crypto

Documentation

Index

• func Dump(name string, secret tink.AEAD, key *tinkpb.KeyTemplate) error
• func Open(root string) (*Aes, *HMac, *Jwt, error)
• func RandomBytes(len int) []byte
• func Restore(name string, secret tink.AEAD) (*keyset.Handle, error)
• type Aes
  • func NewAes(file string, secret tink.AEAD) (*Aes, error)
  • func (p *Aes) Decrypt(code []byte, salt []byte) ([]byte, error)
  • func (p *Aes) Encrypt(plain []byte) ([]byte, []byte, error)
• type HMac
  • func NewHMac(file string, secret tink.AEAD) (*HMac, error)
  • func (p *HMac) Sign(plain []byte) ([]byte, []byte, error)
  • func (p *HMac) Verify(code []byte, plain []byte, salt []byte) error
• type Jwt
  • func NewJwt(file string, secret tink.AEAD) (*Jwt, error)
  • func (p *Jwt) Sign(issuer string, subject string, audiences []string, ...) (string, error)
  • func (p *Jwt) Verify(token string, issuer string, audience string) (string, string, map[string]interface{}, error)

Functions

func Dump

func Dump(name string, secret tink.AEAD, key *tinkpb.KeyTemplate) error

func Open

func Open(root string) (*Aes, *HMac, *Jwt, error)

func RandomBytes

func RandomBytes(len int) []byte

func Restore

func Restore(name string, secret tink.AEAD) (*keyset.Handle, error)

Types

type Aes

type Aes struct {
	// contains filtered or unexported fields
}

func NewAes

func NewAes(file string, secret tink.AEAD) (*Aes, error)

func (*Aes) Decrypt

func (p *Aes) Decrypt(code []byte, salt []byte) ([]byte, error)

func (*Aes) Encrypt

func (p *Aes) Encrypt(plain []byte) ([]byte, []byte, error)

type HMac

type HMac struct {
	// contains filtered or unexported fields
}

func NewHMac

func NewHMac(file string, secret tink.AEAD) (*HMac, error)

func (*HMac) Sign

func (p *HMac) Sign(plain []byte) ([]byte, []byte, error)

func (*HMac) Verify

func (p *HMac) Verify(code []byte, plain []byte, salt []byte) error

type Jwt

type Jwt struct {
	// contains filtered or unexported fields
}

func NewJwt

func NewJwt(file string, secret tink.AEAD) (*Jwt, error)

func (*Jwt) Sign

func (p *Jwt) Sign(issuer string, subject string, audiences []string, claims map[string]interface{}, not_before *time.Time, expires_at *time.Time) (string, error)

func (*Jwt) Verify

func (p *Jwt) Verify(token string, issuer string, audience string) (string, string, map[string]interface{}, error)