crypto

type Cipher ¶

type Cipher interface {
	Encrypt(plaintext []byte) ([]byte, error)
	Decrypt(ciphertext []byte) ([]byte, error)
}

type Header ¶

type Header struct {
	Version   int    `json:"version"`
	Recipient string `json:"recipient"` // master public key
	Slots     []Slot `json:"slots"`
}

Header is the parsed header object.

func ParseHeader(data []byte) (*Header, error)

func (h *Header) AddSlot(passphrase, name string, mk *MasterKey) error

func (h *Header) Marshal() ([]byte, error)

func (h *Header) Unlock(passphrase string) (*MasterKey, error)

type MasterKey ¶

type MasterKey struct {
	// contains filtered or unexported fields
}

MasterKey is the unwrapped master identity. It satisfies Cipher: Encrypt seals to the master recipient, Decrypt opens with the identity.

func ParseMasterKey(s string) (*MasterKey, error)

func (m *MasterKey) Decrypt(ciphertext []byte) ([]byte, error)

func (m *MasterKey) Encrypt(plaintext []byte) ([]byte, error)

func (m *MasterKey) String() string

type PassphraseCipher ¶

type PassphraseCipher struct {
	// contains filtered or unexported fields
}

PassphraseCipher encrypts to an age scrypt recipient (symmetric, passphrase-derived). In the header model it wraps key-slot contents, not data blobs.

func NewPassphraseCipher(passphrase string) *PassphraseCipher

func (c *PassphraseCipher) Decrypt(ciphertext []byte) ([]byte, error)

func (c *PassphraseCipher) Encrypt(plaintext []byte) ([]byte, error)

type Slot ¶

type Slot struct {
	Name    string `json:"name,omitempty"`
	Primary bool   `json:"primary,omitempty"`
	Wrapped []byte `json:"wrapped"` // age scrypt ciphertext of the master identity
}

Slot is one wrapped copy of the master key. Name identifies whose slot it is (user@host), the future hook for per-user factors (TOTP, etc). Primary marks the slot whose owner may rotate/remove other slots; advisory until header signing exists (no server = no cryptographic enforcement), but tooling refuses to remove or demote it.