kubernetes/staging/src/k8s.io/apiserver/pkg/storage/value/encrypt/aes/aes_test.go

func TestGCMDataStable(t *testing.T) { … }

func TestGCMUnsafeNonceOverflow(t *testing.T) { … }

func assertNonce(t *testing.T, nonce *atomic.Uint64, want uint64) { … }

func runEncrypt(t *testing.T, transformer value.Transformer) { … }

// TestGCMUnsafeCompatibility asserts that encryptions performed via
// NewGCMTransformerWithUniqueKeyUnsafe can be decrypted via NewGCMTransformer.
func TestGCMUnsafeCompatibility(t *testing.T) { … }

func TestGCMLegacyDataCompatibility(t *testing.T) { … }

func TestExtendedNonceGCMLegacyDataCompatibility(t *testing.T) { … }

func TestGCMUnsafeNonceGen(t *testing.T) { … }

func TestGCMNonce(t *testing.T) { … }

func testGCMNonce(t *testing.T, f transformerFunc, infoLen int, check func(int, []byte)) { … }

func TestGCMKeyRotation(t *testing.T) { … }

func testGCMKeyRotation(t *testing.T, f transformerFunc) { … }

func TestCBCKeyRotation(t *testing.T) { … }

var gcmBenchmarks …

func BenchmarkGCMRead(b *testing.B) { … }

func BenchmarkGCMWrite(b *testing.B) { … }

func benchmarkGCMRead(b *testing.B, f transformerFunc, keyLength int, valueLength int, expectStale bool) { … }

func benchmarkGCMWrite(b *testing.B, f transformerFunc, keyLength int, valueLength int) { … }

func BenchmarkCBCRead(b *testing.B) { … }

func BenchmarkCBCWrite(b *testing.B) { … }

func benchmarkCBCRead(b *testing.B, keyLength int, valueLength int, expectStale bool) { … }

func benchmarkCBCWrite(b *testing.B, keyLength int, valueLength int) { … }

func TestRoundTrip(t *testing.T) { … }

type namedTransformerFunc …

type transformerFunc …

func newGCMTransformer(t testing.TB, block cipher.Block, _ []byte) value.Transformer { … }

func newGCMTransformerWithUniqueKeyUnsafeTest(t testing.TB, block cipher.Block, _ []byte) value.Transformer { … }

func newHKDFExtendedNonceGCMTransformerTest(t testing.TB, _ cipher.Block, key []byte) value.Transformer { … }