josecipher

Documentation

Index

• func AesKeyUnwrap(kek, ciphertext []byte) ([]byte, error)
• func AesKeyWrap(kek, cek []byte) ([]byte, error)
• func DeriveECDHES(alg string, apuData, apvData []byte, priv *ecdsa.PrivateKey, ...) []byte
• func NewCBCHMAC(key []byte, newBlockCipher func([]byte) (cipher.Block, error)) (cipher.AEAD, error)
• func NewConcatKDF(hash crypto.Hash, z, algID, ptyUInfo, ptyVInfo, supPubInfo, supPrivInfo []byte) io.Reader

Functions

func AesKeyUnwrap

func AesKeyUnwrap(kek, ciphertext []byte) ([]byte, error)

AesKeyUnwrap unwraps a wrapped key (ciphertext) with the given key encryption key (kek).

func AesKeyWrap

func AesKeyWrap(kek, cek []byte) ([]byte, error)

AesKeyWrap wraps a content encryption key (cek) with the given key encryption key (kek).

func DeriveECDHES

func DeriveECDHES(alg string, apuData, apvData []byte, priv *ecdsa.PrivateKey, pub *ecdsa.PublicKey, size int) []byte

DeriveECDHES derives a shared encryption key using ECDH/ConcatKDF as described in JWE/JWA.

func NewCBCHMAC

func NewCBCHMAC(key []byte, newBlockCipher func([]byte) (cipher.Block, error)) (cipher.AEAD, error)

NewCBCHMAC instantiates a new AEAD based on CBC+HMAC.

func NewConcatKDF

func NewConcatKDF(hash crypto.Hash, z, algID, ptyUInfo, ptyVInfo, supPubInfo, supPrivInfo []byte) io.Reader

NewConcatKDF builds a KDF reader based on the given inputs.