transit

Documentation

Index

• Constants
• Variables
• func Backend(ctx context.Context, conf *logical.BackendConfig) (*backend, error)
• func Factory(ctx context.Context, conf *logical.BackendConfig) (logical.Backend, error)
• func GetCacheSizeFromStorage(ctx context.Context, s logical.Storage) (int, error)
• func GetManagedKeyUUID(ctx context.Context, b *backend, keyName string, keyId string) (uuid string, err error)
• type AssocDataFactory
  • func (a AssocDataFactory) GetAssociatedData() ([]byte, error)
• type BatchRequestItem
• type DecryptBatchResponseItem
• type EncryptBatchResponseItem
• type ManagedKeyFactory
  • func (m ManagedKeyFactory) GetManagedKeyParameters() keysutil.ManagedKeyParameters

Constants

const EncryptedKeyBytes = 512

const WrappingKeyName = "wrapping-key"

Variables

var ErrInvalidKeyName = errors.New("key names cannot be paths")

var ErrNonceNotAllowed = errors.New("provided nonce not allowed for this key")

Functions

func Backend

func Backend(ctx context.Context, conf *logical.BackendConfig) (*backend, error)

func Factory

func Factory(ctx context.Context, conf *logical.BackendConfig) (logical.Backend, error)

func GetCacheSizeFromStorage

func GetCacheSizeFromStorage(ctx context.Context, s logical.Storage) (int, error)

func GetManagedKeyUUID

func GetManagedKeyUUID(ctx context.Context, b *backend, keyName string, keyId string) (uuid string, err error)

Types

type AssocDataFactory

type AssocDataFactory struct {
	Encoded string
}

func (AssocDataFactory) GetAssociatedData

func (a AssocDataFactory) GetAssociatedData() ([]byte, error)

type BatchRequestItem

type BatchRequestItem struct {
	// Context for key derivation. This is required for derived keys.
	Context string `json:"context" structs:"context" mapstructure:"context"`

	// DecodedContext is the base64 decoded version of Context
	DecodedContext []byte

	// Plaintext for encryption
	Plaintext string `json:"plaintext" structs:"plaintext" mapstructure:"plaintext"`

	// Ciphertext for decryption
	Ciphertext string `json:"ciphertext" structs:"ciphertext" mapstructure:"ciphertext"`

	// Nonce to be used when v1 convergent encryption is used
	Nonce string `json:"nonce" structs:"nonce" mapstructure:"nonce"`

	// The key version to be used for encryption
	KeyVersion int `json:"key_version" structs:"key_version" mapstructure:"key_version"`

	// DecodedNonce is the base64 decoded version of Nonce
	DecodedNonce []byte

	// Associated Data for AEAD ciphers
	AssociatedData string `json:"associated_data" struct:"associated_data" mapstructure:"associated_data"`

	// Reference is an arbitrary caller supplied string value that will be placed on the
	// batch response to ease correlation between inputs and outputs
	Reference string `json:"reference" structs:"reference" mapstructure:"reference"`
}

BatchRequestItem represents a request item for batch processing

type DecryptBatchResponseItem

type DecryptBatchResponseItem struct {
	// Plaintext for the ciphertext present in the corresponding batch
	// request item
	Plaintext string `json:"plaintext" structs:"plaintext" mapstructure:"plaintext"`

	// Error, if set represents a failure encountered while encrypting a
	// corresponding batch request item
	Error string `json:"error,omitempty" structs:"error" mapstructure:"error"`

	// Reference is an arbitrary caller supplied string value that will be placed on the
	// batch response to ease correlation between inputs and outputs
	Reference string `json:"reference" structs:"reference" mapstructure:"reference"`
}

type EncryptBatchResponseItem

type EncryptBatchResponseItem struct {
	// Ciphertext for the plaintext present in the corresponding batch
	// request item
	Ciphertext string `json:"ciphertext,omitempty" structs:"ciphertext" mapstructure:"ciphertext"`

	// KeyVersion defines the key version used to encrypt plaintext.
	KeyVersion int `json:"key_version,omitempty" structs:"key_version" mapstructure:"key_version"`

	// Error, if set represents a failure encountered while encrypting a
	// corresponding batch request item
	Error string `json:"error,omitempty" structs:"error" mapstructure:"error"`

	// Reference is an arbitrary caller supplied string value that will be placed on the
	// batch response to ease correlation between inputs and outputs
	Reference string `json:"reference"`
}

EncryptBatchResponseItem represents a response item for batch processing

type ManagedKeyFactory

type ManagedKeyFactory struct {
	// contains filtered or unexported fields
}

func (ManagedKeyFactory) GetManagedKeyParameters

func (m ManagedKeyFactory) GetManagedKeyParameters() keysutil.ManagedKeyParameters