fakekms

Documentation

Overview

Package fakekms provides a fake implementation of registry.KMSClient.

Normally, a 'keyURI' identifies a key that is stored remotely by the KMS, and every operation is executed remotely using a RPC call to the KMS, since the key should not be sent to the client. In this fake implementation we want to avoid these RPC calls. We achieve this by encoding the key in the 'keyURI'. So the client simply needs to decode the key and generate an AEAD out of it. This is of course insecure and should only be used in testing.

Index

• func NewAEAD(keyURI string) (tink.AEAD, error)
• func NewAEADWithContext(keyURI string) (tink.AEADWithContext, error)
• func NewClient(uriPrefix string) (registry.KMSClient, error)
• func NewKeyURI() (string, error)

Functions

func NewAEAD

func NewAEAD(keyURI string) (tink.AEAD, error)

NewAEAD returns a new tink.AEAD for the given keyURI.

func NewAEADWithContext

func NewAEADWithContext(keyURI string) (tink.AEADWithContext, error)

NewAEADWithContext returns a new tink.AeadWithContext for the given keyURI.

The returned AEADWithContext will fail if the context is canceled.

func NewClient

func NewClient(uriPrefix string) (registry.KMSClient, error)

NewClient returns a fake KMS client which will handle keys with uriPrefix prefix. keyURI must have the following format: 'fake-kms://<base64 encoded aead keyset>'.

func NewKeyURI

func NewKeyURI() (string, error)

NewKeyURI returns a new, random fake KMS key URI.