credstash

Dec 20, 2022

Changes in this version

+ const DefaultKmsKey

+ const MaxPaddingLength

+ var ErrHmacValidationFailed = errors.New("Secret HMAC validation failed")

+ var ErrSecretNotFound = errors.New("Secret Not Found")

+ func ComputeHmac256(message, secret []byte) []byte

+ func Decode(data map[string]*dynamodb.AttributeValue, rawVal interface{}) error

+ func Decrypt(key, ciphertext []byte) ([]byte, error)

+ func Encrypt(key, plaintext []byte) ([]byte, error)

+ func GetHighestVersion(svc dynamoDB, tableName *string, name string) (string, error)

type Client

+ func (c *Client) DecryptDataKey(ciphertext []byte, ctx *EncryptionContextValue) (*DataKey, error)

+ func (c *Client) DeleteSecret(tableName string, name string) error

+ func (c *Client) GenerateRandomSecret(length int, useSymbols bool, charsets []interface{}, ...) (string, error)

+ func (c *Client) GetHighestVersionSecret(table string, name string, encContext *EncryptionContextValue) (*DecryptedCredential, error)

+ func (c *Client) PaddedInt(i int) string

+ func (c *Client) PutSecret(tableName string, name string, value string, paddedVersion string, ...) error

+ func (c *Client) ResolveVersion(tableName string, name string, version int) (string, error)

+ type Credential struct

+ Contents string

+ CreatedAt int64

+ Hmac []byte

+ Key string

+ Name string

+ Version string

+ type DataKey struct

+ CiphertextBlob []byte

+ Plaintext []byte

+ type DecryptedCredential struct

+ Secret string

+ type EncryptionContextValue map[string]*string

+ func NewEncryptionContextValue() *EncryptionContextValue

+ func (h *EncryptionContextValue) IsCumulative() bool

+ func (h *EncryptionContextValue) Set(value string) error

+ func (h *EncryptionContextValue) String() string

Mar 16, 2022

Changes in this version

+ type Client struct

+ func New(table string, sess *session.Session) *Client

+ func (c *Client) GetSecret(name, table, version string, ctx map[string]string) (string, error)