var ErrInvalidKeyName = errors.New("key names cannot be paths")

type BatchRequestItem struct {
    // Context for key derivation. This is required for derived keys.
    Context string `json:"context" structs:"context" mapstructure:"context"`

    // DecodedContext is the base64 decoded version of Context
    DecodedContext []byte

    // Plaintext for encryption
    Plaintext string `json:"plaintext" structs:"plaintext" mapstructure:"plaintext"`

    // Ciphertext for decryption
    Ciphertext string `json:"ciphertext" structs:"ciphertext" mapstructure:"ciphertext"`

    // Nonce to be used when v1 convergent encryption is used
    Nonce string `json:"nonce" structs:"nonce" mapstructure:"nonce"`

    // The key version to be used for encryption
    KeyVersion int `json:"key_version" structs:"key_version" mapstructure:"key_version"`

    // DecodedNonce is the base64 decoded version of Nonce
    DecodedNonce []byte
}

type DecryptBatchResponseItem struct {
    // Plaintext for the ciphertext present in the corresponding batch
    // request item
    Plaintext string `json:"plaintext" structs:"plaintext" mapstructure:"plaintext"`

    // Error, if set represents a failure encountered while encrypting a
    // corresponding batch request item
    Error string `json:"error,omitempty" structs:"error" mapstructure:"error"`
}

type EncryptBatchResponseItem struct {
    // Ciphertext for the plaintext present in the corresponding batch
    // request item
    Ciphertext string `json:"ciphertext,omitempty" structs:"ciphertext" mapstructure:"ciphertext"`

    // KeyVersion defines the key version used to encrypt plaintext.
    KeyVersion int `json:"key_version,omitempty" structs:"key_version" mapstructure:"key_version"`

    // Error, if set represents a failure encountered while encrypting a
    // corresponding batch request item
    Error string `json:"error,omitempty" structs:"error" mapstructure:"error"`
}