transit

Documentation

Index

• Constants
• Variables
• func Backend(ctx context.Context, conf *logical.BackendConfig) (*backend, error)
• func Factory(ctx context.Context, conf *logical.BackendConfig) (logical.Backend, error)
• func GetCacheSizeFromStorage(ctx context.Context, s logical.Storage) (int, error)
• type AssocDataFactory
  • func (a AssocDataFactory) GetAssociatedData() ([]byte, error)
• type BatchRequestItem
• type DecryptBatchResponseItem
• type EncryptBatchResponseItem

Constants

const EncryptedKeyBytes = 512

const WrappingKeyName = "wrapping-key"

Variables

var ErrInvalidKeyName = errors.New("key names cannot be paths")

Functions

func Backend

func Backend(ctx context.Context, conf *logical.BackendConfig) (*backend, error)

func Factory

func Factory(ctx context.Context, conf *logical.BackendConfig) (logical.Backend, error)

func GetCacheSizeFromStorage

func GetCacheSizeFromStorage(ctx context.Context, s logical.Storage) (int, error)

Types

type AssocDataFactory

type AssocDataFactory struct {
	Encoded string
}

func (AssocDataFactory) GetAssociatedData

func (a AssocDataFactory) GetAssociatedData() ([]byte, error)

type BatchRequestItem

type BatchRequestItem struct {
	// Context for key derivation. This is required for derived keys.
	Context string `json:"context" structs:"context" mapstructure:"context"`

	// DecodedContext is the base64 decoded version of Context
	DecodedContext []byte

	// Plaintext for encryption
	Plaintext string `json:"plaintext" structs:"plaintext" mapstructure:"plaintext"`

	// Ciphertext for decryption
	Ciphertext string `json:"ciphertext" structs:"ciphertext" mapstructure:"ciphertext"`

	// The key version to be used for encryption
	KeyVersion int `json:"key_version" structs:"key_version" mapstructure:"key_version"`

	// Associated Data for AEAD ciphers
	AssociatedData string `json:"associated_data" struct:"associated_data" mapstructure:"associated_data"`

	// Reference is an arbitrary caller supplied string value that will be placed on the
	// batch response to ease correlation between inputs and outputs
	Reference string `json:"reference" structs:"reference" mapstructure:"reference"`
}

BatchRequestItem represents a request item for batch processing

type DecryptBatchResponseItem

type DecryptBatchResponseItem struct {
	// Plaintext for the ciphertext present in the corresponding batch
	// request item
	Plaintext string `json:"plaintext" structs:"plaintext" mapstructure:"plaintext"`

	// Error, if set represents a failure encountered while encrypting a
	// corresponding batch request item
	Error string `json:"error,omitempty" structs:"error" mapstructure:"error"`

	// Reference is an arbitrary caller supplied string value that will be placed on the
	// batch response to ease correlation between inputs and outputs
	Reference string `json:"reference" structs:"reference" mapstructure:"reference"`
}

type EncryptBatchResponseItem

type EncryptBatchResponseItem struct {
	// Ciphertext for the plaintext present in the corresponding batch
	// request item
	Ciphertext string `json:"ciphertext,omitempty" structs:"ciphertext" mapstructure:"ciphertext"`

	// KeyVersion defines the key version used to encrypt plaintext.
	KeyVersion int `json:"key_version,omitempty" structs:"key_version" mapstructure:"key_version"`

	// Error, if set represents a failure encountered while encrypting a
	// corresponding batch request item
	Error string `json:"error,omitempty" structs:"error" mapstructure:"error"`

	// Reference is an arbitrary caller supplied string value that will be placed on the
	// batch response to ease correlation between inputs and outputs
	Reference string `json:"reference"`
}

EncryptBatchResponseItem represents a response item for batch processing