Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security Policy
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

crypto

package

Go to main page

Versions in this module

v1

v1.1.0

May 23, 2022

v1.0.3

May 16, 2022

v1.0.1

Apr 29, 2022

v1.0.0

Apr 1, 2022

Changes in this version

+ const ModuleName

+ var ErrKeyNotFound = errors.New("key not found")

+ var ErrUnsupportedSigningKey = errors.New("signing key algorithm not supported")

+ func EciesDecrypt(privateKey *ecdsa.PrivateKey, cipherText []byte) ([]byte, error)

+ func EciesEncrypt(publicKey *ecdsa.PublicKey, plainText []byte) ([]byte, error)

+ func JWTKidAlg(tokenString string) (string, jwa.SignatureAlgorithm, error)

+ func NewMemoryStorage() storage.Storage

+ func ParseJWT(tokenString string, f PublicKeyFunc, options ...jwt.ParseOption) (jwt.Token, error)

+ func SignDetachedJWS(payload []byte, protectedHeaders map[string]interface{}, ...) (string, error)

+ func SignJWS(payload []byte, protectedHeaders map[string]interface{}, ...) (string, error)

+ func SignJWT(key jwk.Key, claims map[string]interface{}, headers map[string]interface{}) (token string, err error)

+ func SignatureAlgorithm(key crypto.PublicKey) (jwa.SignatureAlgorithm, error)

+ func Thumbprint(key jwk.Key) (string, error)

+ type Config struct

+ Storage string

+ Vault storage.VaultConfig

+ func DefaultCryptoConfig() Config

+ type Crypto struct

+ Storage storage.Storage

+ func NewCryptoInstance() *Crypto

+ func NewTestCryptoInstance() *Crypto

+ func (client *Crypto) Config() interface{}

+ func (client *Crypto) Configure(config core.ServerConfig) error

+ func (client *Crypto) Decrypt(kid string, cipherText []byte) ([]byte, error)

+ func (client *Crypto) Exists(kid string) bool

+ func (client *Crypto) List() []string

+ func (client *Crypto) Name() string

+ func (client *Crypto) New(namingFunc KIDNamingFunc) (Key, error)

+ func (client *Crypto) Resolve(kid string) (Key, error)

+ func (client *Crypto) SignJWT(claims map[string]interface{}, kid string) (token string, err error)

+ type Decrypter interface

+ Decrypt func(kid string, ciphertext []byte) ([]byte, error)

+ type JWTSigner interface

+ SignJWT func(claims map[string]interface{}, kid string) (string, error)

+ type KIDNamingFunc func(key crypto.PublicKey) (string, error)

+ func ErrorNamingFunc(err error) KIDNamingFunc

+ func StringNamingFunc(name string) KIDNamingFunc

+ type Key interface

+ KID func() string

+ Public func() crypto.PublicKey

+ Signer func() crypto.Signer

+ func NewEphemeralKey(namingFunc KIDNamingFunc) (Key, error)

+ func NewTestKey(kid string) Key

+ type KeyCreator interface

+ New func(namingFunc KIDNamingFunc) (Key, error)

+ type KeyResolver interface

+ Exists func(kid string) bool

+ List func() []string

+ Resolve func(kid string) (Key, error)

+ type KeyStore interface

+ type MockDecrypter struct

+ func NewMockDecrypter(ctrl *gomock.Controller) *MockDecrypter

+ func (m *MockDecrypter) Decrypt(kid string, ciphertext []byte) ([]byte, error)

+ func (m *MockDecrypter) EXPECT() *MockDecrypterMockRecorder

+ type MockDecrypterMockRecorder struct

+ func (mr *MockDecrypterMockRecorder) Decrypt(kid, ciphertext interface{}) *gomock.Call

+ type MockJWTSigner struct

+ func NewMockJWTSigner(ctrl *gomock.Controller) *MockJWTSigner

+ func (m *MockJWTSigner) EXPECT() *MockJWTSignerMockRecorder

+ func (m *MockJWTSigner) SignJWT(claims map[string]interface{}, kid string) (string, error)

