encryption

Documentation

Index

• Constants
• func Decrypt(encryptedData, nonce, secretKey []byte) ([]byte, error)
• func DecryptConvergent(encryptedData, salt, secretKey []byte) ([]byte, error)
• func Desalinate(data []byte, length int) (desalted []byte, salt []byte)
• func Salinate(data, salt []byte) []byte
• type Args
• type Blob
  • func Encrypt(data, nonce, secretKey []byte) (*Blob, error)
  • func EncryptConvergent(data, salt []byte) (*Blob, error)
• type BlockCipherMaker

Constants

const KeySize = 32

const NonceSize = 12

There are issues with the proof of security with other nonce sizes so we only use 0 (for convergent) or 12

Functions

func Decrypt

func Decrypt(encryptedData, nonce, secretKey []byte) ([]byte, error)

func DecryptConvergent

func DecryptConvergent(encryptedData, salt, secretKey []byte) ([]byte, error)

Decrypt data that was deterministically encrypted with the provided salt

func Desalinate

func Desalinate(data []byte, length int) (desalted []byte, salt []byte)

func Salinate

func Salinate(data, salt []byte) []byte

Types

type Args

type Args struct {
	BlockCipherMaker BlockCipherMaker
	Nonce            []byte
	SecretKey        []byte
	AdditionalData   []byte
}

type Blob

type Blob struct {
	SecretKey     []byte
	EncryptedData []byte
}

func Encrypt

func Encrypt(data, nonce, secretKey []byte) (*Blob, error)

Encrypt data using random nonce

func EncryptConvergent

func EncryptConvergent(data, salt []byte) (*Blob, error)

Deterministically encrypt data using a supplied salt to produce a distinguished the encrypted result that will have a different content hash, secret key, and address than the same data encrypted with a different salt (or not salt). Can be used to watermark a copy of a blob shared with a particular party or to hide the fact a certain plaintext is stored.

type BlockCipherMaker

type BlockCipherMaker func(key []byte) (cipher.Block, error)