pkcs8

Documentation

Index

• Variables
• func AddCipher(oid asn1.ObjectIdentifier, cipher func() Cipher)
• func AddKDF(oid asn1.ObjectIdentifier, params func() KDFParameters)
• func DecryptPEMBlock(block *pem.Block, password []byte) ([]byte, error)
• func DecryptPKCS8PrivateKey(data, password []byte) ([]byte, error)
• func EncryptPKCS8PrivateKey(rand io.Reader, blockType string, data []byte, password []byte, opts ...Opts) (*pem.Block, error)
• type Cipher
  • func GetCipherFromName(name string) Cipher
• type CipherCBC
  • func (this CipherCBC) Decrypt(key, params, ciphertext []byte) ([]byte, error)
  • func (this CipherCBC) Encrypt(key, plaintext []byte) ([]byte, []byte, error)
  • func (this CipherCBC) KeySize() int
  • func (this CipherCBC) OID() asn1.ObjectIdentifier
• type CipherCCM
  • func (this CipherCCM) Decrypt(key, param, ciphertext []byte) ([]byte, error)
  • func (this CipherCCM) Encrypt(key, plaintext []byte) ([]byte, []byte, error)
  • func (this CipherCCM) KeySize() int
  • func (this CipherCCM) OID() asn1.ObjectIdentifier
• type CipherCCMb
  • func (this CipherCCMb) Decrypt(key, param, ciphertext []byte) ([]byte, error)
  • func (this CipherCCMb) Encrypt(key, plaintext []byte) ([]byte, []byte, error)
  • func (this CipherCCMb) KeySize() int
  • func (this CipherCCMb) OID() asn1.ObjectIdentifier
• type CipherCFB
  • func (this CipherCFB) Decrypt(key, params, ciphertext []byte) ([]byte, error)
  • func (this CipherCFB) Encrypt(key, plaintext []byte) ([]byte, []byte, error)
  • func (this CipherCFB) KeySize() int
  • func (this CipherCFB) OID() asn1.ObjectIdentifier
• type CipherCFB8
  • func (this CipherCFB8) Decrypt(key, params, ciphertext []byte) ([]byte, error)
  • func (this CipherCFB8) Encrypt(key, plaintext []byte) ([]byte, []byte, error)
  • func (this CipherCFB8) KeySize() int
  • func (this CipherCFB8) OID() asn1.ObjectIdentifier
• type CipherECB
  • func (this CipherECB) Decrypt(key, params, ciphertext []byte) ([]byte, error)
  • func (this CipherECB) Encrypt(key, plaintext []byte) ([]byte, []byte, error)
  • func (this CipherECB) KeySize() int
  • func (this CipherECB) OID() asn1.ObjectIdentifier
• type CipherGCM
  • func (this CipherGCM) Decrypt(key, param, ciphertext []byte) ([]byte, error)
  • func (this CipherGCM) Encrypt(key, plaintext []byte) ([]byte, []byte, error)
  • func (this CipherGCM) KeySize() int
  • func (this CipherGCM) OID() asn1.ObjectIdentifier
• type CipherGCMb
  • func (this CipherGCMb) Decrypt(key, param, ciphertext []byte) ([]byte, error)
  • func (this CipherGCMb) Encrypt(key, plaintext []byte) ([]byte, []byte, error)
  • func (this CipherGCMb) KeySize() int
  • func (this CipherGCMb) OID() asn1.ObjectIdentifier
• type CipherOFB
  • func (this CipherOFB) Decrypt(key, params, ciphertext []byte) ([]byte, error)
  • func (this CipherOFB) Encrypt(key, plaintext []byte) ([]byte, []byte, error)
  • func (this CipherOFB) KeySize() int
  • func (this CipherOFB) OID() asn1.ObjectIdentifier
• type Hash
  • func GetHashFromName(name string) Hash
• type KDFOpts
• type KDFParameters
• type Opts
  • func ParseOpts(opts ...any) (Opts, error)
• type PBKDF2Opts
  • func (this PBKDF2Opts) DeriveKey(password, salt []byte, size int) (key []byte, params KDFParameters, err error)
  • func (this PBKDF2Opts) GetSaltSize() int
  • func (this PBKDF2Opts) OID() asn1.ObjectIdentifier
• type PBKDF2OptsWithKeyLength
  • func (this PBKDF2OptsWithKeyLength) DeriveKey(password, salt []byte, size int) ([]byte, KDFParameters, error)
  • func (this PBKDF2OptsWithKeyLength) GetSaltSize() int
  • func (this PBKDF2OptsWithKeyLength) OID() asn1.ObjectIdentifier
• type ScryptOpts
  • func (this ScryptOpts) DeriveKey(password, salt []byte, size int) (key []byte, params KDFParameters, err error)
  • func (this ScryptOpts) GetSaltSize() int
  • func (this ScryptOpts) OID() asn1.ObjectIdentifier

