sec

Documentation

Overview

Decoder for PKCS#5 encrypted PKCS#8 private keys.

Index

• Variables
• func EncTypeString(typ EncType) string
• func EncryptAES(plain []byte, secret []byte, nonce []byte) ([]byte, error)
• func RawKeyHash(pubKeyBytes []byte) []byte
• func SigTypeString(typ SigType) string
• func VerifySigs(key PubSignKey, sigs []Sig, hash []byte) (int, error)
• type EncType
  • func EncStringType(s string) (EncType, error)
• type PrivEncKey
  • func ParsePrivEncKey(keyBytes []byte) (PrivEncKey, error)
  • func ReadPrivEncKey(filename string) (PrivEncKey, error)
  • func ReadPrivEncKeys(filenames []string) ([]PrivEncKey, error)
  • func (k *PrivEncKey) Decrypt(ciph []byte) ([]byte, error)
  • func (key *PrivEncKey) PubEncKey() PubEncKey
• type PrivSignKey
  • func ParsePrivSignKey(keyBytes []byte) (PrivSignKey, error)
  • func ReadPrivSignKey(filename string) (PrivSignKey, error)
  • func ReadPrivSignKeys(filenames []string) ([]PrivSignKey, error)
  • func (key *PrivSignKey) AssertValid()
  • func (key *PrivSignKey) PubBytes() ([]byte, error)
  • func (key *PrivSignKey) PubKey() PubSignKey
  • func (key *PrivSignKey) SigLen() uint16
• type PubEncKey
  • func ParsePubEncKey(keyBytes []byte) (PubEncKey, error)
  • func ReadPubEncKey(filename string) (PubEncKey, error)
  • func ReadPubEncKeys(filenames []string) ([]PubEncKey, error)
  • func (key *PubEncKey) AssertValid()
  • func (key *PubEncKey) EncType() (EncType, error)
  • func (k *PubEncKey) Encrypt(plain []byte) ([]byte, error)
• type PubSignKey
  • func ParsePubSignKey(keyBytes []byte) (PubSignKey, error)
  • func ReadPubSignKey(filename string) (PubSignKey, error)
  • func ReadPubSignKeys(filenames []string) ([]PubSignKey, error)
  • func (key *PubSignKey) AssertValid()
  • func (key *PubSignKey) Bytes() ([]byte, error)
  • func (key *PubSignKey) Hash() ([]byte, error)
  • func (key *PubSignKey) SigType() (SigType, error)
• type Sig
• type SigType
  • func SigStringType(s string) (SigType, error)

Variables

var KeyPassword = []byte{}

For testing, a key can be set here. If this is empty, the key will be queried via prompt.

Functions

func EncTypeString

func EncTypeString(typ EncType) string

func EncryptAES

func EncryptAES(plain []byte, secret []byte, nonce []byte) ([]byte, error)

func RawKeyHash

func RawKeyHash(pubKeyBytes []byte) []byte

func SigTypeString

func SigTypeString(typ SigType) string

func VerifySigs

func VerifySigs(key PubSignKey, sigs []Sig, hash []byte) (int, error)

Types

type EncType

type EncType int

const (
	ENC_TYPE_AES_128 EncType = iota
	ENC_TYPE_AES_256
	ENC_TYPE_RSA_2048
)

func EncStringType

func EncStringType(s string) (EncType, error)

type PrivEncKey

type PrivEncKey struct {
	Rsa *rsa.PrivateKey
}

XXX: Only RSA supported for now.

func ParsePrivEncKey

func ParsePrivEncKey(keyBytes []byte) (PrivEncKey, error)

func ReadPrivEncKey

func ReadPrivEncKey(filename string) (PrivEncKey, error)

ReadPubEncKey reads a private encryption key from a file.

func ReadPrivEncKeys

func ReadPrivEncKeys(filenames []string) ([]PrivEncKey, error)

ReadPubSignKeys reads a set of private encryption keys from several files.

func (*PrivEncKey) Decrypt

func (k *PrivEncKey) Decrypt(ciph []byte) ([]byte, error)

func (*PrivEncKey) PubEncKey

func (key *PrivEncKey) PubEncKey() PubEncKey

type PrivSignKey

type PrivSignKey struct {
	// Only one of these members is non-nil.
	Rsa     *rsa.PrivateKey
	Ec      *ecdsa.PrivateKey
	Ed25519 *ed25519.PrivateKey
}

func ParsePrivSignKey

func ParsePrivSignKey(keyBytes []byte) (PrivSignKey, error)

func ReadPrivSignKey

func ReadPrivSignKey(filename string) (PrivSignKey, error)

ReadPrivSignKey reads a private signing key from a file.

func ReadPrivSignKeys

func ReadPrivSignKeys(filenames []string) ([]PrivSignKey, error)

ReadPubSignKeys reads a set of private signing keys from several files.

func (*PrivSignKey) AssertValid

func (key *PrivSignKey) AssertValid()

func (*PrivSignKey) PubBytes

func (key *PrivSignKey) PubBytes() ([]byte, error)

func (*PrivSignKey) PubKey

func (key *PrivSignKey) PubKey() PubSignKey

func (*PrivSignKey) SigLen

func (key *PrivSignKey) SigLen() uint16

type PubEncKey

type PubEncKey struct {
	Rsa *rsa.PublicKey
	Ec  *ecdsa.PublicKey
	Aes cipher.Block
}

func ParsePubEncKey

func ParsePubEncKey(keyBytes []byte) (PubEncKey, error)

func ReadPubEncKey

func ReadPubEncKey(filename string) (PubEncKey, error)

ReadPubEncKey reads a public encryption key from a file.

func ReadPubEncKeys

func ReadPubEncKeys(filenames []string) ([]PubEncKey, error)

ReadPubSignKeys reads a set of public encryption keys from several files.

func (*PubEncKey) AssertValid

func (key *PubEncKey) AssertValid()

func (*PubEncKey) EncType

func (key *PubEncKey) EncType() (EncType, error)

func (*PubEncKey) Encrypt

func (k *PubEncKey) Encrypt(plain []byte) ([]byte, error)

type PubSignKey

type PubSignKey struct {
	Rsa     *rsa.PublicKey
	Ec      *ecdsa.PublicKey
	Ed25519 ed25519.PublicKey
}

func ParsePubSignKey

func ParsePubSignKey(keyBytes []byte) (PubSignKey, error)

func ReadPubSignKey

func ReadPubSignKey(filename string) (PubSignKey, error)

ReadPubSignKey reads a public signing key from a file.

func ReadPubSignKeys

func ReadPubSignKeys(filenames []string) ([]PubSignKey, error)

ReadPubSignKeys reads a set of public signing keys from several files.

func (*PubSignKey) AssertValid

func (key *PubSignKey) AssertValid()

func (*PubSignKey) Bytes

func (key *PubSignKey) Bytes() ([]byte, error)

func (*PubSignKey) Hash

func (key *PubSignKey) Hash() ([]byte, error)

func (*PubSignKey) SigType

func (key *PubSignKey) SigType() (SigType, error)

type Sig

type Sig struct {
	Type    SigType
	KeyHash []byte
	Data    []byte
}

type SigType

type SigType int

const (
	SIG_TYPE_RSA2048 SigType = iota
	SIG_TYPE_RSA3072
	SIG_TYPE_ECDSA224
	SIG_TYPE_ECDSA256
	SIG_TYPE_ED25519
)

func SigStringType

func SigStringType(s string) (SigType, error)