encmysql

README

README

这个项目是阿里云全密态MySQL数据库的Go语言驱动。参见:

全密态PolarMySQL

全密态RDS MySQL

安装

go get github.com/aliyun/alibabacloud-encdb-mysql-go-client@latest

使用

本驱动实现了GoLang database/sql/driver 系列同用接口，用户只需要配置正确的DSN并将驱动名设置为encmysql，即可通过统一接口连接全密态数据库。

mek := ...
encAlgo := ...

db, err := sql.Open("encmysql", "<username>:<password>@tcp(<hostname>:<port>)/<dbname>?MEK=<mek>&ENC_ALGO=<encAlgo>")

其中：mek是一个16位的16进制字符串，用于表示一个256位的密钥。例如：00112233445566778899aabbccddeeff

encAlgo是数据加密使用的算法，有以下选择：

• SM4_128_CBC
• SM4_128_CTR
• SM4_128_GCM
• SM4_128_ECB
• AES_128_CBC
• AES_128_CTR
• AES_128_GCM
• AES_128_ECB

一个demo

请先设置，将测试库中的test表a、b、c列加密。

为了验证您正确设置了加密规则，请用mysql社区客户端执行以下SQL，并确认看到数据加密的结果。

create table test.test (a int, b text, c timestamp);
insert into test.test values (1024, 'foobar', now());
select * from test.test;

预期的结果应该是一串乱码。

接下来，我们尝试用go客户端读取数据。

package main

import (
	"database/sql"
	"fmt"
	"time"

	_ "github.com/aliyun/alibabacloud-encdb-mysql-go-client"
)

func main() {

	db, err := sql.Open("encmysql", "user:password@tcp(host:port)/test?MEK=00112233445566778899aabbccddeeff&ENC_ALGO=SM4_128_CBC&parseTime=true")
	if err != nil {
		panic(err)
	}
	rows, err := db.Query("SELECT * FROM test")
	if err != nil {
		panic(err)
	}
	rows.Next()
	var a int
	var b string
	var c time.Time

	err = rows.Scan(&a, &b, &c)
	if err != nil {
		panic(err)
	}
	fmt.Printf("read data: %d %s %s\n", a, b, c.GoString())
}

预期的结果应该是：

$ go run .
# 日期视具体时间而定
read data: 1024 foobar time.Date(2024, time.May, 10, 9, 44, 11, 0, time.UTC)

Documentation

Index

• func DecodeBinaryField(buf []byte, m_type uint8, is_unsigned bool, parse_time bool, ...) (any, error)
• func DecodeTextField(buf []byte, m_type uint8, is_unsigned bool, parse_time bool, ...) (any, error)
• func RemoveParamFromDSN(dsn string, param string) string
• type EncMySQLDriver
  • func (d *EncMySQLDriver) Open(dsn string) (driver.Conn, error)
  • func (d *EncMySQLDriver) OpenConnector(dsn string) (driver.Connector, error)

Functions

func DecodeBinaryField

func DecodeBinaryField(buf []byte, m_type uint8, is_unsigned bool, parse_time bool, loc *time.Location, decimals uint8) (any, error)

func DecodeTextField

func DecodeTextField(buf []byte, m_type uint8, is_unsigned bool, parse_time bool, loc *time.Location) (any, error)

func RemoveParamFromDSN

func RemoveParamFromDSN(dsn string, param string) string

Types

type EncMySQLDriver

type EncMySQLDriver struct {
	// contains filtered or unexported fields
}

func (*EncMySQLDriver) Open

func (d *EncMySQLDriver) Open(dsn string) (driver.Conn, error)

func (*EncMySQLDriver) OpenConnector

func (d *EncMySQLDriver) OpenConnector(dsn string) (driver.Connector, error)