gcpkms

Documentation

Index

• type Client
  • func NewClient(ctx context.Context, names []string) (Client, error)

Types

type Client

type Client interface {
	Unwrap(stanzas []*age.Stanza) (fileKey []byte, err error)
	Close() error
}

Client is an age.Identity that needs to be closed after use.

func NewClient

func NewClient(ctx context.Context, names []string) (Client, error)

NewClient creates an age.Identity that decrypts using Google Cloud KMS. Only `RSA_DECRYPT_OAEP_*_SHA256` keys are supported. All decrypt operations use the context provided to NewClient. The underlying KeyManagementClient retains connection resources until Close is called on the Client.