pkcs1

Documentation

Index

• Variables
• func AddCipher(name string, cipher func() Cipher)
• func CheckPEMCipher(name string) bool
• func DecryptPEMBlock(b *pem.Block, password []byte) ([]byte, error)
• func DeriveKey(password, salt []byte, keySize int) []byte
• func EncryptPEMBlock(rand io.Reader, blockType string, data, password []byte, cipher Cipher) (*pem.Block, error)
• func IsEncryptedPEMBlock(b *pem.Block) bool
• type Cipher
  • func GetCipher(name string) (Cipher, error)
  • func GetPEMCipher(name string) Cipher
• type CipherCBC
  • func (this CipherCBC) BlockSize() int
  • func (this CipherCBC) Decrypt(password, iv, ciphertext []byte) ([]byte, error)
  • func (this CipherCBC) Encrypt(rand io.Reader, password, plaintext []byte) ([]byte, []byte, error)
  • func (this CipherCBC) Name() string
• type CipherCFB
  • func (this CipherCFB) BlockSize() int
  • func (this CipherCFB) Decrypt(password, iv, ciphertext []byte) ([]byte, error)
  • func (this CipherCFB) Encrypt(rand io.Reader, password, plaintext []byte) ([]byte, []byte, error)
  • func (this CipherCFB) Name() string
• type CipherCTR
  • func (this CipherCTR) BlockSize() int
  • func (this CipherCTR) Decrypt(password, iv, ciphertext []byte) ([]byte, error)
  • func (this CipherCTR) Encrypt(rand io.Reader, password, plaintext []byte) ([]byte, []byte, error)
  • func (this CipherCTR) Name() string
• type CipherOFB
  • func (this CipherOFB) BlockSize() int
  • func (this CipherOFB) Decrypt(password, iv, ciphertext []byte) ([]byte, error)
  • func (this CipherOFB) Encrypt(rand io.Reader, password, plaintext []byte) ([]byte, []byte, error)
  • func (this CipherOFB) Name() string

Variables

var Cipher3DESCBC = CipherCBC{
	// contains filtered or unexported fields
}

var Cipher3DESCFB = CipherCFB{
	// contains filtered or unexported fields
}

var Cipher3DESCTR = CipherCTR{
	// contains filtered or unexported fields
}

var Cipher3DESOFB = CipherOFB{
	// contains filtered or unexported fields
}

var CipherAES128CBC = CipherCBC{
	// contains filtered or unexported fields
}

AES_CBC 模式

var CipherAES128CFB = CipherCFB{
	// contains filtered or unexported fields
}

AES_CFB 模式

var CipherAES128CTR = CipherCTR{
	// contains filtered or unexported fields
}

AES_CTR 模式

var CipherAES128OFB = CipherOFB{
	// contains filtered or unexported fields
}

AES_OFB 模式

var CipherAES192CBC = CipherCBC{
	// contains filtered or unexported fields
}

var CipherAES192CFB = CipherCFB{
	// contains filtered or unexported fields
}

var CipherAES192CTR = CipherCTR{
	// contains filtered or unexported fields
}

var CipherAES192OFB = CipherOFB{
	// contains filtered or unexported fields
}

var CipherAES256CBC = CipherCBC{
	// contains filtered or unexported fields
}

var CipherAES256CFB = CipherCFB{
	// contains filtered or unexported fields
}

var CipherAES256CTR = CipherCTR{
	// contains filtered or unexported fields
}

var CipherAES256OFB = CipherOFB{
	// contains filtered or unexported fields
}

var CipherDESCBC = CipherCBC{
	// contains filtered or unexported fields
}

DES_CBC 模式

var CipherDESCFB = CipherCFB{
	// contains filtered or unexported fields
}

DES_CFB 模式

var CipherDESCTR = CipherCTR{
	// contains filtered or unexported fields
}

DES_CTR 模式

var CipherDESOFB = CipherOFB{
	// contains filtered or unexported fields
}

DES_OFB 模式

var CipherGrasshopperCBC = CipherCBC{
	// contains filtered or unexported fields
}

GRASSHOPPER_CBC 模式

var CipherGrasshopperCFB = CipherCFB{
	// contains filtered or unexported fields
}

GRASSHOPPER_CFB 模式

var CipherGrasshopperCTR = CipherCTR{
	// contains filtered or unexported fields
}

GRASSHOPPER_CTR 模式

var CipherGrasshopperOFB = CipherOFB{
	// contains filtered or unexported fields
}

GRASSHOPPER_OFB 模式

var CipherSM4CBC = CipherCBC{
	// contains filtered or unexported fields
}

SM4_CBC 模式

var CipherSM4CFB = CipherCFB{
	// contains filtered or unexported fields
}

SM4_CFB 模式

var CipherSM4CTR = CipherCTR{
	// contains filtered or unexported fields
}

SM4_CTR 模式

var CipherSM4OFB = CipherOFB{
	// contains filtered or unexported fields
}

SM4_OFB 模式

var IncorrectPasswordError = errors.New("pkcs1: decryption password incorrect")

IncorrectPasswordError is returned when an incorrect password is detected.

