transit

Documentation

Index

• type Decryptor
• type Encryptor
• type PublicKeyExporter
• type Service
  • func New(client *api.Client, mountPath, keyName string) (Service, error)
• type Signer
• type Verifier

Types

type Decryptor

type Decryptor interface {
	Decrypt(ctx context.Context, encrypted []byte) ([]byte, error)
}

Decryptor describes decryption operations contract.

type Encryptor

type Encryptor interface {
	Encrypt(ctx context.Context, cleartext []byte) ([]byte, error)
}

Encryptor describes encryption operations contract.

type PublicKeyExporter

type PublicKeyExporter interface {
	PublicKey(ctx context.Context) (crypto.PublicKey, error)
}

PublicKeyExporter represents public key operations contract.

type Service

type Service interface {
	Encryptor
	Decryptor
	Signer
	Verifier
	PublicKeyExporter
}

Service represents the Vault Transit backend operation service contract.

func New

func New(client *api.Client, mountPath, keyName string) (Service, error)

New instantiates a Vault transit backend encryption service.

type Signer

type Signer interface {
	Sign(ctx context.Context, protected []byte) ([]byte, error)
}

Signer represents signature creation operations contract.

type Verifier

type Verifier interface {
	Verify(ctx context.Context, protected, signature []byte) error
}

Verifier represents signature verification operations contract.