cryptography

Documentation

Overview

Package cryptography provides symmetric authenticated encryption using 256-bit AES-GCM with a random nonce.

Index

• Constants
• func CheckPasswordHash(password, hash string) bool
• func Decrypt(cipherText []byte, plainKey *string) ([]byte, error)
• func Encrypt(plainText []byte, plainKey *string) ([]byte, error)
• func HashPassword(password string) (string, error)

Constants

const PasswordCost = 14

Functions

func CheckPasswordHash

func CheckPasswordHash(password, hash string) bool

CheckPasswordHash compares a bcrypt hashed password with its possible plaintext equivalent. Returns bool if the password match, false otherwise.

func Decrypt

func Decrypt(cipherText []byte, plainKey *string) ([]byte, error)

Decrypt decrypts data using 256-bit AES-GCM. This both hides the content of the data and provides a check that it hasn't been altered. Expects input form nonce|ciphertext|tag where '|' indicates concatenation.

func Encrypt

func Encrypt(plainText []byte, plainKey *string) ([]byte, error)

Encrypt encrypts data using 256-bit AES-GCM. This both hides the content of the data and provides a check that it hasn't been altered. Output takes the form nonce|ciphertext|tag where '|' indicates concatenation.

func HashPassword

func HashPassword(password string) (string, error)

HashPassword generates a bcrypt hash of the password. Uses a work factor of PasswordCost.