keysutil

Jun 20, 2018

Changes in this version

type LockManager

+ func (lm *LockManager) GetPolicy(ctx context.Context, req PolicyRequest) (retP *Policy, retUpserted bool, retErr error)

type Policy

+ func (p *Policy) Lock(exclusive bool)

+ func (p *Policy) Unlock()

Jun 6, 2018

Changes in this version

type KeyEntry

+ ConvergentVersion int

Mar 20, 2018

Changes in this version

+ const DefaultCacheSize

+ const DefaultPrefix

+ const DefaultVersionTemplate

+ const EncryptedKeyPolicyVersionTpl

+ var ErrNilPolicy = errors.New("nil policy provided")

+ var ErrNilStorage = errors.New("nil storage provided")

+ var ErrPolicyConvergentEncryption = errors.New("key policy must use convergent encryption")

+ var ErrPolicyConvergentVersion = errors.New("key policy must use convergent version > 2")

+ var ErrPolicyDerivedKeys = errors.New("key policy must use derived keys")

+ func Base62Decode(input string) []byte

+ func Base62Encode(buf []byte) string

+ type EncryptedKeyStorageConfig struct

+ CacheSize int

+ Policy *Policy

+ Prefix string

+ type EncryptedKeyStorageWrapper struct

+ func NewEncryptedKeyStorageWrapper(config EncryptedKeyStorageConfig) (*EncryptedKeyStorageWrapper, error)

+ func (f *EncryptedKeyStorageWrapper) Wrap(s logical.Storage) logical.Storage

type Policy

+ StoragePrefix string

+ VersionTemplate string

+ func LoadPolicy(ctx context.Context, s logical.Storage, path string) (*Policy, error)

+ func NewPolicy(config PolicyConfig) *Policy

+ type PolicyConfig struct

+ AllowPlaintextBackup bool

+ ConvergentEncryption bool

+ DeletionAllowed bool

+ Derived bool

+ Exportable bool

+ KDF int

+ Name string

+ StoragePrefix string

+ Type KeyType

+ VersionTemplate string

Feb 20, 2018

Changes in this version

+ const KeyType_ChaCha20_Poly1305

Dec 21, 2017

Changes in this version

+ type BackupInfo struct

+ Time time.Time

+ Version int

+ type KeyData struct

+ ArchivedKeys *archivedKeys

+ Policy *Policy

type LockManager

+ func (lm *LockManager) BackupPolicy(storage logical.Storage, name string) (string, error)

+ func (lm *LockManager) RestorePolicy(storage logical.Storage, name, backup string) error

+ func (lm *LockManager) UpdateCache(name string, policy *Policy)

type Policy

+ AllowPlaintextBackup bool

+ BackupInfo *BackupInfo

+ RestoreInfo *RestoreInfo

+ func (p *Policy) Backup(storage logical.Storage) (string, error)

type PolicyRequest

+ AllowPlaintextBackup bool

+ type RestoreInfo struct

+ Time time.Time

+ Version int

Nov 14, 2017

Changes in this version

+ const KeyType_RSA2048

+ const KeyType_RSA4096

type KeyEntry

+ RSAKey *rsa.PrivateKey

Jun 7, 2017

Changes in this version

+ const KeyType_ED25519

type KeyEntry

+ DeprecatedCreationTime int64

+ Key []byte

type KeyType

+ func (kt KeyType) HashSignatureInput() bool

type Policy

+ MinEncryptionVersion int

+ type SigningResult struct

+ PublicKey []byte

+ Signature string

Mar 16, 2017

Changes in this version

type LockManager

+ func (lm *LockManager) InvalidatePolicy(name string)

Feb 7, 2017

Changes in this version

type Policy

+ Exportable bool

type PolicyRequest

+ Exportable bool

Dec 6, 2016

Changes in this version

+ const ErrTooOld

+ const Kdf_hkdf_sha256

+ const Kdf_hmac_sha256_counter

+ const KeyType_AES256_GCM96

+ const KeyType_ECDSA_P256

+ type KeyEntry struct

+ AESKey []byte

+ CreationTime int64

+ EC_D *big.Int

+ EC_X *big.Int

+ EC_Y *big.Int

+ FormattedPublicKey string

+ HMACKey []byte

+ type KeyType int

+ func (kt KeyType) DecryptionSupported() bool

+ func (kt KeyType) DerivationSupported() bool

+ func (kt KeyType) EncryptionSupported() bool

+ func (kt KeyType) SigningSupported() bool

+ func (kt KeyType) String() string

+ type LockManager struct

+ func NewLockManager(cacheDisabled bool) *LockManager

+ func (lm *LockManager) CacheActive() bool

+ func (lm *LockManager) DeletePolicy(storage logical.Storage, name string) error

+ func (lm *LockManager) GetPolicyExclusive(storage logical.Storage, name string) (*Policy, *sync.RWMutex, error)

+ func (lm *LockManager) GetPolicyShared(storage logical.Storage, name string) (*Policy, *sync.RWMutex, error)

+ func (lm *LockManager) GetPolicyUpsert(req PolicyRequest) (*Policy, *sync.RWMutex, bool, error)

+ func (lm *LockManager) UnlockPolicy(lock *sync.RWMutex, lockType bool)

+ type Policy struct

+ ArchiveVersion int

+ ConvergentEncryption bool

+ ConvergentVersion int

+ DeletionAllowed bool

+ Derived bool

+ KDF int

+ Key []byte

+ Keys keyEntryMap

+ LatestVersion int

+ MinDecryptionVersion int

+ Name string

+ Type KeyType

+ func (p *Policy) Decrypt(context, nonce []byte, value string) (string, error)

+ func (p *Policy) DeriveKey(context []byte, ver int) ([]byte, error)

+ func (p *Policy) Encrypt(context, nonce []byte, value string) (string, error)

+ func (p *Policy) HMACKey(version int) ([]byte, error)

+ func (p *Policy) LoadArchive(storage logical.Storage) (*archivedKeys, error)

+ func (p *Policy) MigrateKeyToKeysMap()

+ func (p *Policy) NeedsUpgrade() bool

+ func (p *Policy) Persist(storage logical.Storage) error

+ func (p *Policy) Rotate(storage logical.Storage) error

+ func (p *Policy) Serialize() ([]byte, error)

+ func (p *Policy) Sign(hashedInput []byte) (string, error)

+ func (p *Policy) Upgrade(storage logical.Storage) error

+ func (p *Policy) VerifySignature(hashedInput []byte, sig string) (bool, error)

+ type PolicyRequest struct

+ Convergent bool

+ Derived bool

+ KeyType KeyType

+ Name string

+ Storage logical.Storage

+ Upsert bool