seclib2

Documentation

Index

• Constants
• Variables
• func BcryptPassword(passwd string) (string, error)
• func BcryptVerifyPassword(passwd string, hash string) error
• func CleanCertificate(cert string) string
• func DecodePrivateKey(keyString []byte) (*rsa.PrivateKey, error)
• func Decrypt(privateKey, secret []byte) ([]byte, error)
• func DecryptBase64(privateKey string, secret string) (string, error)
• func Encrypt(publicKey, origData []byte) ([]byte, error)
• func EncryptBase64(publicKey string, message string) (string, error)
• func GenerateDSASSHKeypair() (string, string, error)
• func GeneratePassword(passwd string) (string, error)
• func GenerateRSASSHKeypair() (string, string, error)
• func GenerateRandomBytes(n int) ([]byte, error)
• func GetPublicKeyScheme(pubkey ssh.PublicKey) string
• func HashId(seed string, idx byte, width int) string
• func InitTLSConfig(certFile, keyFile string) (*tls.Config, error)
• func InitTLSConfigByData(caCertBlock, certPEMBlock, keyPEMBlock []byte) (*tls.Config, error)
• func InitTLSConfigWithCA(certFile, keyFile, caCertFile string) (*tls.Config, error)
• func MeetComplxity(passwd string) bool
• func MergeCaCertFiles(cafile string, certfile string) (string, error)
• func NewCert(certfile, keyfile string, ...) (*tls.Certificate, error)
• func NewCertPool(CAFiles []string) (*x509.CertPool, error)
• func RandomPassword2(width int) string
• func ValidatePassword(passwd string) error
• func VerifyPassword(passwd string, hash string) error
• type PasswordStrength
  • func AnalyzePasswordStrenth(passwd string) PasswordStrength
  • func (ps PasswordStrength) Len() int
  • func (ps PasswordStrength) MeetComplexity() bool
• type SSymEncAlg
  • func Alg(alg TSymEncAlg) SSymEncAlg
  • func (alg SSymEncAlg) CbcDecode(cipherText []byte, encryptionKey []byte) ([]byte, error)
  • func (alg SSymEncAlg) CbcDecodeBase64(cipherText string, encryptionKey []byte) ([]byte, error)
  • func (alg SSymEncAlg) CbcEncode(content []byte, encryptionKey []byte) ([]byte, error)
  • func (alg SSymEncAlg) CbcEncodeBase64(content []byte, encryptionKey []byte) (string, error)
  • func (alg SSymEncAlg) CbcEncodeIV(content []byte, encryptionKey []byte, IV []byte) ([]byte, error)
  • func (alg SSymEncAlg) GenerateKey() string
  • func (alg SSymEncAlg) Name() TSymEncAlg
• type TSymEncAlg

Constants

const (
	SYM_ENC_ALG_AES_256 = TSymEncAlg("aes-256")
	SYM_ENC_ALG_SM4_128 = TSymEncAlg("sm4")
)

const (
	DIGITS  = "23456789"
	LETTERS = "abcdefghjkmnpqrstuvwxyz"
	UPPERS  = "ABCDEFGHJKMNPRSTUVWXYZ"
	PUNC    = "@^-+="

	ALL_DIGITS  = "0123456789"
	ALL_LETTERS = "abcdefghijklmnopqrstuvwxyz"
	ALL_UPPERS  = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
	ALL_PUNC    = "~`!@#$%^&*()-_=+[]{}|:';\",./<>?"
)

Variables

var (
	AES_256 = SSymEncAlg{
			// contains filtered or unexported fields
	}
	SM4_128 = SSymEncAlg{
			// contains filtered or unexported fields
	}
)

var CERT_SEP = []byte("-END CERTIFICATE-")

var CHARS = fmt.Sprintf("%s%s%s%s", DIGITS, LETTERS, UPPERS, PUNC)

var WEAK_PASSWORDS []string = []string{}/* 129 elements not displayed */

Functions

func BcryptPassword

func BcryptPassword(passwd string) (string, error)

