security

func Decrypt ¶

func Decrypt(ciphertext, key, iv []byte) ([]byte, error)

Perform AES-256-CBC decryption with PKCS#7 unpadding.

func DeriveKey ¶

func DeriveKey(password string, salt []byte, iterations int) []byte

Derives a 32-byte AES key from a password and salt using PBKDF2-HMAC-SHA256.

func Encrypt ¶

func Encrypt(plaintext, key, iv []byte) ([]byte, error)

Perform AES-256-CBC encryption with PKCS#7 padding.

func GenerateDeterministicRSAKeys ¶

func GenerateDeterministicRSAKeys(sourceFile, password string) error

Writes "key.pem" using the sourceFile and password for entropy.

func GenerateRandomSalt ¶

func GenerateRandomSalt() []byte

func GetKeyFromPEM ¶

func GetKeyFromPEM(filename string) ([]byte, error)

Reads a PEM file, strips headers, and hashes the content to derive a 32-byte key.