pbkdf2

Documentation

Index

• func NewMasterLock(passphrase string, h func() hash.Hash, iterations int, salt []byte) (secretlock.Service, error)

Functions

func NewMasterLock

func NewMasterLock(passphrase string, h func() hash.Hash, iterations int, salt []byte) (secretlock.Service, error)

NewMasterLock is responsible for encrypting/decrypting a master key expanded from a passphrase using PBKDF2 using `passphrase`, hash function `h`, `salt`. The size of a master key passed to Encrypt() must match `h()`.Size() since the key will be used for AEAD operations. The salt is optional and can be set to nil. This implementation must not be used directly in Aries framework. It should be passed in as the second argument to local secret lock service constructor: `local.NewService(masterKeyReader io.Reader, secLock secretlock.Service)`.