+ type MockJWTSignerMockRecorder struct

+ func (mr *MockJWTSignerMockRecorder) SignJWT(claims, kid interface{}) *gomock.Call

+ type MockKey struct

+ func NewMockKey(ctrl *gomock.Controller) *MockKey

+ func (m *MockKey) EXPECT() *MockKeyMockRecorder

+ func (m *MockKey) KID() string

+ func (m *MockKey) Public() crypto.PublicKey

+ func (m *MockKey) Signer() crypto.Signer

+ type MockKeyCreator struct

+ func NewMockKeyCreator(ctrl *gomock.Controller) *MockKeyCreator

+ func (m *MockKeyCreator) EXPECT() *MockKeyCreatorMockRecorder

+ func (m *MockKeyCreator) New(namingFunc KIDNamingFunc) (Key, error)

+ type MockKeyCreatorMockRecorder struct

+ func (mr *MockKeyCreatorMockRecorder) New(namingFunc interface{}) *gomock.Call

+ type MockKeyMockRecorder struct

+ func (mr *MockKeyMockRecorder) KID() *gomock.Call

+ func (mr *MockKeyMockRecorder) Public() *gomock.Call

+ func (mr *MockKeyMockRecorder) Signer() *gomock.Call

+ type MockKeyResolver struct

+ func NewMockKeyResolver(ctrl *gomock.Controller) *MockKeyResolver

+ func (m *MockKeyResolver) EXPECT() *MockKeyResolverMockRecorder

+ func (m *MockKeyResolver) Exists(kid string) bool

+ func (m *MockKeyResolver) List() []string

+ func (m *MockKeyResolver) Resolve(kid string) (Key, error)

+ type MockKeyResolverMockRecorder struct

+ func (mr *MockKeyResolverMockRecorder) Exists(kid interface{}) *gomock.Call

+ func (mr *MockKeyResolverMockRecorder) List() *gomock.Call

+ func (mr *MockKeyResolverMockRecorder) Resolve(kid interface{}) *gomock.Call

+ type MockKeyStore struct

+ func NewMockKeyStore(ctrl *gomock.Controller) *MockKeyStore

+ func (m *MockKeyStore) Decrypt(kid string, ciphertext []byte) ([]byte, error)

+ func (m *MockKeyStore) EXPECT() *MockKeyStoreMockRecorder

+ func (m *MockKeyStore) Exists(kid string) bool

+ func (m *MockKeyStore) List() []string

+ func (m *MockKeyStore) New(namingFunc KIDNamingFunc) (Key, error)

+ func (m *MockKeyStore) Resolve(kid string) (Key, error)

+ func (m *MockKeyStore) SignJWT(claims map[string]interface{}, kid string) (string, error)

+ type MockKeyStoreMockRecorder struct

+ func (mr *MockKeyStoreMockRecorder) Decrypt(kid, ciphertext interface{}) *gomock.Call

+ func (mr *MockKeyStoreMockRecorder) Exists(kid interface{}) *gomock.Call

+ func (mr *MockKeyStoreMockRecorder) List() *gomock.Call

+ func (mr *MockKeyStoreMockRecorder) New(namingFunc interface{}) *gomock.Call

+ func (mr *MockKeyStoreMockRecorder) Resolve(kid interface{}) *gomock.Call

+ func (mr *MockKeyStoreMockRecorder) SignJWT(claims, kid interface{}) *gomock.Call

+ type PublicKeyFunc func(kid string) (crypto.PublicKey, error)

+ type TestKey struct

+ Kid string

+ PrivateKey crypto.Signer

+ func (t TestKey) KID() string

+ func (t TestKey) Private() crypto.PrivateKey

+ func (t TestKey) Public() crypto.PublicKey

+ func (t TestKey) Signer() crypto.Signer