Variables

var AES128CBC = CipherCBC{
	// contains filtered or unexported fields
}

AES128CBC is the 128-bit key AES cipher in CBC mode.

var AES128CCM = CipherCCM{
	// contains filtered or unexported fields
}

AES128CCM is the 128-bit key AES cipher in CCM mode.

var AES128CCMb = CipherCCMb{
	// contains filtered or unexported fields
}

AES128CCMb is the 128-bit key AES cipher in CCM mode.

var AES128CFB = CipherCFB{
	// contains filtered or unexported fields
}

AES128CFB is the 128-bit key AES cipher in CFB mode.

var AES128ECB = CipherECB{
	// contains filtered or unexported fields
}

AES128ECB is the 128-bit key AES cipher in ECB mode.

var AES128GCM = CipherGCM{
	// contains filtered or unexported fields
}

AES128GCM is the 128-bit key AES cipher in GCM mode.

var AES128GCMb = CipherGCMb{
	// contains filtered or unexported fields
}

AES128GCMb is the 128-bit key AES cipher in GCM mode.

var AES128OFB = CipherOFB{
	// contains filtered or unexported fields
}

AES128OFB is the 128-bit key AES cipher in OFB mode.

var AES192CBC = CipherCBC{
	// contains filtered or unexported fields
}

AES192CBC is the 192-bit key AES cipher in CBC mode.

var AES192CCM = CipherCCM{
	// contains filtered or unexported fields
}

AES192CCM is the 192-bit key AES cipher in CCM mode.

var AES192CCMb = CipherCCMb{
	// contains filtered or unexported fields
}

AES192CCMb is the 192-bit key AES cipher in CCM mode.

var AES192CFB = CipherCFB{
	// contains filtered or unexported fields
}

AES192CFB is the 192-bit key AES cipher in CFB mode.

var AES192ECB = CipherECB{
	// contains filtered or unexported fields
}

AES192ECB is the 192-bit key AES cipher in ECB mode.

var AES192GCM = CipherGCM{
	// contains filtered or unexported fields
}

AES192GCM is the 192-bit key AES cipher in GCM mode.

var AES192GCMb = CipherGCMb{
	// contains filtered or unexported fields
}

AES192GCMb is the 192-bit key AES cipher in GCM mode.

var AES192OFB = CipherOFB{
	// contains filtered or unexported fields
}

AES192OFB is the 192-bit key AES cipher in OFB mode.

var AES256CBC = CipherCBC{
	// contains filtered or unexported fields
}

AES256CBC is the 256-bit key AES cipher in CBC mode.

var AES256CCM = CipherCCM{
	// contains filtered or unexported fields
}

AES256CCM is the 256-bit key AES cipher in CCM mode.

var AES256CCMb = CipherCCMb{
	// contains filtered or unexported fields
}

AES256CCMb is the 256-bit key AES cipher in CCM mode.

var AES256CFB = CipherCFB{
	// contains filtered or unexported fields
}

AES256CFB is the 256-bit key AES cipher in CFB mode.

var AES256ECB = CipherECB{
	// contains filtered or unexported fields
}

AES256ECB is the 256-bit key AES cipher in ECB mode.

var AES256GCM = CipherGCM{
	// contains filtered or unexported fields
}

AES256GCM is the 256-bit key AES cipher in GCM mode.

var AES256GCMb = CipherGCMb{
	// contains filtered or unexported fields
}

AES256GCMb is the 256-bit key AES cipher in GCM mode.

var AES256OFB = CipherOFB{
	// contains filtered or unexported fields
}

AES256OFB is the 256-bit key AES cipher in OFB mode.

var CipherMap = map[string]Cipher{
	"DESCBC":     DESCBC,
	"DESEDE3CBC": DESEDE3CBC,

	"AES128ECB":  AES128ECB,
	"AES128CBC":  AES128CBC,
	"AES128OFB":  AES128OFB,
	"AES128CFB":  AES128CFB,
	"AES128GCM":  AES128GCM,
	"AES128GCMb": AES128GCMb,
	"AES128CCM":  AES128CCM,
	"AES128CCMb": AES128CCMb,

