pkcs8

Documentation

Index

• Variables
• func AddCipher(oid asn1.ObjectIdentifier, cipher Cipher)
• func AddKDF(oid asn1.ObjectIdentifier, params KDFParameters)
• func DecryptPEMBlock(block *pem.Block, password []byte) ([]byte, error)
• func DecryptPKCS8PrivateKey(data, password []byte) ([]byte, error)
• func EncryptPKCS8PrivateKey(rand io.Reader, blockType string, data []byte, password []byte, opts ...Opts) (*pem.Block, error)
• type Cipher
• type CipherBlock
  • func (this CipherBlock) BlockSize() int
  • func (this CipherBlock) Decrypt(key, iv, ciphertext []byte) ([]byte, error)
  • func (this CipherBlock) Encrypt(key, iv, plaintext []byte) ([]byte, error)
  • func (this CipherBlock) KeySize() int
  • func (this CipherBlock) OID() asn1.ObjectIdentifier
• type KDFOpts
• type KDFParameters
• type Opts
• type PBKDF2Opts
  • func (this PBKDF2Opts) DeriveKey(password, salt []byte, size int) (key []byte, params KDFParameters, err error)
  • func (this PBKDF2Opts) GetSaltSize() int
  • func (this PBKDF2Opts) OID() asn1.ObjectIdentifier
• type ScryptOpts
  • func (this ScryptOpts) DeriveKey(password, salt []byte, size int) (key []byte, params KDFParameters, err error)
  • func (this ScryptOpts) GetSaltSize() int
  • func (this ScryptOpts) OID() asn1.ObjectIdentifier

Variables

var AES128CBC = CipherBlock{
	// contains filtered or unexported fields
}

var AES192CBC = CipherBlock{
	// contains filtered or unexported fields
}

var AES256CBC = CipherBlock{
	// contains filtered or unexported fields
}

var DESCBC = CipherBlock{
	// contains filtered or unexported fields
}

var DESEDE3CBC = CipherBlock{
	// contains filtered or unexported fields
}

var DefaultOpts = Opts{
	Cipher: AES256CBC,
	KDFOpts: PBKDF2Opts{
		SaltSize:       16,
		IterationCount: 10000,
		HMACHash:       crypto.SHA256,
	},
}

默认配置

Functions

func AddCipher

func AddCipher(oid asn1.ObjectIdentifier, cipher Cipher)

添加加密

func AddKDF

func AddKDF(oid asn1.ObjectIdentifier, params KDFParameters)

添加 kdf 方式

func DecryptPEMBlock

func DecryptPEMBlock(block *pem.Block, password []byte) ([]byte, error)

解出 PEM 块

func DecryptPKCS8PrivateKey

func DecryptPKCS8PrivateKey(data, password []byte) ([]byte, error)

解出 PKCS8 密钥 加密方式: AES-128-CBC | AES-192-CBC | AES-256-CBC | DES | 3DES

func EncryptPKCS8PrivateKey

func EncryptPKCS8PrivateKey(
	rand io.Reader,
	blockType string,
	data []byte,
	password []byte,
	opts ...Opts,
) (*pem.Block, error)

加密 PKCS8

Types

type Cipher

type Cipher interface {
	BlockSize() int
	KeySize() int
	Encrypt(key, iv, plaintext []byte) ([]byte, error)
	Decrypt(key, iv, ciphertext []byte) ([]byte, error)
	OID() asn1.ObjectIdentifier
}

加密接口

type CipherBlock

type CipherBlock struct {
	// contains filtered or unexported fields
}

加密

func (CipherBlock) BlockSize

func (this CipherBlock) BlockSize() int

func (CipherBlock) Decrypt

func (this CipherBlock) Decrypt(key, iv, ciphertext []byte) ([]byte, error)

解密

func (CipherBlock) Encrypt

func (this CipherBlock) Encrypt(key, iv, plaintext []byte) ([]byte, error)

加密

func (CipherBlock) KeySize

func (this CipherBlock) KeySize() int

func (CipherBlock) OID

func (this CipherBlock) OID() asn1.ObjectIdentifier

type KDFOpts

type KDFOpts interface {
	DeriveKey(password, salt []byte, size int) (key []byte, params KDFParameters, err error)
	GetSaltSize() int
	OID() asn1.ObjectIdentifier
}

KDF 设置接口

type KDFParameters

type KDFParameters interface {
	DeriveKey(password []byte, size int) (key []byte, err error)
}

数据接口

type Opts

type Opts struct {
	Cipher  Cipher
	KDFOpts KDFOpts
}

配置

type PBKDF2Opts

type PBKDF2Opts struct {
	SaltSize       int
	IterationCount int
	HMACHash       crypto.Hash
}

PBKDF2 配置

func (PBKDF2Opts) DeriveKey

func (this PBKDF2Opts) DeriveKey(password, salt []byte, size int) (key []byte, params KDFParameters, err error)

func (PBKDF2Opts) GetSaltSize

func (this PBKDF2Opts) GetSaltSize() int

func (PBKDF2Opts) OID

func (this PBKDF2Opts) OID() asn1.ObjectIdentifier

type ScryptOpts

type ScryptOpts struct {
	SaltSize                 int
	CostParameter            int
	BlockSize                int
	ParallelizationParameter int
}

ScryptOpts 设置

func (ScryptOpts) DeriveKey

func (this ScryptOpts) DeriveKey(password, salt []byte, size int) (key []byte, params KDFParameters, err error)

func (ScryptOpts) GetSaltSize

func (this ScryptOpts) GetSaltSize() int

func (ScryptOpts) OID

func (this ScryptOpts) OID() asn1.ObjectIdentifier