crypto

Documentation

Overview

Package crypto provides encryption and decryption functions for the s3proxy. It uses AES-256-GCM to encrypt and decrypt data.

Index

• func Decrypt(ciphertext, encryptedDEK []byte, kek [32]byte) ([]byte, error)
• func Encrypt(plaintext []byte, kek [32]byte) (ciphertext []byte, encryptedDEK []byte, err error)

Functions

func Decrypt

func Decrypt(ciphertext, encryptedDEK []byte, kek [32]byte) ([]byte, error)

Decrypt decrypts a ciphertext using AES-256-GCM. The encrypted DEK is decrypted using the supplied KEK.

func Encrypt

func Encrypt(plaintext []byte, kek [32]byte) (ciphertext []byte, encryptedDEK []byte, err error)

Encrypt generates a random key to encrypt a plaintext using AES-256-GCM. The generated key is encrypted using the supplied key encryption key (KEK). The ciphertext and encrypted data encryption key (DEK) are returned.