	"AES192ECB":  AES192ECB,
	"AES192CBC":  AES192CBC,
	"AES192OFB":  AES192OFB,
	"AES192CFB":  AES192CFB,
	"AES192GCM":  AES192GCM,
	"AES192GCMb": AES192GCMb,
	"AES192CCM":  AES192CCM,
	"AES192CCMb": AES192CCMb,

	"AES256ECB":  AES256ECB,
	"AES256CBC":  AES256CBC,
	"AES256OFB":  AES256OFB,
	"AES256CFB":  AES256CFB,
	"AES256GCM":  AES256GCM,
	"AES256GCMb": AES256GCMb,
	"AES256CCM":  AES256CCM,
	"AES256CCMb": AES256CCMb,

	"SM4ECB":  SM4ECB,
	"SM4CBC":  SM4CBC,
	"SM4OFB":  SM4OFB,
	"SM4CFB":  SM4CFB,
	"SM4CFB8": SM4CFB8,
	"SM4GCM":  SM4GCM,
	"SM4GCMb": SM4GCMb,
	"SM4CCM":  SM4CCM,
	"SM4CCMb": SM4CCMb,
}

Cipher 列表

var DESCBC = CipherCBC{
	// contains filtered or unexported fields
}

DESCBC is the 56-bit key 3DES cipher in CBC mode.

var DESEDE3CBC = CipherCBC{
	// contains filtered or unexported fields
}

TripleDESCBC is the 168-bit key 3DES cipher in CBC mode.

var (
	// 默认 hash
	DefaultHash = SHA1
)

var DefaultOpts = Opts{
	Cipher: AES256CBC,
	KDFOpts: PBKDF2Opts{
		SaltSize:       16,
		IterationCount: 10000,
	},
}

默认配置

var HashMap = map[string]Hash{
	"MD5":        MD5,
	"SHA1":       SHA1,
	"SHA224":     SHA224,
	"SHA256":     SHA256,
	"SHA384":     SHA384,
	"SHA512":     SHA512,
	"SHA512_224": SHA512_224,
	"SHA512_256": SHA512_256,
	"SM3":        SM3,
}

hash 列表

var SM4CBC = CipherCBC{
	// contains filtered or unexported fields
}

SM4CBC is the 128-bit key SM4 cipher in CBC mode.

var SM4CCM = CipherCCM{
	// contains filtered or unexported fields
}

SM4CCM is the 128-bit key SM4 cipher in CCM mode.

var SM4CCMb = CipherCCMb{
	// contains filtered or unexported fields
}

SM4CCMb is the 128-bit key SM4 cipher in CCM mode.

var SM4CFB = CipherCFB{
	// contains filtered or unexported fields
}

SM4CFB is the 128-bit key SM4 cipher in CFB mode.

var SM4CFB8 = CipherCFB8{
	// contains filtered or unexported fields
}

SM4CFB8 is the 128-bit key SM4 cipher in CFB mode.

var SM4ECB = CipherECB{
	// contains filtered or unexported fields
}

SM4ECB is the 128-bit key SM4 cipher in ECB mode.

var SM4GCM = CipherGCM{
	// contains filtered or unexported fields
}

SM4GCM is the 128-bit key SM4 cipher in GCM mode.

var SM4GCMb = CipherGCMb{
	// contains filtered or unexported fields
}

SM4GCMb is the 128-bit key SM4 cipher in GCM mode.

var SM4OFB = CipherOFB{
	// contains filtered or unexported fields
}

SM4OFB is the 128-bit key SM4 cipher in OFB mode.

Functions

func AddCipher

func AddCipher(oid asn1.ObjectIdentifier, cipher func() Cipher)

添加加密

func AddKDF

func AddKDF(oid asn1.ObjectIdentifier, params func() KDFParameters)

添加 kdf 方式

func DecryptPEMBlock

func DecryptPEMBlock(block *pem.Block, password []byte) ([]byte, error)

解出 PEM 块

func DecryptPKCS8PrivateKey

func DecryptPKCS8PrivateKey(data, password []byte) ([]byte, error)

解出 PKCS8 密钥 加密方式: DESCBC | DESEDE3CBC AES128CBC | AES192CBC | AES256CBC AES128GCM | AES192GCM | AES256GCM SM4CBC | SM4GCM

func EncryptPKCS8PrivateKey

func EncryptPKCS8PrivateKey(
	rand io.Reader,
	blockType string,
	data []byte,
	password []byte,
	opts ...Opts,
) (*pem.Block, error)

