cryptoutils

Documentation

Index

• func CompressEnv(data []byte) ([]byte, error)
• func DecompressEnv(data []byte) ([]byte, error)
• func DecryptENV(pmk []byte, encryptedData []byte, nonce []byte) ([]byte, error)
• func DecryptPrivateKey(encryptedPrivateKey *config.EncryptedPrivateKey, password string, ...) ([]byte, error)
• func DeletePrivateKey(user string) error
• func DeriveWrapKey(sharedSecret []byte) ([]byte, error)
• func EncodeEnv(env map[string]string) ([]byte, error)
• func EncryptENV(pmk []byte, data []byte) ([]byte, []byte, error)
• func EncryptPrivateKey(privateKey *ecdh.PrivateKey, password string, ...) (*config.EncryptedPrivateKey, error)
• func GenerateKeyPair(password string) (*config.KeyPair, error)
• func GenerateServiceRoleKeyPair() (*config.ServiceRoleKeyPair, error)
• func LoadPrivateKey(user string) ([]byte, error)
• func NormalizeEnv(env map[string]string) []byte
• func ParseEnv(raw []byte) (map[string]string, error)
• func PrepareEnvForRollback(env map[string]string) ([]byte, error)
• func PrepareEnvForStorage(parsed map[string]string) ([]byte, error)
• func ReadCompressedEnv(data []byte) (map[string]string, error)
• func RemoveUserEmail() error
• func RemoveUserId() error
• func SavePrivateKey(user string, secret []byte) error
• func SaveRefreshToken(refreshToken string) error
• func SaveUserEmail(email string) error
• func SaveUserId(id uuid.UUID) error
• func UnwrapPMK(wrapped *WrappedKey, userPrivateKey []byte) ([]byte, error)
• func X25519SharedSecret(privateKeyBytes []byte, peerPublicKeyBytes []byte) ([]byte, error)
• type DiffingResult
  • func DiffEnvVersions(oldVersion, newVersion map[string]string) DiffingResult
• type EphemeralKeyPair
  • func GenerateEphemeralKeyPair() (*EphemeralKeyPair, error)
• type WrappedKey
  • func WrapPMKForUser(pmk []byte, recipientUserPublicKey []byte) (*WrappedKey, error)

Functions

func CompressEnv

func CompressEnv(data []byte) ([]byte, error)

func DecompressEnv

func DecompressEnv(data []byte) ([]byte, error)

func DecryptENV

func DecryptENV(pmk []byte, encryptedData []byte, nonce []byte) ([]byte, error)

func DecryptPrivateKey

func DecryptPrivateKey(
	encryptedPrivateKey *config.EncryptedPrivateKey,
	password string,
	argonParams *config.Argon2idParams,
) ([]byte, error)

func DeletePrivateKey

func DeletePrivateKey(user string) error

func DeriveWrapKey

func DeriveWrapKey(sharedSecret []byte) ([]byte, error)

func EncodeEnv

func EncodeEnv(env map[string]string) ([]byte, error)

func EncryptENV

func EncryptENV(pmk []byte, data []byte) ([]byte, []byte, error)

func EncryptPrivateKey

func EncryptPrivateKey(privateKey *ecdh.PrivateKey, password string, argonParams *config.Argon2idParams) (*config.EncryptedPrivateKey, error)

func GenerateKeyPair

func GenerateKeyPair(password string) (*config.KeyPair, error)

func GenerateServiceRoleKeyPair

func GenerateServiceRoleKeyPair() (*config.ServiceRoleKeyPair, error)

func LoadPrivateKey

func LoadPrivateKey(user string) ([]byte, error)

func NormalizeEnv

func NormalizeEnv(env map[string]string) []byte

func ParseEnv

func ParseEnv(raw []byte) (map[string]string, error)

func PrepareEnvForRollback

func PrepareEnvForRollback(env map[string]string) ([]byte, error)

func PrepareEnvForStorage

func PrepareEnvForStorage(parsed map[string]string) ([]byte, error)

func ReadCompressedEnv

func ReadCompressedEnv(data []byte) (map[string]string, error)

func RemoveUserEmail

func RemoveUserEmail() error

func RemoveUserId

func RemoveUserId() error

func SavePrivateKey

func SavePrivateKey(user string, secret []byte) error

func SaveRefreshToken

func SaveRefreshToken(refreshToken string) error

func SaveUserEmail

func SaveUserEmail(email string) error

func SaveUserId

func SaveUserId(id uuid.UUID) error

func UnwrapPMK

func UnwrapPMK(
	wrapped *WrappedKey,
	userPrivateKey []byte,
) ([]byte, error)

func X25519SharedSecret

func X25519SharedSecret(
	privateKeyBytes []byte,
	peerPublicKeyBytes []byte,
) ([]byte, error)

Types

type DiffingResult

type DiffingResult struct {
	Added    []string `json:"added"`
	Removed  []string `json:"removed"`
	Modified []string `json:"modified"`
}

func DiffEnvVersions

func DiffEnvVersions(oldVersion, newVersion map[string]string) DiffingResult

type EphemeralKeyPair

type EphemeralKeyPair struct {
	PrivateKey []byte // 32 bytes (destroy after use)
	PublicKey  []byte // 32 bytes (sent to server)
}

func GenerateEphemeralKeyPair

func GenerateEphemeralKeyPair() (*EphemeralKeyPair, error)

type WrappedKey

type WrappedKey struct {
	WrappedPMK       []byte `json:"wrapped_pmk"`        // AES-GCM ciphertext
	WrapNonce        []byte `json:"wrap_nonce"`         // 12 bytes
	WrapEphemeralPub []byte `json:"wrap_ephemeral_pub"` // 32 bytes
}

func WrapPMKForUser

func WrapPMKForUser(
	pmk []byte,
	recipientUserPublicKey []byte,
) (*WrappedKey, error)