README
¶
simplebox
Package simplebox provides a simple, easy-to-use cryptographic API where all of the hard decisions have been made for you in advance. The backing cryptography is XSalsa20 and Poly1305, which are known to be secure and fast.
This package is a Golang port of the RbNaCl module of the same name.
Installation and Usage
go get github.com/brandur/simplebox
Please see godoc for usage information and examples.
Documentation
¶
Overview ¶
Package simplebox provides a simple, easy-to-use cryptographic API where all of the hard decisions have been made for you in advance. The backing cryptography is XSalsa20 and Poly1305, which are known to be secure and fast.
This package uses NaCl's secretbox under the hood, but also includes a simple yet secure nonce generation strategy. A 24-byte random nonce is generated from a secure source, used to encrypt a message, and prepended to the resulting ciphertex. When it's time for decryption, the message is split back into nonce and ciphertext, and the message is decrypted.
Thanks to the size of the nonce, the chance of a collision is negligible. For example, after encrypting 2^64 messages, the odds of there having been a repeated nonce is approximately 2^-64.
Note that although this strategy assures the confidentiality of your messages, it doesn't provide any protection against messages being reordered and replayed by an active adversary.
This idea is entirely based on the SimpleBox implementation included with RbNaCl: https://github.com/cryptosphere/rbnacl/wiki/SimpleBox
Index ¶
Examples ¶
Constants ¶
const ( // Length in bytes of a secret key used for encryption and decryption. KeySize = 32 // Length in bytes of a nonce value (which must be unique and may be // random) used for encryption and decryption. NonceSize = 24 )
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type SimpleBox ¶
type SimpleBox struct {
// contains filtered or unexported fields
}
SimpleBox provides a simple wrapper around NaCl's secretbox with a self-contained random nonce strategy.
Example ¶
package main
import (
"crypto/rand"
"fmt"
"github.com/brandur/simplebox"
)
func main() {
message := "hello"
var secretKey [simplebox.KeySize]byte
rand.Reader.Read(secretKey[:])
box := simplebox.NewFromSecretKey(&secretKey)
// Encrypt
ciphertext := box.Encrypt([]byte(message))
// Decrypt
decrypted, err := box.Decrypt(ciphertext)
if err != nil {
panic(err)
}
// Prints:
//
// Decrypted: hello
fmt.Printf("Decrypted: %v\n", decrypted)
}
Output:
func NewFromSecretKey ¶
Creates a SimpleBox from a secret key.
Source Files