encdec

Documentation

Index

• func NewCaasKmsClient(uriPrefix string) (registry.KMSClient, error)
• func NewKeyURI() (string, error)
• func RegisterCustomKMS() error
• type CryptoHandler
• type CryptoProvider
• type CustomKMSClient
  • func NewCustomKMSClient() *CustomKMSClient
  • func (c *CustomKMSClient) CreateKey() (string, error)
  • func (c *CustomKMSClient) GetAEAD(keyURI string) (tink.AEAD, error)
  • func (c *CustomKMSClient) Supported(keyURI string) bool
• type TinkConfiguration
• type TinkCryptoHandler
  • func NewTinkCryptoHandler(c *TinkConfiguration) (*TinkCryptoHandler, error)
  • func (h *TinkCryptoHandler) Decrypt(ctx context.Context, cipher, associatedData []byte) ([]byte, error)
  • func (h *TinkCryptoHandler) Encrypt(ctx context.Context, plain, associatedData []byte) ([]byte, error)

Functions

func NewCaasKmsClient

func NewCaasKmsClient(uriPrefix string) (registry.KMSClient, error)

NewCaasKmsClient returns a KMS client which will handle keys with uriPrefix prefix. keyURI must have the following format: 'caas-kms://<base64 encoded aead keyset>'.

func NewKeyURI

func NewKeyURI() (string, error)

NewKeyURI returns a new, random KMS key URI.

func RegisterCustomKMS

func RegisterCustomKMS() error

RegisterCustomKMS registers the custom KMS client with Tink's registry

Types

type CryptoHandler

type CryptoHandler interface {
	// Encrypts the plain data and returns a cipher data
	Encrypt(ctx context.Context, plain, associatedData []byte) ([]byte, error)
	// Decrypts the cipher data and returns plain data
	Decrypt(ctx context.Context, cipher, associatedData []byte) ([]byte, error)
}

Crypto provides methods for encrypting and decrypting data

type CryptoProvider

type CryptoProvider interface {
	CryptoHandler(ctx context.Context) CryptoHandler
}

type CustomKMSClient

type CustomKMSClient struct {
	// contains filtered or unexported fields
}

CustomKMSClient implements the registry.KMSClient interface

func NewCustomKMSClient

func NewCustomKMSClient() *CustomKMSClient

NewCustomKMSClient creates a new instance of CustomKMSClient

func (*CustomKMSClient) CreateKey

func (c *CustomKMSClient) CreateKey() (string, error)

CreateKey generates a new key and returns its URI

func (*CustomKMSClient) GetAEAD

func (c *CustomKMSClient) GetAEAD(keyURI string) (tink.AEAD, error)

GetAEAD returns an AEAD primitive for the given key URI

func (*CustomKMSClient) Supported

func (c *CustomKMSClient) Supported(keyURI string) bool

Supported checks if the given key URI is supported by this KMS client

type TinkConfiguration

type TinkConfiguration struct {
	KekUri     string
	KeySetData string
}

type TinkCryptoHandler

type TinkCryptoHandler struct {
	// contains filtered or unexported fields
}

func NewTinkCryptoHandler

func NewTinkCryptoHandler(c *TinkConfiguration) (*TinkCryptoHandler, error)

func (*TinkCryptoHandler) Decrypt

func (h *TinkCryptoHandler) Decrypt(ctx context.Context, cipher, associatedData []byte) ([]byte, error)

func (*TinkCryptoHandler) Encrypt

func (h *TinkCryptoHandler) Encrypt(ctx context.Context, plain, associatedData []byte) ([]byte, error)