provider

Documentation

Index

• type AwsKmsCryptographicMaterialsProvider
  • func (p *AwsKmsCryptographicMaterialsProvider) DecryptionMaterials(ctx context.Context, materialName string, version int64) (materials.CryptographicMaterials, error)
  • func (p *AwsKmsCryptographicMaterialsProvider) EncryptionMaterials(ctx context.Context, materialName string) (materials.CryptographicMaterials, error)
  • func (p *AwsKmsCryptographicMaterialsProvider) TableName() string
• type CryptographicMaterialsProvider
  • func NewAwsKmsCryptographicMaterialsProvider(keyURI string, encryptionContext map[string]string, ...) (CryptographicMaterialsProvider, error)

Types

type AwsKmsCryptographicMaterialsProvider

type AwsKmsCryptographicMaterialsProvider struct {
	KMSKeyURI         string
	EncryptionContext map[string]string
	DelegatedKey      *delegatedkeys.TinkDelegatedKey
	MaterialStore     *store.MetaStore
}

AwsKmsCryptographicMaterialsProvider uses AWS KMS for key management and Tink for cryptographic operations.

func (*AwsKmsCryptographicMaterialsProvider) DecryptionMaterials

func (p *AwsKmsCryptographicMaterialsProvider) DecryptionMaterials(ctx context.Context, materialName string, version int64) (materials.CryptographicMaterials, error)

func (*AwsKmsCryptographicMaterialsProvider) EncryptionMaterials

func (p *AwsKmsCryptographicMaterialsProvider) EncryptionMaterials(ctx context.Context, materialName string) (materials.CryptographicMaterials, error)

EncryptionMaterials retrieves and stores encryption materials for the given encryption context.

func (*AwsKmsCryptographicMaterialsProvider) TableName

func (p *AwsKmsCryptographicMaterialsProvider) TableName() string

type CryptographicMaterialsProvider

type CryptographicMaterialsProvider interface {
	EncryptionMaterials(ctx context.Context, materialName string) (materials.CryptographicMaterials, error)
	DecryptionMaterials(ctx context.Context, materialName string, version int64) (materials.CryptographicMaterials, error)
	TableName() string
}

func NewAwsKmsCryptographicMaterialsProvider

func NewAwsKmsCryptographicMaterialsProvider(keyURI string, encryptionContext map[string]string, materialStore *store.MetaStore) (CryptographicMaterialsProvider, error)

NewAwsKmsCryptographicMaterialsProvider initializes a provider with the specified AWS KMS key ID, encryption context, and material store.