crypt

Documentation

Index

• Constants
• func KMS(c *Crypt) *kms.KMS
• type Credentials
  • func (cc *Credentials) IsExpired() bool
  • func (cc *Credentials) Retrieve() (credentials.Value, error)
• type Crypt
  • func New(region, access, secret string) *Crypt
  • func NewIam(role string) (*Crypt, error)
  • func (c *Crypt) Decrypt(keyArn string, data []byte) ([]byte, error)
  • func (c *Crypt) Encrypt(keyArn string, dec []byte) ([]byte, error)
• type Envelope
• type Instance
• type Role

Constants

const (
	KeyLength   = 32
	NonceLength = 24
)

Functions

func KMS

func KMS(c *Crypt) *kms.KMS

Types

type Credentials

type Credentials struct {
	Crypt *Crypt
}

func (*Credentials) IsExpired

func (cc *Credentials) IsExpired() bool

func (*Credentials) Retrieve

func (cc *Credentials) Retrieve() (credentials.Value, error)

type Crypt

type Crypt struct {
	AwsRegion string
	AwsAccess string
	AwsSecret string
	AwsToken  string
}

func New

func New(region, access, secret string) *Crypt

func NewIam

func NewIam(role string) (*Crypt, error)

func (*Crypt) Decrypt

func (c *Crypt) Decrypt(keyArn string, data []byte) ([]byte, error)

func (*Crypt) Encrypt

func (c *Crypt) Encrypt(keyArn string, dec []byte) ([]byte, error)

type Envelope

type Envelope struct {
	Ciphertext   []byte `json:"c"`
	EncryptedKey []byte `json:"k"`
	Nonce        []byte `json:"n"`
}

type Instance

type Instance struct {
	Region string `json::"region"`
}

type Role

type Role struct {
	Access string `json:"AccessKeyId"`
	Secret string `json:"SecretAccessKey"`
	Token  string `json:"Token"`
}