package dhutil

import "github.com/hashicorp/vault/helper/dhutil"

Index ¶

• func DecryptAES(key, ciphertext, nonce, aad []byte) ([]byte, error)
• func DeriveSharedKey(secret, ourPublic, theirPublic []byte) ([]byte, error)
• func EncryptAES(key, plaintext, aad []byte) ([]byte, []byte, error)
• func GeneratePublicPrivateKey() ([]byte, []byte, error)
• func GenerateSharedSecret(ourPrivate, theirPublic []byte) ([]byte, error)
• type Envelope
• type PublicKeyInfo

Package Files ¶

dhutil.go

func DecryptAES ¶ Uses

func DecryptAES(key, ciphertext, nonce, aad []byte) ([]byte, error)

Use AES256-GCM to decrypt some ciphertext with a provided key and nonce. The returned values are the plaintext and error respectively.

func DeriveSharedKey ¶ Uses

func DeriveSharedKey(secret, ourPublic, theirPublic []byte) ([]byte, error)

DeriveSharedKey uses HKDF to derive a key from a shared secret and public keys

func EncryptAES ¶ Uses

func EncryptAES(key, plaintext, aad []byte) ([]byte, []byte, error)

Use AES256-GCM to encrypt some plaintext with a provided key. The returned values are the ciphertext, the nonce, and error respectively.

func GeneratePublicPrivateKey ¶ Uses

func GeneratePublicPrivateKey() ([]byte, []byte, error)

generatePublicPrivateKey uses curve25519 to generate a public and private key pair.

func GenerateSharedSecret ¶ Uses

func GenerateSharedSecret(ourPrivate, theirPublic []byte) ([]byte, error)

GenerateSharedSecret uses the private key and the other party's public key to generate the shared secret.

type Envelope ¶ Uses

type Envelope struct {
    Curve25519PublicKey []byte `json:"curve25519_public_key"`
    Nonce               []byte `json:"nonce"`
    EncryptedPayload    []byte `json:"encrypted_payload"`
}

type PublicKeyInfo ¶ Uses

type PublicKeyInfo struct {
    Curve25519PublicKey []byte `json:"curve25519_public_key"`
}