seedengine

Documentation

Overview

Package seedengine provides deterministic key derivation of ECDSA and symmetric keys from a secret seed.

Index

• type SeedEngine
  • func New(secretSeed []byte, salt []byte) (*SeedEngine, error)
  • func (s *SeedEngine) DeriveWorkloadSecret(workloadSecretID string) ([]byte, error)
  • func (s *SeedEngine) GenerateMeshCAKey() (*ecdsa.PrivateKey, error)
  • func (s *SeedEngine) RootCAKey() *ecdsa.PrivateKey
  • func (s *SeedEngine) TransactionSigningKey() *ecdsa.PrivateKey

Types

type SeedEngine

type SeedEngine struct {
	// contains filtered or unexported fields
}

SeedEngine provides deterministic key derivation of ECDSA and symmetric keys from a secret seed.

func New

func New(secretSeed []byte, salt []byte) (*SeedEngine, error)

New creates a new SeedEngine from a secret seed and a salt.

func (*SeedEngine) DeriveWorkloadSecret

func (s *SeedEngine) DeriveWorkloadSecret(workloadSecretID string) ([]byte, error)

DeriveWorkloadSecret derives a secret for a workload from the workload name and the secret seed.

func (*SeedEngine) GenerateMeshCAKey

func (s *SeedEngine) GenerateMeshCAKey() (*ecdsa.PrivateKey, error)

GenerateMeshCAKey generates a new random key for the mesh authority.

func (*SeedEngine) RootCAKey

func (s *SeedEngine) RootCAKey() *ecdsa.PrivateKey

RootCAKey returns the root CA key which is derived from the secret seed.

func (*SeedEngine) TransactionSigningKey

func (s *SeedEngine) TransactionSigningKey() *ecdsa.PrivateKey

TransactionSigningKey returns the transaction signing key which is derived from the secret seed.