加密 PKCS8

Types

type Cipher

type Cipher interface {
	// oid
	OID() asn1.ObjectIdentifier

	// 值大小
	KeySize() int

	// 加密, 返回: [加密后数据, 参数, error]
	Encrypt(key, plaintext []byte) ([]byte, []byte, error)

	// 解密
	Decrypt(key, params, ciphertext []byte) ([]byte, error)
}

加密接口

func GetCipherFromName

func GetCipherFromName(name string) Cipher

获取 Cipher 类型

type CipherCBC

type CipherCBC struct {
	// contains filtered or unexported fields
}

cbc 模式加密

func (CipherCBC) Decrypt

func (this CipherCBC) Decrypt(key, params, ciphertext []byte) ([]byte, error)

解密

func (CipherCBC) Encrypt

func (this CipherCBC) Encrypt(key, plaintext []byte) ([]byte, []byte, error)

加密

func (CipherCBC) KeySize

func (this CipherCBC) KeySize() int

值大小

func (CipherCBC) OID

func (this CipherCBC) OID() asn1.ObjectIdentifier

oid

type CipherCCM

type CipherCCM struct {
	// contains filtered or unexported fields
}

ccm 模式加密

func (CipherCCM) Decrypt

func (this CipherCCM) Decrypt(key, param, ciphertext []byte) ([]byte, error)

解密

func (CipherCCM) Encrypt

func (this CipherCCM) Encrypt(key, plaintext []byte) ([]byte, []byte, error)

加密

func (CipherCCM) KeySize

func (this CipherCCM) KeySize() int

值大小

func (CipherCCM) OID

func (this CipherCCM) OID() asn1.ObjectIdentifier

oid

type CipherCCMb

type CipherCCMb struct {
	// contains filtered or unexported fields
}

ccm 模式加密

func (CipherCCMb) Decrypt

func (this CipherCCMb) Decrypt(key, param, ciphertext []byte) ([]byte, error)

解密

func (CipherCCMb) Encrypt

func (this CipherCCMb) Encrypt(key, plaintext []byte) ([]byte, []byte, error)

加密

func (CipherCCMb) KeySize

func (this CipherCCMb) KeySize() int

值大小

func (CipherCCMb) OID

func (this CipherCCMb) OID() asn1.ObjectIdentifier

oid

type CipherCFB

type CipherCFB struct {
	// contains filtered or unexported fields
}

CFB 模式加密

func (CipherCFB) Decrypt

func (this CipherCFB) Decrypt(key, params, ciphertext []byte) ([]byte, error)

解密

func (CipherCFB) Encrypt

func (this CipherCFB) Encrypt(key, plaintext []byte) ([]byte, []byte, error)

加密

func (CipherCFB) KeySize

func (this CipherCFB) KeySize() int

值大小

func (CipherCFB) OID

func (this CipherCFB) OID() asn1.ObjectIdentifier

oid

type CipherCFB8

type CipherCFB8 struct {
	// contains filtered or unexported fields
}

CFB8 模式加密

func (CipherCFB8) Decrypt

func (this CipherCFB8) Decrypt(key, params, ciphertext []byte) ([]byte, error)

解密

func (CipherCFB8) Encrypt

func (this CipherCFB8) Encrypt(key, plaintext []byte) ([]byte, []byte, error)

加密

func (CipherCFB8) KeySize

func (this CipherCFB8) KeySize() int

值大小

func (CipherCFB8) OID

func (this CipherCFB8) OID() asn1.ObjectIdentifier

oid

type CipherECB

type CipherECB struct {
	// contains filtered or unexported fields
}

ecb 模式加密

func (CipherECB) Decrypt

func (this CipherECB) Decrypt(key, params, ciphertext []byte) ([]byte, error)

解密

func (CipherECB) Encrypt

func (this CipherECB) Encrypt(key, plaintext []byte) ([]byte, []byte, error)

加密

func (CipherECB) KeySize

func (this CipherECB) KeySize() int

值大小

func (CipherECB) OID

func (this CipherECB) OID() asn1.ObjectIdentifier

oid

type CipherGCM

type CipherGCM struct {
	// contains filtered or unexported fields
}

gcm 模式加密

func (CipherGCM) Decrypt

func (this CipherGCM) Decrypt(key, param, ciphertext []byte) ([]byte, error)

