signer

Documentation

Index

• Constants
• func New(ctx context.Context, signer, pass, tinkKEKURI, tinkKeysetPath string) (signature.Signer, error)
• func NewTinkSigner(ctx context.Context, kekURI, keysetPath string) (signature.Signer, error)
• func NewTinkSignerWithHandle(kek tink.AEAD, keysetPath string) (signature.Signer, error)
• type File
  • func NewFile(keyPath, keyPass string) (*File, error)
• type Memory
  • func NewMemory() (*Memory, error)

Constants

const MemoryScheme = "memory"

const TinkScheme = "tink"

Functions

func New

func New(ctx context.Context, signer, pass, tinkKEKURI, tinkKeysetPath string) (signature.Signer, error)

func NewTinkSigner

func NewTinkSigner(ctx context.Context, kekURI, keysetPath string) (signature.Signer, error)

NewTinkSignerWithHandle returns a signature.SignerVerifier that wraps crypto.Signer and a hash function. Provide a path to the encrypted keyset and cloud KMS key URI for decryption

func NewTinkSignerWithHandle

func NewTinkSignerWithHandle(kek tink.AEAD, keysetPath string) (signature.Signer, error)

NewTinkSignerWithHandle returns a signature.SignerVerifier that wraps crypto.Signer and a hash function. Provide a path to the encrypted keyset and a key handle for decrypting the keyset

Types

type File

type File struct {
	signature.SignerVerifier
}

returns an file based signer and verify, used for spinning up local instances

func NewFile

func NewFile(keyPath, keyPass string) (*File, error)

type Memory

type Memory struct {
	signature.ECDSASignerVerifier
}

returns an in-memory signer and verify, used for spinning up local instances

func NewMemory

func NewMemory() (*Memory, error)