cryptoutil

Documentation

Overview

Package cryptoutil provides utility functions for cryptographic operations. It is the consumer's responsibility to ensure that inputs are reasonably sized so as to avoid memory exhaustion attacks.

Index

• func DecryptSymmetricAESGCM(encryptedMsg []byte, secretKey *[32]byte) ([]byte, error)
• func DecryptSymmetricXChaCha20Poly1305(encryptedMsg []byte, secretKey *[32]byte) ([]byte, error)
• func EncryptSymmetricAESGCM(msg []byte, secretKey *[32]byte) ([]byte, error)
• func EncryptSymmetricXChaCha20Poly1305(msg []byte, secretKey *[32]byte) ([]byte, error)
• func Sha256Hash(msg []byte) []byte
• func SignSymmetric(msg []byte, secretKey *[32]byte) ([]byte, error)
• func VerifyAndReadAsymmetric(signedMsg []byte, publicKey *[32]byte) ([]byte, error)
• func VerifyAndReadAsymmetricBase64(signedMsg Base64, publicKey Base64) ([]byte, error)
• func VerifyAndReadSymmetric(signedMsg []byte, secretKey *[32]byte) ([]byte, error)
• type Base64

Functions

func DecryptSymmetricAESGCM

func DecryptSymmetricAESGCM(encryptedMsg []byte, secretKey *[32]byte) ([]byte, error)

DecryptSymmetricAESGCM decrypts a message using AES-256-GCM.

func DecryptSymmetricXChaCha20Poly1305

func DecryptSymmetricXChaCha20Poly1305(encryptedMsg []byte, secretKey *[32]byte) ([]byte, error)

DecryptSymmetricXChaCha20Poly1305 decrypts a message using XChaCha20-Poly1305.

func EncryptSymmetricAESGCM

func EncryptSymmetricAESGCM(msg []byte, secretKey *[32]byte) ([]byte, error)

EncryptSymmetricAESGCM encrypts a message using AES-256-GCM.

func EncryptSymmetricXChaCha20Poly1305

func EncryptSymmetricXChaCha20Poly1305(msg []byte, secretKey *[32]byte) ([]byte, error)

EncryptSymmetricXChaCha20Poly1305 encrypts a message using XChaCha20-Poly1305.

func Sha256Hash

func Sha256Hash(msg []byte) []byte

Sha256Hash returns the SHA-256 hash of a message as a byte slice.

func SignSymmetric

func SignSymmetric(msg []byte, secretKey *[32]byte) ([]byte, error)

SignSymmetric signs a message using a symmetric key. It is a convenience wrapper around the nacl/auth package, which uses HMAC-SHA-512-256.

func VerifyAndReadAsymmetric

func VerifyAndReadAsymmetric(signedMsg []byte, publicKey *[32]byte) ([]byte, error)

VerifyAndReadAsymmetric verifies a signed message using an Ed25519 public key and returns the original message.

func VerifyAndReadAsymmetricBase64

func VerifyAndReadAsymmetricBase64(signedMsg Base64, publicKey Base64) ([]byte, error)

VerifyAndReadAsymmetricBase64 verifies a signed message using a base64 encoded Ed25519 public key and returns the original message.

func VerifyAndReadSymmetric

func VerifyAndReadSymmetric(signedMsg []byte, secretKey *[32]byte) ([]byte, error)

VerifyAndReadSymmetric verifies a signed message using a symmetric key and returns the original message. It is a convenience wrapper around the nacl/auth package, which uses HMAC-SHA-512-256.

Types

type Base64

type Base64 = string