xsecretbox

Documentation

Index

• func Open(cryptFile, plainFile string) error
• func Seal(plainFile, cryptFile string) error

Functions

func Open

func Open(cryptFile, plainFile string) error

Open decrypts the file cryptFile with a passphrase read from stdin and stores the result in plainFile (which must not exist):

1. Load cryptFile as BUF.

2. Split BUF into SALT|NONCE|ENC, where SALT is 32-byte, NONCE is 24-byte, and ENC is the remainder.

3. Derive 32-byte KEY (for secretbox) from passphrase with Argon2id using SALT (with time=1, memory=64MB, and threads=4).

4. Decrypt ENC to MSG with NaCL's secretbox.Open using NONCE and KEY.

5. Save MSG to plainFile.

func Seal

func Seal(plainFile, cryptFile string) error

Seal encrypts the file plainFile with a passphrase read from stdin and stores the result in cryptFile (which must not exist):

1. Load plainFile as MSG.

2. Generate 32-byte SALT (for Argon2id) and 24-byte NONCE (for secretbox).

3. Derive 32-byte KEY (for secretbox) from passphrase with Argon2id using SALT (with time=1, memory=64MB, and threads=4).

4. Encrypt MSG to ENC with NaCL's secretbox.Seal using NONCE and KEY.

5. Save SALT|NONCE|ENC to cryptFile.