nacl

Documentation

Index

• Constants
• func DecryptNamespacedData(ctx context.Context, c kclient.Reader, data []byte, namespace string) ([]byte, error)
• func DecryptNamespacedDataMap(ctx context.Context, c kclient.Reader, data map[string][]byte, ...) (map[string][]byte, error)
• func ErrNamespaceKeyNotFound(err error) bool
• func GetPublicKey(ctx context.Context, c kclient.Reader, namespace string) (string, error)
• func IsAcornEncryptedData(data []byte) bool
• func KeyBytesToB64String(key *[32]byte) string
• func NewErrKeyNotFound(ns bool) error
• type EncryptedData
  • func Encrypt(msg, recipientPublicKey string) (*EncryptedData, error)
  • func (f *EncryptedData) Marshal() (string, error)
• type ErrDecryptionKeyNotAvailable
  • func (d *ErrDecryptionKeyNotAvailable) Error() string
• type ErrKeyNotFound
  • func (k *ErrKeyNotFound) Error() string
• type ErrUnableToDecrypt
  • func (utd *ErrUnableToDecrypt) Error() string
• type MultiEncryptedData
  • func MultipleKeyEncrypt(msg string, keys []string) (MultiEncryptedData, error)
  • func (f MultiEncryptedData) Marshal() (string, error)
• type NaclKey
  • func GetOrCreatePrimaryNaclKey(ctx context.Context, c kclient.Client, namespace string) (*NaclKey, error)
  • func GetPrimaryNaclKey(ctx context.Context, c kclient.Reader, publicKey, namespace string) (*NaclKey, error)
  • func (k *NaclKey) Decrypt(encData []byte) ([]byte, error)
• type NaclKeys
  • func GetAllNaclKeys(ctx context.Context, c kclient.Reader, namespace string) (NaclKeys, error)

Constants

const (
	EncPrefix = "ACORNENC:"
	EncSuffix = "::"
)

Functions

func DecryptNamespacedData

func DecryptNamespacedData(ctx context.Context, c kclient.Reader, data []byte, namespace string) ([]byte, error)

func DecryptNamespacedDataMap

func DecryptNamespacedDataMap(ctx context.Context, c kclient.Reader, data map[string][]byte, ownerNamespace string) (map[string][]byte, error)

func ErrNamespaceKeyNotFound

func ErrNamespaceKeyNotFound(err error) bool

func GetPublicKey

func GetPublicKey(ctx context.Context, c kclient.Reader, namespace string) (string, error)

func IsAcornEncryptedData

func IsAcornEncryptedData(data []byte) bool

func KeyBytesToB64String

func KeyBytesToB64String(key *[32]byte) string

func NewErrKeyNotFound

func NewErrKeyNotFound(ns bool) error

Types

type EncryptedData

type EncryptedData struct {
	PublicKey        string `json:"publicKey"`
	EncryptedContent string `json:"encryptedContent"`
}

func Encrypt

func Encrypt(msg, recipientPublicKey string) (*EncryptedData, error)

func (*EncryptedData) Marshal

func (f *EncryptedData) Marshal() (string, error)

type ErrDecryptionKeyNotAvailable

type ErrDecryptionKeyNotAvailable struct{}

func (*ErrDecryptionKeyNotAvailable) Error

func (d *ErrDecryptionKeyNotAvailable) Error() string

type ErrKeyNotFound

type ErrKeyNotFound struct {
	NamespaceKeyNotFound bool
}

func (*ErrKeyNotFound) Error

func (k *ErrKeyNotFound) Error() string

type ErrUnableToDecrypt

type ErrUnableToDecrypt struct {
	Errs []error
}

func (*ErrUnableToDecrypt) Error

func (utd *ErrUnableToDecrypt) Error() string

type MultiEncryptedData

type MultiEncryptedData map[string]string

func MultipleKeyEncrypt

func MultipleKeyEncrypt(msg string, keys []string) (MultiEncryptedData, error)

func (MultiEncryptedData) Marshal

func (f MultiEncryptedData) Marshal() (string, error)

type NaclKey

type NaclKey struct {
	AcornNamespace string
	Primary        *bool
	PublicKey      *[32]byte
	// contains filtered or unexported fields
}

func GetOrCreatePrimaryNaclKey

func GetOrCreatePrimaryNaclKey(ctx context.Context, c kclient.Client, namespace string) (*NaclKey, error)

func GetPrimaryNaclKey

func GetPrimaryNaclKey(ctx context.Context, c kclient.Reader, publicKey, namespace string) (*NaclKey, error)

func (*NaclKey) Decrypt

func (k *NaclKey) Decrypt(encData []byte) ([]byte, error)

type NaclKeys

type NaclKeys map[string]*NaclKey

func GetAllNaclKeys

func GetAllNaclKeys(ctx context.Context, c kclient.Reader, namespace string) (NaclKeys, error)