cryptor

Documentation

Index

• Constants
• func Decrypt(in []byte) (resp []byte, err error)
• func Encrypt(in []byte, names []string, min int) (resp []byte, err error)
• type EncryptedData
• type MultiWrappedKey
• type SingleWrappedKey

Constants

const (
	DEFAULT_VERSION = 1
)

Functions

func Decrypt

func Decrypt(in []byte) (resp []byte, err error)

Decrypt decrypts a file using the keys in the key cache.

func Encrypt

func Encrypt(in []byte, names []string, min int) (resp []byte, err error)

Encrypt encrypts data with the keys associated with names. This requires a minimum of min keys to decrypt. NOTE: as currently implemented, the maximum value for min is 2.

Types

type EncryptedData

type EncryptedData struct {
	Version   int
	VaultId   int
	KeySet    []MultiWrappedKey
	KeySetRSA map[string]SingleWrappedKey
	IV        []byte
	Data      []byte
	Signature []byte
}

EncryptedData is the format for encrypted data containing all the keys necessary to decrypt it when delegated.

type MultiWrappedKey

type MultiWrappedKey struct {
	Name []string
	Key  []byte
}

MultiWrappedKey is a structure containing a 16-byte key encrypted once for each of the keys corresponding to the names of the users in Name in order.

type SingleWrappedKey

type SingleWrappedKey struct {
	Key []byte
	// contains filtered or unexported fields
}

SingleWrappedKey is a structure containing a 16-byte key encrypted by an RSA or EC key.