encryption

Sep 13, 2024

Changes in this version

type EncryptedColumn

+ func (e *EncryptedColumn[SK]) GoString() string

Aug 20, 2024

Changes in this version

type AsyncSubKey

+ func (AsyncSubKey) SubKey() string

+ type Builder struct

+ func NewBuilder() Builder

+ func (b Builder) Build(ctx context.Context, provider KeyStoreProvider) (DataEncryptor, error)

+ func (b Builder) WithKMSURI(kmsURI optional.Option[string]) Builder

+ type Encrypted interface

+ Bytes func() []byte

+ Set func(data []byte)

+ SubKey func() string

+ type EncryptedAsyncColumn = EncryptedColumn[AsyncSubKey]

+ type EncryptedColumn []byte

+ func (e *EncryptedColumn[SK]) Bytes() []byte

+ func (e *EncryptedColumn[SK]) Scan(src interface{}) error

+ func (e *EncryptedColumn[SK]) Set(b []byte)

+ func (e *EncryptedColumn[SK]) SubKey() string

+ func (e *EncryptedColumn[SK]) Value() (driver.Value, error)

+ type EncryptedTimelineColumn = EncryptedColumn[TimelineSubKey]

+ type KeyStoreProvider interface

+ EnsureKey func(ctx context.Context, generateKey func() ([]byte, error)) ([]byte, error)

type NoOpEncryptor

+ func (n NoOpEncryptor) Decrypt(encrypted Encrypted) ([]byte, error)

+ func (n NoOpEncryptor) Encrypt(cleartext []byte, dest Encrypted) error

+ type OptionalEncryptedAsyncColumn = optional.Option[EncryptedAsyncColumn]

+ type OptionalEncryptedTimelineColumn = optional.Option[EncryptedTimelineColumn]

type SubKey

+ SubKey func() string

type TimelineSubKey

+ func (TimelineSubKey) SubKey() string

Aug 14, 2024

Changes in this version

type SubKey

+ const TimelineSubKey

Aug 14, 2024

Changes in this version

+ type DataEncryptor interface

+ Decrypt func(subKey SubKey, encrypted []byte) ([]byte, error)

+ Encrypt func(subKey SubKey, cleartext []byte) ([]byte, error)

type NoOpEncryptorNext

+ func NewNoOpEncryptor() NoOpEncryptorNext

Aug 11, 2024

Changes in this version

type Encryptable

+ func NewDeprecatedEncryptor(keySet keyset.Handle) (Encryptable, error)

+ type EncryptorNext interface

+ Decrypt func(subKey SubKey, encrypted []byte) ([]byte, error)

+ Encrypt func(subKey SubKey, cleartext []byte) ([]byte, error)

+ type KMSEncryptor struct

+ func NewKMSEncryptorGenerateKey(uri string, v1client *awsv1kms.KMS) (*KMSEncryptor, error)

+ func NewKMSEncryptorWithKMS(uri string, v1client *awsv1kms.KMS, encryptedKeyset []byte) (*KMSEncryptor, error)

+ func (k *KMSEncryptor) Decrypt(subKey SubKey, encrypted []byte) ([]byte, error)

+ func (k *KMSEncryptor) Encrypt(subKey SubKey, cleartext []byte) ([]byte, error)

+ func (k *KMSEncryptor) GetEncryptedKeyset() []byte

+ type NoOpEncryptorNext struct

+ func (n NoOpEncryptorNext) Decrypt(_ SubKey, encrypted []byte) ([]byte, error)

+ func (n NoOpEncryptorNext) Encrypt(_ SubKey, cleartext []byte) ([]byte, error)

+ type PlaintextEncryptor struct

+ func NewPlaintextEncryptor(key string) (*PlaintextEncryptor, error)

+ func (p PlaintextEncryptor) Decrypt(subKey SubKey, encrypted []byte) ([]byte, error)

+ func (p PlaintextEncryptor) Encrypt(subKey SubKey, cleartext []byte) ([]byte, error)

+ type SubKey string

+ const AsyncSubKey

+ const LogsSubKey

Aug 2, 2024

Changes in this version

+ type Encryptable interface

+ DecryptJSON func(input json.RawMessage, output any) error

+ EncryptJSON func(input any) (json.RawMessage, error)

+ func NewClearTextEncryptor(key string) (Encryptable, error)

+ func NewEncryptor(keySet keyset.Handle) (Encryptable, error)

+ func NewForKeyOrURI(keyOrURI string) (Encryptable, error)

+ type EncryptedPayload struct

+ Encrypted []byte

+ type Encryptor struct

+ func (e Encryptor) DecryptJSON(input json.RawMessage, output any) error

+ func (e Encryptor) EncryptJSON(input any) (json.RawMessage, error)

+ type NoOpEncryptor struct

+ func (n NoOpEncryptor) DecryptJSON(input json.RawMessage, output any) error

+ func (n NoOpEncryptor) EncryptJSON(input any) (json.RawMessage, error)