pemcrypt

type CryptOptions struct {
	// PasswordParameters indicates how to derive the password key from the
	// prompt. A nil value for this structure indicate it is unconfigured and
	// a default set of values will be set if needed.
	PasswordParameters *PasswordParameters

	// PasswordSource is where to get the password from. See one of the
	// PromptFrom*() functions for the various options. If nil, encryption
	// will not prompt for a password whereas decryption will only prompt
	// if a password was used in the encryption process.
	//
	// The value PromptDisabled disables any prompt. Attempting to decrypt
	// A PEM block that requires a password with PromptDisabled will cause the
	// decryption to fail.
	PasswordSource prompt.PasswordPrompt

	// YkHMAC is configuration needed to include a Yubikey in the encryption /
	// decryption process.
	YkHMAC YkHmacOptions

	// Key is the encrypted master key.
	Key []byte
}

type OpType int

type PasswordParameters struct {
	Salt          []byte
	TimeInSeconds bool
	Time          uint32
	Memory        uint32
	Threads       uint8
}

type YkHmacOptions struct {
	// The salt is passed through the Yubikey's HMAC-SHA1 to produce a value
	// include in computing the master key.
	Salt []byte

	// Slot is which Yubikey slot to use in HMAC-SHA1 mode. If set to 0 or
	// -1 a Yubikey will not be included in the master key generation. If set
	// to 0 then the slit number will be updated from the
	Slot YubiKeySlot
}

type YubiKeySlot int