keys

type Decrypter ¶

type Decrypter func(rand io.Reader, priv *rsa.PrivateKey, ciphertext []byte) ([]byte, error)

Decrypter decrypts a given reader stream with a given public key. This method may be exported into a library and must not be unexported.

type Encrypter ¶

type Encrypter func(random io.Reader, pub *rsa.PublicKey, msg []byte) ([]byte, error)

Encrypter encrypts a given reader stream with a given public key. This method may be exported into a library and must not be unexported.

type Encryption ¶

type Encryption struct {
	Type  string `json:"type"`
	Key   string `json:"key"`
	Nonce string `json:"nonce"`
}

Encryption contains the type, used key and the nonce (needed for AES GCM)

type HybridEncryptionValue ¶

type HybridEncryptionValue struct {
	Encryption Encryption `json:"encryption"`
	Value      string     `json:"value"`
}

HybridEncryptionValue contains an encrypted value and information about the encryption

func NewHybridEncryptionValue(encryptionAlgorithm string, encryptedKey string, nonce []byte, encryptedValue []byte) HybridEncryptionValue

type Key ¶

type Key interface {
	// AsString returns the key as pem formatted string
	AsString() (string, error)
	// AsBytes returns the key as pem formatted byte array
	AsBytes() ([]byte, error)
	// ToFile writes the key to disk in pem format
	ToFile(path string) error
}

Key interface defines the common functions of a key

type KeyPair ¶

type KeyPair struct {
	// contains filtered or unexported fields
}

KeyPair represents a public/private key pair

func (kp *KeyPair) Private() *PrivateKey

func (kp *KeyPair) Public() *PublicKey

type KeyProvider ¶

type KeyProvider struct {
	Encrypter Encrypter
	Decrypter Decrypter
}

KeyProvider provides functions for en- and decryption. This method may be exported into a library and must not be unexported.

func NewKeyProvider(keyType string) (*KeyProvider, error)

func (provider *KeyProvider) FromPrivateKey(privateKey []byte) (*KeyPair, error)

func (provider *KeyProvider) FromPrivateKeyPath(path string) (*KeyPair, error)

func (provider *KeyProvider) Generate() (*KeyPair, error)

func (provider *KeyProvider) ReadPublicKey(publicKey []byte) (*PublicKey, error)

func (provider *KeyProvider) ReadPublicKeyFromString(publicKeyString string) (*PublicKey, error)

type PrivateKey ¶

type PrivateKey struct {
	// contains filtered or unexported fields
}

func (pk *PrivateKey) AsBytes() ([]byte, error)

func (pk *PrivateKey) AsString() (string, error)

func (pk *PrivateKey) Decrypt(input string) (string, error)

func (pk *PrivateKey) ToFile(path string) error

type PublicKey ¶

type PublicKey struct {
	// contains filtered or unexported fields
}

PublicKey is the public key part of the KeyPair.

func (pk *PublicKey) AsBytes() ([]byte, error)

func (pk *PublicKey) AsString() (string, error)

func (pk *PublicKey) Encrypt(input string) (string, error)

func (pk *PublicKey) ToFile(path string) error