encryption

package

v7.6.0 Latest Latest Go to latest Published: Feb 13, 2024 License: MIT Imports: 15 Imported by: 1

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

View Source

const (
	CodeChallengeMethodPlain = "plain"
	CodeChallengeMethodS256  = "S256"
)

This section is empty.

func CheckNonce(nonce []byte, hashed string) bool

CheckNonce tests if a nonce matches the hashed version of it

func GenerateCodeChallenge(method, codeVerifier string) (string, error)

func GenerateRandomASCIIString(length int) (string, error)

func HashNonce(nonce []byte) string

HashNonce returns the BLAKE2b 256-bit hash of a nonce NOTE: Error checking (G104) is purposefully skipped:

`blake2b.New256` has no error path with a nil signing key
`hash.Hash` interface's `Write` has an error signature, but `blake2b.digest.Write` does not use it. #nosec G104

func Nonce(length int) ([]byte, error)

Nonce generates a random n-byte slice

func SecretBytes(secret string) []byte

SecretBytes attempts to base64 decode the secret, if that fails it treats the secret as binary

func SignedValue(seed string, key string, value []byte, now time.Time) (string, error)

SignedValue returns a cookie that is signed and can later be checked with Validate

func Validate(cookie *http.Cookie, seed string, expiration time.Duration) (value []byte, t time.Time, ok bool)

Validate ensures a cookie is properly signed

type Cipher interface {
	Encrypt(value []byte) ([]byte, error)
	Decrypt(ciphertext []byte) ([]byte, error)
}

Cipher provides methods to encrypt and decrypt

func NewBase64Cipher(c Cipher) Cipher

NewBase64Cipher returns a new AES Cipher for encrypting cookie values and wrapping them in Base64 -- Supports Legacy encryption scheme

func NewCFBCipher(secret []byte) (Cipher, error)

NewCFBCipher returns a new AES CFB Cipher

func NewGCMCipher(secret []byte) (Cipher, error)

NewGCMCipher returns a new AES GCM Cipher