dhutil

Documentation

Index

• func DecryptAES(key, ciphertext, nonce, aad []byte) ([]byte, error)
• func DeriveSharedKey(secret, ourPublic, theirPublic []byte) ([]byte, error)
• func EncryptAES(key, plaintext, aad []byte) ([]byte, []byte, error)
• func GeneratePublicPrivateKey() ([]byte, []byte, error)
• func GenerateSharedSecret(ourPrivate, theirPublic []byte) ([]byte, error)
• type Envelope
• type PublicKeyInfo

Functions

func DecryptAES

func DecryptAES(key, ciphertext, nonce, aad []byte) ([]byte, error)

Use AES256-GCM to decrypt some ciphertext with a provided key and nonce. The returned values are the plaintext and error respectively.

func DeriveSharedKey

func DeriveSharedKey(secret, ourPublic, theirPublic []byte) ([]byte, error)

DeriveSharedKey uses HKDF to derive a key from a shared secret and public keys

func EncryptAES

func EncryptAES(key, plaintext, aad []byte) ([]byte, []byte, error)

Use AES256-GCM to encrypt some plaintext with a provided key. The returned values are the ciphertext, the nonce, and error respectively.

func GeneratePublicPrivateKey

func GeneratePublicPrivateKey() ([]byte, []byte, error)

generatePublicPrivateKey uses curve25519 to generate a public and private key pair.

func GenerateSharedSecret

func GenerateSharedSecret(ourPrivate, theirPublic []byte) ([]byte, error)

GenerateSharedSecret uses the private key and the other party's public key to generate the shared secret.

Types

type Envelope

type Envelope struct {
	Curve25519PublicKey []byte `json:"curve25519_public_key"`
	Nonce               []byte `json:"nonce"`
	EncryptedPayload    []byte `json:"encrypted_payload"`
}

type PublicKeyInfo

type PublicKeyInfo struct {
	Curve25519PublicKey []byte `json:"curve25519_public_key"`
}