crypto

Documentation

Index

• Variables
• func DecodeArmor(armorStr string) (blockType string, headers map[string]string, data []byte, err error)
• func DecryptSymmetric(ciphertext []byte, secret []byte) (plaintext []byte, err error)
• func EncodeArmor(blockType string, headers map[string]string, data []byte) string
• func EncryptArmorPrivKey(privKeyBytes []byte, passphrase string, algo string) string
• func EncryptSymmetric(plaintext []byte, secret []byte) (ciphertext []byte)
• func UnarmorDecryptPrivKey(armorStr string, passphrase string) (privKey []byte, algo string, err error)

Variables

var BcryptSecurityParameter = 12

BcryptSecurityParameter is security parameter var, and it can be changed within the lcd test. Making the bcrypt security parameter a var shouldn't be a security issue: One can't verify an invalid key by maliciously changing the bcrypt parameter during a runtime vulnerability. The main security threat this then exposes would be something that changes this during runtime before the user creates their key. This vulnerability must succeed to update this to that same value before every subsequent call to the keys command in future startups / or the attacker must get access to the filesystem. However, with a similar threat model (changing variables in runtime), one can cause the user to sign a different tx than what they see, which is a significantly cheaper attack then breaking a bcrypt hash. (Recall that the nonce still exists to break rainbow tables) For further notes on security parameter choice, see README.md

Functions

func DecodeArmor

func DecodeArmor(armorStr string) (blockType string, headers map[string]string, data []byte, err error)

func DecryptSymmetric

func DecryptSymmetric(ciphertext []byte, secret []byte) (plaintext []byte, err error)

secret must be 32 bytes long. Use something like Sha256(Bcrypt(passphrase)) The ciphertext is (secretbox.Overhead + 24) bytes longer than the plaintext.

func EncodeArmor

func EncodeArmor(blockType string, headers map[string]string, data []byte) string

func EncryptArmorPrivKey

func EncryptArmorPrivKey(privKeyBytes []byte, passphrase string, algo string) string

Encrypt and armor the private key.

func EncryptSymmetric

func EncryptSymmetric(plaintext []byte, secret []byte) (ciphertext []byte)

secret must be 32 bytes long. Use something like Sha256(Bcrypt(passphrase)) The ciphertext is (secretbox.Overhead + 24) bytes longer than the plaintext.

func UnarmorDecryptPrivKey

func UnarmorDecryptPrivKey(armorStr string, passphrase string) (privKey []byte, algo string, err error)

UnarmorDecryptPrivKey returns the privkey byte slice, a string of the algo type, and an error