func BcryptVerifyPassword

func BcryptVerifyPassword(passwd string, hash string) error

func CleanCertificate

func CleanCertificate(cert string) string

func DecodePrivateKey

func DecodePrivateKey(keyString []byte) (*rsa.PrivateKey, error)

func Decrypt

func Decrypt(privateKey, secret []byte) ([]byte, error)

func DecryptBase64

func DecryptBase64(privateKey string, secret string) (string, error)

func Encrypt

func Encrypt(publicKey, origData []byte) ([]byte, error)

func EncryptBase64

func EncryptBase64(publicKey string, message string) (string, error)

func GenerateDSASSHKeypair

func GenerateDSASSHKeypair() (string, string, error)

func GeneratePassword

func GeneratePassword(passwd string) (string, error)

func GenerateRSASSHKeypair

func GenerateRSASSHKeypair() (string, string, error)

func GenerateRandomBytes

func GenerateRandomBytes(n int) ([]byte, error)

func GetPublicKeyScheme

func GetPublicKeyScheme(pubkey ssh.PublicKey) string

func HashId

func HashId(seed string, idx byte, width int) string

func InitTLSConfig

func InitTLSConfig(certFile, keyFile string) (*tls.Config, error)

func InitTLSConfigByData

func InitTLSConfigByData(caCertBlock, certPEMBlock, keyPEMBlock []byte) (*tls.Config, error)

func InitTLSConfigWithCA

func InitTLSConfigWithCA(certFile, keyFile, caCertFile string) (*tls.Config, error)

func MeetComplxity

func MeetComplxity(passwd string) bool

func MergeCaCertFiles

func MergeCaCertFiles(cafile string, certfile string) (string, error)

MergeCaCertFiles concatenates cert and ca file to form a chain, write it to a tmpfile then return the path

Callers are responsible for removing the returned tmpfile

func NewCert

func NewCert(certfile, keyfile string, parseFunc func([]byte, []byte) (tls.Certificate, error)) (*tls.Certificate, error)

NewCert generates TLS cert by using the given cert,key and parse function.

func NewCertPool

func NewCertPool(CAFiles []string) (*x509.CertPool, error)

NewCertPool creates x509 certPool with provided CA files.

func RandomPassword2

func RandomPassword2(width int) string

func ValidatePassword

func ValidatePassword(passwd string) error

func VerifyPassword

func VerifyPassword(passwd string, hash string) error

Types

type PasswordStrength

type PasswordStrength struct {
	Digits     int
	Lowercases int
	Uppercases int
	Punctuats  int
	Invalid    []byte
}

func AnalyzePasswordStrenth

func AnalyzePasswordStrenth(passwd string) PasswordStrength

func (PasswordStrength) Len

func (ps PasswordStrength) Len() int

func (PasswordStrength) MeetComplexity

func (ps PasswordStrength) MeetComplexity() bool

type SSymEncAlg

type SSymEncAlg struct {
	// contains filtered or unexported fields
}

func Alg

func Alg(alg TSymEncAlg) SSymEncAlg

func (SSymEncAlg) CbcDecode

func (alg SSymEncAlg) CbcDecode(cipherText []byte, encryptionKey []byte) ([]byte, error)

func (SSymEncAlg) CbcDecodeBase64

func (alg SSymEncAlg) CbcDecodeBase64(cipherText string, encryptionKey []byte) ([]byte, error)

func (SSymEncAlg) CbcEncode

func (alg SSymEncAlg) CbcEncode(content []byte, encryptionKey []byte) ([]byte, error)

func (SSymEncAlg) CbcEncodeBase64

func (alg SSymEncAlg) CbcEncodeBase64(content []byte, encryptionKey []byte) (string, error)

func (SSymEncAlg) CbcEncodeIV

func (alg SSymEncAlg) CbcEncodeIV(content []byte, encryptionKey []byte, IV []byte) ([]byte, error)

AES-256-CBC key: 32bytes=256bites

func (SSymEncAlg) GenerateKey

func (alg SSymEncAlg) GenerateKey() string

func (SSymEncAlg) Name

func (alg SSymEncAlg) Name() TSymEncAlg

type TSymEncAlg

type TSymEncAlg string