soft

README

软加密方案

1、该实现实用分片的信息做参数，从 seed 派生出唯一的对称加密密钥，实用该密钥对分片进行加密

2、派生算法为 hkdf, 使用 sliceID 和 nodeID 派生秘钥

3、每个分片定位到每个目标节点上派生的加密密钥都是不同的

4、当前方案将来可以移植到可信区，作为硬加解密实现方案

Documentation

Index

• type SoftEncryptor
  • func New(conf *config.SoftEncryptorConf) (*SoftEncryptor, error)
  • func (se *SoftEncryptor) Encrypt(r io.Reader, opt *encryptor.EncryptOptions) (encryptor.EncryptedSlice, error)
  • func (se *SoftEncryptor) GetKey(fileID, sliceID string, nodeID []byte) aes.AESKey
  • func (se *SoftEncryptor) Recover(r io.Reader, opt *encryptor.RecoverOptions) ([]byte, error)

Types

type SoftEncryptor

type SoftEncryptor struct {
	// contains filtered or unexported fields
}

SoftEncryptor encrypts data or decrypts encoded data

func New

func New(conf *config.SoftEncryptorConf) (*SoftEncryptor, error)

New creat SoftEncryptor by "password" configuration

func (*SoftEncryptor) Encrypt

func (se *SoftEncryptor) Encrypt(r io.Reader, opt *encryptor.EncryptOptions) (
	encryptor.EncryptedSlice, error)

Encrypt derive key using nodeID and slice ID, then encrypt content using AES-GCM

func (*SoftEncryptor) GetKey

func (se *SoftEncryptor) GetKey(fileID, sliceID string, nodeID []byte) aes.AESKey

GetKey derive key using fileID, nodeID and slice ID

func (*SoftEncryptor) Recover

func (se *SoftEncryptor) Recover(r io.Reader, opt *encryptor.RecoverOptions) (
	[]byte, error)

Recover derive key using nodeID and slice ID, then decrypt content using AES-GCM