secrets

Documentation

Index

• Constants
• Variables
• func GenerateRandomMainSecret() string
• func HkdfExpand(prk PRK, hi HkdfInfo) (secret []byte, err error)
• type AppSecrets
  • func NewAppSecrets(mainSecret string) (sec *AppSecrets, err error)
• type HkdfInfo
• type PRK
  • func HkdfExtract(mainSecret []byte) PRK

Constants

const (
	MainSecretMinLength = 16
)

const (
	Salt = "idmsvc-backend"
)

Variables

var (
	// MAC key for domain registration token
	DomainRegKeyInfo = HkdfInfo{[]byte("domain registration key"), 32}
	// hex string to identify AES encryption keys for encrypted private JWKs
	HostconfEncryptionIdInfo = HkdfInfo{[]byte("hostconf JWK encryption id"), 8}
	// AES-GCM encryption keys for private JWKs
	HostconfEncryptionKeyInfo = HkdfInfo{[]byte("hostconf JWK encryption key"), 16}
)

Functions

func GenerateRandomMainSecret

func GenerateRandomMainSecret() string

Generate random value for main secret, used in tests

func HkdfExpand

func HkdfExpand(prk PRK, hi HkdfInfo) (secret []byte, err error)

Expand pseudo random key into a secret

Types

type AppSecrets

type AppSecrets struct {
	DomainRegKey          []byte
	HostconfEncryptionId  string
	HostConfEncryptionKey []byte
}

func NewAppSecrets

func NewAppSecrets(mainSecret string) (sec *AppSecrets, err error)

Parse main secret and get sub secrets

type HkdfInfo

type HkdfInfo struct {
	Info   []byte
	Length int
}

type PRK

type PRK []byte

func HkdfExtract

func HkdfExtract(mainSecret []byte) PRK

Extract pseudo random key from a secret