ecrypto

Documentation

Overview

Package ecrypto provides cryptographic functionalities for Go enclaves

Index

• func Decrypt(ciphertext []byte, key []byte) ([]byte, error)
• func Encrypt(plaintext []byte, key []byte) ([]byte, error)
• func SealWithProductKey(plaintext []byte) ([]byte, error)
• func SealWithUniqueKey(plaintext []byte) ([]byte, error)
• func Unseal(ciphertext []byte) ([]byte, error)

Functions

func Decrypt

func Decrypt(ciphertext []byte, key []byte) ([]byte, error)

Decrypt decrypts a ciphertext produced by Encrypt.

func Encrypt

func Encrypt(plaintext []byte, key []byte) ([]byte, error)

Encrypt encrypts a given plaintext with a supplied key using AES-GCM.

func SealWithProductKey

func SealWithProductKey(plaintext []byte) ([]byte, error)

SealWithProductKey encrypts a given plaintext with a key derived from the signer and product id of the enclave.

func SealWithUniqueKey

func SealWithUniqueKey(plaintext []byte) ([]byte, error)

SealWithUniqueKey encrypts a given plaintext with a key derived from a measurement of the enclave.

func Unseal

func Unseal(ciphertext []byte) ([]byte, error)

Unseal decrypts a ciphertext produced by SealWithUniqueKey or SealWithProductKey.