cose

type Algorithm int64

type ContentEncryption struct {
	KeyBits int
	NewAead func(key []byte) (cipher.AEAD, error)
}

type DecryptOptions struct {
	// ExternalAad is additional authenticated data not carried in the message.
	ExternalAad []byte
}

type DecryptResult struct {
	Plaintext []byte
	// ContentType is the content protected header's content type: a string, an int64, or nil if
	// absent.
	ContentType any
	// KeyIdentifier is the key identifier of the recipient that was used for decryption, or nil
	// if absent.
	KeyIdentifier []byte
	// Protected is the decoded content protected header map.
	Protected map[any]any
}

type EncryptOptions struct {
	// ContentEncryptionAlgorithm defaults to A256GCM.
	ContentEncryptionAlgorithm Algorithm
	// KeyIdentifier identifies the recipient public key and is placed in the recipient
	// unprotected header.
	KeyIdentifier []byte
	// ContentType describes the plaintext and is placed in the content protected header. It must
	// be a media type string or a CoAP Content-Format integer.
	ContentType any
	// ExternalAad is additional authenticated data not carried in the message.
	ExternalAad []byte
	// Rand defaults to crypto/rand.Reader.
	Rand io.Reader
}