dataprotection

Documentation

Index

• func ProtectObject(ctx context.Context, p Provider, v any) (string, error)
• func UnprotectObject(ctx context.Context, p Provider, protected string, v any) error
• type Provider
  • func NewSymmetric(secret []byte) (Provider, error)

Functions

func ProtectObject

func ProtectObject(ctx context.Context, p Provider, v any) (string, error)

ProtectStruct returns encrypted object value in base64url encoded format

func UnprotectObject

func UnprotectObject(ctx context.Context, p Provider, protected string, v any) error

UnprotectObject decrypts and unmarshals protected Base64 encoded string to a struct

Types

type Provider

type Provider interface {
	// Protect returns protected blob
	Protect(ctx context.Context, data []byte) ([]byte, error)
	// Unprotect returns unprotected data
	Unprotect(ctx context.Context, protected []byte) ([]byte, error)
	// IsReady returns true when provider has encryption keys
	IsReady() bool
	// PublicKey is returned for assymetric signer
	PublicKey() crypto.PublicKey
}

Provider interface for data protection

func NewSymmetric

func NewSymmetric(secret []byte) (Provider, error)

NewSymmetric returns `Provider` based on AES256-GCM encryption