var RandReader … const defaultP2C … const defaultP2SSize … type symmetricKeyCipher … type symmetricMac … type aeadParts … type aeadContentCipher … type randomKeyGenerator … type staticKeyGenerator … // Create a new content cipher based on AES-GCM func newAESGCM(keySize int) contentCipher { … } // Create a new content cipher based on AES-CBC+HMAC func newAESCBC(keySize int) contentCipher { … } // Get an AEAD cipher object for the given content encryption algorithm func getContentCipher(alg ContentEncryption) contentCipher { … } // getPbkdf2Params returns the key length and hash function used in // pbkdf2.Key. func getPbkdf2Params(alg KeyAlgorithm) (int, func() hash.Hash) { … } // getRandomSalt generates a new salt of the given size. func getRandomSalt(size int) ([]byte, error) { … } // newSymmetricRecipient creates a JWE encrypter based on AES-GCM key wrap. func newSymmetricRecipient(keyAlg KeyAlgorithm, key []byte) (recipientKeyInfo, error) { … } // newSymmetricSigner creates a recipientSigInfo based on the given key. func newSymmetricSigner(sigAlg SignatureAlgorithm, key []byte) (recipientSigInfo, error) { … } // Generate a random key for the given content cipher func (ctx randomKeyGenerator) genKey() ([]byte, rawHeader, error) { … } // Key size for random generator func (ctx randomKeyGenerator) keySize() int { … } // Generate a static key (for direct mode) func (ctx staticKeyGenerator) genKey() ([]byte, rawHeader, error) { … } // Key size for static generator func (ctx staticKeyGenerator) keySize() int { … } // Get key size for this cipher func (ctx aeadContentCipher) keySize() int { … } // Encrypt some data func (ctx aeadContentCipher) encrypt(key, aad, pt []byte) (*aeadParts, error) { … } // Decrypt some data func (ctx aeadContentCipher) decrypt(key, aad []byte, parts *aeadParts) ([]byte, error) { … } // Encrypt the content encryption key. func (ctx *symmetricKeyCipher) encryptKey(cek []byte, alg KeyAlgorithm) (recipientInfo, error) { … } // Decrypt the content encryption key. func (ctx *symmetricKeyCipher) decryptKey(headers rawHeader, recipient *recipientInfo, generator keyGenerator) ([]byte, error) { … } // Sign the given payload func (ctx symmetricMac) signPayload(payload []byte, alg SignatureAlgorithm) (Signature, error) { … } // Verify the given payload func (ctx symmetricMac) verifyPayload(payload []byte, mac []byte, alg SignatureAlgorithm) error { … } // Compute the HMAC based on the given alg value func (ctx symmetricMac) hmac(payload []byte, alg SignatureAlgorithm) ([]byte, error) { … }
Codebase Browser
kubernetes