seedengine

Documentation

Overview

Package seedengine provides deterministic key derivation of ECDSA and symmetric keys from a secret seed.

Index

• type SeedEngine
  • func New(secretSeed []byte, salt []byte) (*SeedEngine, error)
  • func (s *SeedEngine) DerivePodSecret(policyHash [hashSize]byte) ([]byte, error)
  • func (s *SeedEngine) GenerateMeshCAKey() (*ecdsa.PrivateKey, error)
  • func (s *SeedEngine) RootCAKey() *ecdsa.PrivateKey
  • func (s *SeedEngine) TransactionSigningKey() *ecdsa.PrivateKey

Types

type SeedEngine

type SeedEngine struct {
	// contains filtered or unexported fields
}

SeedEngine provides deterministic key derivation of ECDSA and symmetric keys from a secret seed.

func New

func New(secretSeed []byte, salt []byte) (*SeedEngine, error)

New creates a new SeedEngine from a secret seed and a salt.

func (*SeedEngine) DerivePodSecret

func (s *SeedEngine) DerivePodSecret(policyHash [hashSize]byte) ([]byte, error)

DerivePodSecret derives a secret for a pod from the policy hash and the secret seed.

func (*SeedEngine) GenerateMeshCAKey

func (s *SeedEngine) GenerateMeshCAKey() (*ecdsa.PrivateKey, error)

GenerateMeshCAKey generates a new random key for the mesh authority.

func (*SeedEngine) RootCAKey

func (s *SeedEngine) RootCAKey() *ecdsa.PrivateKey

RootCAKey returns the root CA key which is derived from the secret seed.

func (*SeedEngine) TransactionSigningKey

func (s *SeedEngine) TransactionSigningKey() *ecdsa.PrivateKey

TransactionSigningKey returns the transaction signing key which is derived from the secret seed.