pbkdf2

func NewMasterLock ¶

func NewMasterLock(passphrase string, h func() hash.Hash, iterations int, salt []byte) (secretlock.Service, error)

NewMasterLock is responsible for encrypting/decrypting a master key expanded from a passphrase using PBKDF2 using `passphrase`, hash function `h`, `salt`. The size of a master key passed to Encrypt() must match `h()`.Size() since the key will be used for AEAD operations. The salt is optional and can be set to nil. This implementation must not be used directly in Aries framework. It should be passed in as the second argument to local secret lock service constructor: `local.NewService(masterKeyReader io.Reader, secLock secretlock.Service)`.