seal

Documentation

Index

• type Access
  • func NewTestSeal(opts *TestSealOpts) *Access
  • func (a *Access) Decrypt(ctx context.Context, data *wrapping.EncryptedBlobInfo, aad []byte) (pt []byte, err error)
  • func (a *Access) Encrypt(ctx context.Context, plaintext, aad []byte) (blob *wrapping.EncryptedBlobInfo, err error)
  • func (a *Access) SetType(t string)
  • func (a *Access) Type() string
• type Envelope
  • func NewEnvelope() *Envelope
  • func (e *Envelope) Decrypt(data *wrapping.EnvelopeInfo, aad []byte) ([]byte, error)
  • func (e *Envelope) Encrypt(plaintext, aad []byte) (*wrapping.EnvelopeInfo, error)
• type StoredKeysSupport
  • func (s StoredKeysSupport) String() string
• type TestSealOpts

Types

type Access

type Access struct {
	wrapping.Wrapper
	OverriddenType string
}

Access is the embedded implementation of autoSeal that contains logic specific to encrypting and decrypting data, or in this case keys.

func NewTestSeal

func NewTestSeal(opts *TestSealOpts) *Access

func (*Access) Decrypt

func (a *Access) Decrypt(ctx context.Context, data *wrapping.EncryptedBlobInfo, aad []byte) (pt []byte, err error)

Decrypt uses the underlying seal to decrypt the cryptotext and returns it. Note that it is possible depending on the wrapper used that both pt and err are populated.

func (*Access) Encrypt

func (a *Access) Encrypt(ctx context.Context, plaintext, aad []byte) (blob *wrapping.EncryptedBlobInfo, err error)

Encrypt uses the underlying seal to encrypt the plaintext and returns it.

func (*Access) SetType

func (a *Access) SetType(t string)

func (*Access) Type

func (a *Access) Type() string

type Envelope

type Envelope struct {
	// contains filtered or unexported fields
}

func NewEnvelope

func NewEnvelope() *Envelope

func (*Envelope) Decrypt

func (e *Envelope) Decrypt(data *wrapping.EnvelopeInfo, aad []byte) ([]byte, error)

func (*Envelope) Encrypt

func (e *Envelope) Encrypt(plaintext, aad []byte) (*wrapping.EnvelopeInfo, error)

type StoredKeysSupport

type StoredKeysSupport int

const (
	// The 0 value of StoredKeysSupport is an invalid option
	StoredKeysInvalid StoredKeysSupport = iota
	StoredKeysNotSupported
	StoredKeysSupportedGeneric
	StoredKeysSupportedShamirMaster
)

func (StoredKeysSupport) String

func (s StoredKeysSupport) String() string

type TestSealOpts

type TestSealOpts struct {
	Logger     hclog.Logger
	StoredKeys StoredKeysSupport
	Secret     []byte
	Name       string
}