keyring

Documentation

Index

• type Config
• type Keyring
  • func New(config Config) (*Keyring, error)
  • func (k *Keyring) CreateKey(ctx context.Context, ringID string) (*vaultv1.DataEncryptionKey, error)
  • func (k *Keyring) DecodeAndDecryptKey(ctx context.Context, b []byte) (*vaultv1.DataEncryptionKey, string, error)
  • func (k *Keyring) EncryptAndEncodeKey(ctx context.Context, dek *vaultv1.DataEncryptionKey) ([]byte, error)
  • func (k *Keyring) GetKey(ctx context.Context, ringID, keyID string) (*vaultv1.DataEncryptionKey, error)
  • func (k *Keyring) GetLatestKey(ctx context.Context, ringID string) (*vaultv1.DataEncryptionKey, error)
  • func (k *Keyring) GetOrCreateKey(ctx context.Context, ringID, keyID string) (*vaultv1.DataEncryptionKey, error)
  • func (k *Keyring) RollKeys(ctx context.Context, ringID string) error

Types

type Config

type Config struct {
	Store  storage.Storage
	Logger logging.Logger

	DecryptionKeys map[string]*vaultv1.KeyEncryptionKey
	EncryptionKey  *vaultv1.KeyEncryptionKey
}

type Keyring

type Keyring struct {
	// contains filtered or unexported fields
}

func New

func New(config Config) (*Keyring, error)

func (*Keyring) CreateKey

func (k *Keyring) CreateKey(ctx context.Context, ringID string) (*vaultv1.DataEncryptionKey, error)

func (*Keyring) DecodeAndDecryptKey

func (k *Keyring) DecodeAndDecryptKey(ctx context.Context, b []byte) (*vaultv1.DataEncryptionKey, string, error)

func (*Keyring) EncryptAndEncodeKey

func (k *Keyring) EncryptAndEncodeKey(ctx context.Context, dek *vaultv1.DataEncryptionKey) ([]byte, error)

func (*Keyring) GetKey

func (k *Keyring) GetKey(ctx context.Context, ringID, keyID string) (*vaultv1.DataEncryptionKey, error)

func (*Keyring) GetLatestKey

func (k *Keyring) GetLatestKey(ctx context.Context, ringID string) (*vaultv1.DataEncryptionKey, error)

GetLatestKey returns the latest key from the keyring. If no key is found, it creates a new key.

func (*Keyring) GetOrCreateKey

func (k *Keyring) GetOrCreateKey(ctx context.Context, ringID, keyID string) (*vaultv1.DataEncryptionKey, error)

func (*Keyring) RollKeys

func (k *Keyring) RollKeys(ctx context.Context, ringID string) error