解密

func (CipherGCM) Encrypt

func (this CipherGCM) Encrypt(key, plaintext []byte) ([]byte, []byte, error)

加密

func (CipherGCM) KeySize

func (this CipherGCM) KeySize() int

值大小

func (CipherGCM) OID

func (this CipherGCM) OID() asn1.ObjectIdentifier

oid

type CipherGCMb

type CipherGCMb struct {
	// contains filtered or unexported fields
}

gcm 模式加密

func (CipherGCMb) Decrypt

func (this CipherGCMb) Decrypt(key, param, ciphertext []byte) ([]byte, error)

解密

func (CipherGCMb) Encrypt

func (this CipherGCMb) Encrypt(key, plaintext []byte) ([]byte, []byte, error)

加密

func (CipherGCMb) KeySize

func (this CipherGCMb) KeySize() int

值大小

func (CipherGCMb) OID

func (this CipherGCMb) OID() asn1.ObjectIdentifier

oid

type CipherOFB

type CipherOFB struct {
	// contains filtered or unexported fields
}

OFB 模式加密

func (CipherOFB) Decrypt

func (this CipherOFB) Decrypt(key, params, ciphertext []byte) ([]byte, error)

解密

func (CipherOFB) Encrypt

func (this CipherOFB) Encrypt(key, plaintext []byte) ([]byte, []byte, error)

加密

func (CipherOFB) KeySize

func (this CipherOFB) KeySize() int

值大小

func (CipherOFB) OID

func (this CipherOFB) OID() asn1.ObjectIdentifier

oid

type Hash

type Hash uint

pkcs8 可使用的 hash 方式

const (
	MD5 Hash = 1 + iota
	SHA1
	SHA224
	SHA256
	SHA384
	SHA512
	SHA512_224
	SHA512_256
	SM3
)

func GetHashFromName

func GetHashFromName(name string) Hash

获取 hash 类型

type KDFOpts

type KDFOpts interface {
	// oid
	OID() asn1.ObjectIdentifier

	// 生成密钥
	DeriveKey(password, salt []byte, size int) (key []byte, params KDFParameters, err error)

	// 随机数大小
	GetSaltSize() int
}

KDF 设置接口

type KDFParameters

type KDFParameters interface {
	// 生成密钥
	DeriveKey(password []byte, size int) (key []byte, err error)
}

数据接口

type Opts

type Opts struct {
	Cipher  Cipher
	KDFOpts KDFOpts
}

配置

func ParseOpts

func ParseOpts(opts ...any) (Opts, error)

解析配置

type PBKDF2Opts

type PBKDF2Opts struct {
	SaltSize       int
	IterationCount int
	HMACHash       Hash
}

PBKDF2 配置

func (PBKDF2Opts) DeriveKey

func (this PBKDF2Opts) DeriveKey(password, salt []byte, size int) (key []byte, params KDFParameters, err error)

func (PBKDF2Opts) GetSaltSize

func (this PBKDF2Opts) GetSaltSize() int

func (PBKDF2Opts) OID

func (this PBKDF2Opts) OID() asn1.ObjectIdentifier

type PBKDF2OptsWithKeyLength

type PBKDF2OptsWithKeyLength struct {
	SaltSize       int
	IterationCount int
	HMACHash       Hash
}

PBKDF2 配置，带KeyLength

func (PBKDF2OptsWithKeyLength) DeriveKey

func (this PBKDF2OptsWithKeyLength) DeriveKey(password, salt []byte, size int) ([]byte, KDFParameters, error)

func (PBKDF2OptsWithKeyLength) GetSaltSize

func (this PBKDF2OptsWithKeyLength) GetSaltSize() int

func (PBKDF2OptsWithKeyLength) OID

func (this PBKDF2OptsWithKeyLength) OID() asn1.ObjectIdentifier

type ScryptOpts

type ScryptOpts struct {
	SaltSize                 int
	CostParameter            int
	BlockSize                int
	ParallelizationParameter int
}

ScryptOpts 设置

func (ScryptOpts) DeriveKey

func (this ScryptOpts) DeriveKey(password, salt []byte, size int) (key []byte, params KDFParameters, err error)

func (ScryptOpts) GetSaltSize

func (this ScryptOpts) GetSaltSize() int

func (ScryptOpts) OID

func (this ScryptOpts) OID() asn1.ObjectIdentifier