tinkca

Documentation

Index

• func GetPrimaryKey(ctx context.Context, kmsKey string) (tink.AEAD, error)
• func KeyHandleToSigner(kh *keyset.Handle) (crypto.Signer, error)
• func NewTinkCA(ctx context.Context, kmsKey, tinkKeysetPath, certPath string) (ca.CertificateAuthority, error)
• func NewTinkCAFromHandle(_ context.Context, tinkKeysetPath, certPath string, primaryKey tink.AEAD) (ca.CertificateAuthority, error)

Functions

func GetPrimaryKey

func GetPrimaryKey(ctx context.Context, kmsKey string) (tink.AEAD, error)

GetPrimaryKey returns a Tink AEAD encryption key from KMS Supports GCP and AWS

func KeyHandleToSigner

func KeyHandleToSigner(kh *keyset.Handle) (crypto.Signer, error)

KeyHandleToSigner converts a key handle to the crypto.Signer interface. Heavily pulls from Tink's signature and subtle packages.

func NewTinkCA

func NewTinkCA(ctx context.Context, kmsKey, tinkKeysetPath, certPath string) (ca.CertificateAuthority, error)

NewTinkCA creates a signer from an encrypted Tink keyset, encrypted with a GCP KMS key.

func NewTinkCAFromHandle

func NewTinkCAFromHandle(_ context.Context, tinkKeysetPath, certPath string, primaryKey tink.AEAD) (ca.CertificateAuthority, error)

NewTinkCAFromHandle creates a signer from an encrypted Tink keyset, encrypted with an AEAD key.