cloud

Documentation

Index

• type GCPKMS
  • func (gkms *GCPKMS) Decrypt(ciphertext []byte) ([]byte, error)
  • func (gkms *GCPKMS) Encrypt(plaintext []byte) ([]byte, error)
• type KMS
  • func NewGCPKMS(keyname string) KMS

Types

type GCPKMS

type GCPKMS struct {
	// contains filtered or unexported fields
}

GCPKMS is a Google Cloud Platform KMS client A wrapper for configuring gcloud, and consuming their KMS service for encrypt/decrypt and key management/acls

func (*GCPKMS) Decrypt

func (gkms *GCPKMS) Decrypt(ciphertext []byte) ([]byte, error)

Decrypt invokes the GCP KMS API to decrypt ciphertext.

func (*GCPKMS) Encrypt

func (gkms *GCPKMS) Encrypt(plaintext []byte) ([]byte, error)

Encrypt invokes GCP KMS to encrypt the data. Returns a bytestream of binary data.

type KMS

type KMS interface {
	Encrypt([]byte) ([]byte, error)
	Decrypt([]byte) ([]byte, error)
}

KMS is a contract interface that must be implemented for sctl to talk to the backing KMS service's two methods of Encrypt and Decrypt, that return byte slices of plaintext/cyphertext respectively and any unwrapped errors that surface from the operation.

func NewGCPKMS

func NewGCPKMS(keyname string) KMS

NewGCPKMS creates a new KMS client for Google Cloud Platform.