rsaoaep

func NewRecipient ¶

func NewRecipient(key *rsa.PublicKey) (age.Recipient, error)

NewRecipient creates an age.Recipient representing an RSA public key.

The file keys are encrypted using OAEP with SHA256. This implementation differs from agessh's support for RSA public keys by not including an AEAD "label" in the OAEP encryption because Google Cloud KMS' asymmetric decryption API does not allow specifying a label during decryption.

This implementation also uses a different stanza Type and a different form of key identification.