seal

Documentation

Index

• Constants
• type Access
• type Encryptor
• type Envelope
  • func NewEnvelope() *Envelope
  • func (e *Envelope) Decrypt(data *EnvelopeInfo) ([]byte, error)
  • func (e *Envelope) Encrypt(plaintext []byte) (*EnvelopeInfo, error)
• type EnvelopeInfo
• type TestSeal
  • func NewTestSeal(secret []byte) *TestSeal
  • func (t *TestSeal) Decrypt(_ context.Context, dwi *physical.EncryptedBlobInfo) ([]byte, error)
  • func (t *TestSeal) Encrypt(_ context.Context, plaintext []byte) (*physical.EncryptedBlobInfo, error)
  • func (t *TestSeal) Finalize(_ context.Context) error
  • func (s *TestSeal) Init(_ context.Context) error
  • func (t *TestSeal) KeyID() string
  • func (t *TestSeal) SealType() string
  • func (t *TestSeal) SetKeyID(k string)

Constants

const (
	Shamir        = "shamir"
	PKCS11        = "pkcs11"
	AliCloudKMS   = "alicloudkms"
	AWSKMS        = "awskms"
	GCPCKMS       = "gcpckms"
	AzureKeyVault = "azurekeyvault"
	OCIKMS        = "ocikms"
	Transit       = "transit"
	Test          = "test-auto"

	// HSMAutoDeprecated is a deprecated seal type prior to 0.9.0.
	// It is still referenced in certain code paths for upgrade purporses
	HSMAutoDeprecated = "hsm-auto"
)

Types

type Access

type Access interface {
	SealType() string
	KeyID() string

	Init(context.Context) error
	Finalize(context.Context) error

	Encryptor
}

Access is the embedded implementation of autoSeal that contains logic specific to encrypting and decrypting data, or in this case keys.

type Encryptor

type Encryptor interface {
	Encrypt(context.Context, []byte) (*physical.EncryptedBlobInfo, error)
	Decrypt(context.Context, *physical.EncryptedBlobInfo) ([]byte, error)
}

type Envelope

type Envelope struct{}

func NewEnvelope

func NewEnvelope() *Envelope

func (*Envelope) Decrypt

func (e *Envelope) Decrypt(data *EnvelopeInfo) ([]byte, error)

func (*Envelope) Encrypt

func (e *Envelope) Encrypt(plaintext []byte) (*EnvelopeInfo, error)

type EnvelopeInfo

type EnvelopeInfo struct {
	Ciphertext []byte
	Key        []byte
	IV         []byte
}

type TestSeal

type TestSeal struct {
	Type string
	// contains filtered or unexported fields
}

func NewTestSeal

func NewTestSeal(secret []byte) *TestSeal

func (*TestSeal) Decrypt

func (t *TestSeal) Decrypt(_ context.Context, dwi *physical.EncryptedBlobInfo) ([]byte, error)

func (*TestSeal) Encrypt

func (t *TestSeal) Encrypt(_ context.Context, plaintext []byte) (*physical.EncryptedBlobInfo, error)

func (*TestSeal) Finalize

func (t *TestSeal) Finalize(_ context.Context) error

func (*TestSeal) Init

func (s *TestSeal) Init(_ context.Context) error

func (*TestSeal) KeyID

func (t *TestSeal) KeyID() string

func (*TestSeal) SealType

func (t *TestSeal) SealType() string

func (*TestSeal) SetKeyID

func (t *TestSeal) SetKeyID(k string)