(data Data) (Data, error)
	Decrypt(data Data) (Data, error)
}

type EncrypterPlugin interface {
	// Encrypter is an identification method. The return value is
	// expected to be stable over multiple invocations.
	Encrypter() string
	// NewEncrypter is a factory method. The input parameter
	// is a directory for potential data persistence, which might not exist.
	NewEncrypter(string) (Encrypter, error)
}

type Encrypters map[string]Encrypter

type SecretsGenerator interface {
	// GenerateSecrets is used to create any configuration, secrets, or otherwise
	// persistent data for later de-/encryption. If the first parameter is true,
	// any existing data is expected to be overwritten. The given context contains
	// additional utilities.
	GenerateSecrets(bool, context.Context) error
}