Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

encryption

package

Go to main page

Versions in this module

v0

v0.10.0

Apr 19, 2026

v0.9.0

Mar 20, 2026

Changes in this version

+ const DefaultMinEstimatedCrackTime

+ const DefaultMinPasswordLength

+ var DefaultMinEstimatedCrackDuration = 10 * 365 * 24 * time.Hour

+ func EstimateCrackTime(password string) time.Duration

+ func GeneratePassword(length int) (string, error)

+ func ParseEstimatedCrackDuration(value string) (time.Duration, error)

+ func ValidatePassword(password string, minLength int, minDuration time.Duration) error

v0.8.0

Feb 21, 2026

v0.7.0

Feb 19, 2026

Changes in this version

+ const KeySize

+ const NonceSize

+ const PBKDF2Iterations

+ const SaltSize

+ var ErrDecryptionFailed = errors.New("encryption: decryption failed (wrong password or corrupted data)")

+ var ErrEmptyCiphertext = errors.New("encryption: ciphertext cannot be empty")

+ var ErrEmptyPassword = errors.New("encryption: password cannot be empty")

+ var ErrEmptyPlaintext = errors.New("encryption: plaintext cannot be empty")

+ var ErrEmptySalt = errors.New("encryption: salt cannot be empty")

+ var ErrInvalidKey = errors.New("encryption: key must be 32 bytes")

+ var ErrInvalidSaltSize = errors.New("encryption: salt must be 16 bytes")

+ var ErrMalformedData = errors.New("encryption: ciphertext too short to contain salt, nonce, and tag")

+ func Decrypt(ciphertext64, password string) ([]byte, error)

+ func DecryptWithKey(ciphertext64 string, key []byte) ([]byte, error)

+ func DeriveKey(password string, salt []byte) ([]byte, error)

+ func Encrypt(plaintext []byte, password string) (string, error)

+ func EncryptWithKey(plaintext, key, salt []byte) (string, error)

+ func GenerateSalt() ([]byte, error)