transit

Documentation

Index

• func Backend() *framework.Backend
• func Factory(conf *logical.BackendConfig) (logical.Backend, error)
• type Policy
  • func DeserializePolicy(buf []byte) (*Policy, error)
  • func (p *Policy) DeriveKey(context []byte) ([]byte, error)
  • func (p *Policy) Serialize() ([]byte, error)

Functions

func Backend

func Backend() *framework.Backend

func Factory

func Factory(conf *logical.BackendConfig) (logical.Backend, error)

Types

type Policy

type Policy struct {
	Name       string `json:"name"`
	Key        []byte `json:"key"`
	CipherMode string `json:"cipher"`

	// Derived keys MUST provide a context and the
	// master underlying key is never used.
	Derived bool   `json:"derived"`
	KDFMode string `json:"kdf_mode"`
}

Policy is the struct used to store metadata

func DeserializePolicy

func DeserializePolicy(buf []byte) (*Policy, error)

func (*Policy) DeriveKey

func (p *Policy) DeriveKey(context []byte) ([]byte, error)

DeriveKey is used to derive the encryption key that should be used depending on the policy. If derivation is disabled the raw key is used and no context is required, otherwise the KDF mode is used with the context to derive the proper key.

func (*Policy) Serialize

func (p *Policy) Serialize() ([]byte, error)