crypt

Documentation

Index

• func DecryptFromStdin(privateKeys []string, paasName string) error
• func EncryptFile(publicKey string, paasName string, path string) error
• func EncryptFromStdin(publicKey string, paasName string) error
• func GenerateKeyPair(privateKey string, publicKey string) error
• type Crypt
  • func NewCryptFromFiles(privateKeyPaths []string, publicKeyPath string, encryptionContext string) (*Crypt, error)
  • func NewCryptFromKeys(privateKeys CryptPrivateKeys, publicKeyPath string, encryptionContext string) (*Crypt, error)
  • func NewGeneratedCrypt(privateKeyPath string, publicKeyPath string) (*Crypt, error)
  • func (c Crypt) Decrypt(b64 string) ([]byte, error)
  • func (c *Crypt) DecryptRsa(data []byte) (decryptedBytes []byte, err error)
  • func (c *Crypt) Encrypt(secret []byte) (encrypted string, err error)
  • func (c *Crypt) EncryptRsa(secret []byte) (encryptedBytes []byte, err error)
• type CryptPrivateKey
  • func NewPrivateKeyFromFile(privateKeyPath string) (*CryptPrivateKey, error)
  • func NewPrivateKeyFromPem(privateKeyPath string, privateKeyPem []byte) (*CryptPrivateKey, error)
  • func (pk *CryptPrivateKey) DecryptRsa(data []byte, encryptionContext []byte) (decryptedBytes []byte, err error)
• type CryptPrivateKeys
  • func NewPrivateKeysFromFiles(privateKeyPaths []string) (CryptPrivateKeys, error)
  • func NewPrivateKeysFromSecretData(privateKeyData map[string][]byte) (CryptPrivateKeys, error)
  • func (pks CryptPrivateKeys) AsSecretData() (data map[string][]byte)
  • func (pks CryptPrivateKeys) Compare(other CryptPrivateKeys) (same bool)

Functions

func DecryptFromStdin

func DecryptFromStdin(privateKeys []string, paasName string) error

func EncryptFile

func EncryptFile(publicKey string, paasName string, path string) error

func EncryptFromStdin

func EncryptFromStdin(publicKey string, paasName string) error

func GenerateKeyPair

func GenerateKeyPair(privateKey string, publicKey string) error

Types

type Crypt

type Crypt struct {
	// contains filtered or unexported fields
}

func NewCryptFromFiles

func NewCryptFromFiles(privateKeyPaths []string, publicKeyPath string, encryptionContext string) (*Crypt, error)

NewCryptFromFiles returns a Crypt based on the provided privateKeyPaths and publicKeyPath using the encryptionContext

func NewCryptFromKeys

func NewCryptFromKeys(privateKeys CryptPrivateKeys, publicKeyPath string, encryptionContext string) (*Crypt, error)

NewCryptFromKeys returns a Crypt based on the provided privateKeys and publicKey using the encryptionContext

func NewGeneratedCrypt

func NewGeneratedCrypt(privateKeyPath string, publicKeyPath string) (*Crypt, error)

func (Crypt) Decrypt

func (c Crypt) Decrypt(b64 string) ([]byte, error)

func (*Crypt) DecryptRsa

func (c *Crypt) DecryptRsa(data []byte) (decryptedBytes []byte, err error)

func (*Crypt) Encrypt

func (c *Crypt) Encrypt(secret []byte) (encrypted string, err error)

func (*Crypt) EncryptRsa

func (c *Crypt) EncryptRsa(secret []byte) (encryptedBytes []byte, err error)

type CryptPrivateKey

type CryptPrivateKey struct {
	// contains filtered or unexported fields
}

A CryptPrivateKey is used for decryption of encrypted secrets

func NewPrivateKeyFromFile

func NewPrivateKeyFromFile(privateKeyPath string) (*CryptPrivateKey, error)

NewPrivateKeyFromFile returns a CryptPrivateKey from a privateKeyFilePath

func NewPrivateKeyFromPem

func NewPrivateKeyFromPem(privateKeyPath string, privateKeyPem []byte) (*CryptPrivateKey, error)

NewPrivateKeyFromPem returns a CryptPrivateKey from a privateKeyFilePath

func (*CryptPrivateKey) DecryptRsa

func (pk *CryptPrivateKey) DecryptRsa(data []byte, encryptionContext []byte) (decryptedBytes []byte, err error)

type CryptPrivateKeys

type CryptPrivateKeys []*CryptPrivateKey

We can use multiple private keys (for rotation) and store them in a list of PrivateKey's

func NewPrivateKeysFromFiles

func NewPrivateKeysFromFiles(privateKeyPaths []string) (CryptPrivateKeys, error)

NewPrivateKeysFromFiles returns a Crypt based on the provided privateKeyPaths

func NewPrivateKeysFromSecretData

func NewPrivateKeysFromSecretData(privateKeyData map[string][]byte) (CryptPrivateKeys, error)

NewPrivateKeysFromSecretData returns a Crypt based on the provided privateKeyPaths

func (CryptPrivateKeys) AsSecretData

func (pks CryptPrivateKeys) AsSecretData() (data map[string][]byte)

func (CryptPrivateKeys) Compare

func (pks CryptPrivateKeys) Compare(other CryptPrivateKeys) (same bool)

Compare checks 2 sets of private keys