internal

Documentation

Overview

Package internal implements the CloudKMS interface using go-kms-wrapping.

Adding support for a new KMS that is supported by go-kms-wrapping, simply requires implementing a New function that initializes a KMSClient.

Index

• type KMSClient
  • func (c *KMSClient) GetDEK(ctx context.Context, keyID string, dekSize int) ([]byte, error)

Types

type KMSClient

type KMSClient struct {
	Storage kmsInterface.Storage
	Wrapper kmsWrapper
}

KMSClient implements the CloudKMS interface using go-kms-wrapping.

func (*KMSClient) GetDEK

func (c *KMSClient) GetDEK(ctx context.Context, keyID string, dekSize int) ([]byte, error)

GetDEK fetches an encrypted Data Encryption Key from storage. If the key exists, it is decrypted and returned. If no such key exists, a new one is generated, encrypted and saved to storage.