Functions

func AddCipher

func AddCipher(name string, cipher func() Cipher)

添加加密

func CheckPEMCipher

func CheckPEMCipher(name string) bool

检测 Cipher 类型

func DecryptPEMBlock

func DecryptPEMBlock(b *pem.Block, password []byte) ([]byte, error)

DecryptPEMBlock takes a PEM block encrypted according to RFC 1423 and the password used to encrypt it and returns a slice of decrypted DER encoded bytes. It inspects the DEK-Info header to determine the algorithm used for decryption. If no DEK-Info header is present, an error is returned. If an incorrect password is detected an IncorrectPasswordError is returned. Because of deficiencies in the format, it's not always possible to detect an incorrect password. In these cases no error will be returned but the decrypted DER bytes will be random noise.

Deprecated: Legacy PEM encryption as specified in RFC 1423 is insecure by design. Since it does not authenticate the ciphertext, it is vulnerable to padding oracle attacks that can let an attacker recover the plaintext.

func DeriveKey

func DeriveKey(password, salt []byte, keySize int) []byte

密钥生成器

func EncryptPEMBlock

func EncryptPEMBlock(rand io.Reader, blockType string, data, password []byte, cipher Cipher) (*pem.Block, error)

EncryptPEMBlock returns a PEM block of the specified type holding the given DER encoded data encrypted with the specified algorithm and password according to RFC 1423.

Deprecated: Legacy PEM encryption as specified in RFC 1423 is insecure by design. Since it does not authenticate the ciphertext, it is vulnerable to padding oracle attacks that can let an attacker recover the plaintext.

func IsEncryptedPEMBlock

func IsEncryptedPEMBlock(b *pem.Block) bool

IsEncryptedPEMBlock returns whether the PEM block is password encrypted according to RFC 1423.

Deprecated: Legacy PEM encryption as specified in RFC 1423 is insecure by design. Since it does not authenticate the ciphertext, it is vulnerable to padding oracle attacks that can let an attacker recover the plaintext.

Types

type Cipher

type Cipher interface {
	// 名称
	Name() string

	// 块大小
	BlockSize() int

	// 加密, 返回: [加密后数据, iv, error]
	Encrypt(rand io.Reader, key, plaintext []byte) ([]byte, []byte, error)

	// 解密
	Decrypt(key, iv, ciphertext []byte) ([]byte, error)
}

加密接口

func GetCipher

func GetCipher(name string) (Cipher, error)

获取加密

func GetPEMCipher

func GetPEMCipher(name string) Cipher

获取 Cipher 类型

type CipherCBC

type CipherCBC struct {
	// contains filtered or unexported fields
}

CBC 模式加密

func (CipherCBC) BlockSize

func (this CipherCBC) BlockSize() int

块大小

func (CipherCBC) Decrypt

func (this CipherCBC) Decrypt(password, iv, ciphertext []byte) ([]byte, error)

解密

func (CipherCBC) Encrypt

func (this CipherCBC) Encrypt(rand io.Reader, password, plaintext []byte) ([]byte, []byte, error)

加密

func (CipherCBC) Name

func (this CipherCBC) Name() string

名称

type CipherCFB

type CipherCFB struct {
	// contains filtered or unexported fields
}

CFB 模式加密

func (CipherCFB) BlockSize

func (this CipherCFB) BlockSize() int

块大小

func (CipherCFB) Decrypt

func (this CipherCFB) Decrypt(password, iv, ciphertext []byte) ([]byte, error)

解密

func (CipherCFB) Encrypt

func (this CipherCFB) Encrypt(rand io.Reader, password, plaintext []byte) ([]byte, []byte, error)

加密

func (CipherCFB) Name

func (this CipherCFB) Name() string

名称

type CipherCTR

type CipherCTR struct {
	// contains filtered or unexported fields
}

CTR 模式加密

func (CipherCTR) BlockSize

func (this CipherCTR) BlockSize() int

块大小

func (CipherCTR) Decrypt

func (this CipherCTR) Decrypt(password, iv, ciphertext []byte) ([]byte, error)

解密

func (CipherCTR) Encrypt

func (this CipherCTR) Encrypt(rand io.Reader, password, plaintext []byte) ([]byte, []byte, error)

加密

func (CipherCTR) Name

func (this CipherCTR) Name() string

名称

type CipherOFB

type CipherOFB struct {
	// contains filtered or unexported fields
}

OFB 模式加密

func (CipherOFB) BlockSize

func (this CipherOFB) BlockSize() int

块大小

func (CipherOFB) Decrypt

func (this CipherOFB) Decrypt(password, iv, ciphertext []byte) ([]byte, error)

解密

func (CipherOFB) Encrypt

func (this CipherOFB) Encrypt(rand io.Reader, password, plaintext []byte) ([]byte, []byte, error)

加密

func (CipherOFB) Name

func (this CipherOFB) Name() string

名称