Documentation
¶
Overview ¶
Package hsm provides HSMProvider implementations for use with keeper. SoftHSM is an in-process provider backed by memguard, intended for testing and CI environments. It must not be used in production.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type SoftHSM ¶
type SoftHSM struct {
// contains filtered or unexported fields
}
SoftHSM is a purely in-process HSMProvider backed by a random wrapping key held in a memguard Enclave. It satisfies the keeper.HSMProvider interface and is safe for concurrent use, but provides no hardware-level protection.
func NewSoftHSM ¶
NewSoftHSM generates a random 32-byte wrapping key and seals it into a memguard Enclave. The returned SoftHSM is ready to use immediately.
func (*SoftHSM) Ping ¶
Ping always returns nil for an in-process provider. It satisfies the keeper.HSMProvider interface for health monitoring.
Source Files