crypto

package

v0.36.0 Latest Latest Go to latest Published: Apr 12, 2026 License: MIT Imports: 7 Imported by: 0

Details

This section is empty.

This section is empty.

func Decrypt(key, ciphertext []byte) ([]byte, error)

Decrypt reverses Encrypt. Returns an error if the tag check fails.

func Encrypt(key, plaintext []byte) ([]byte, error)

Encrypt encrypts plaintext with AES-GCM-256. Output layout: [12-byte nonce][ciphertext][16-byte GCM tag].

func LoadKeyFromEnv(envVar string) ([]byte, error)

LoadKeyFromEnv reads a 32-byte AES-256 key from the named environment variable. Accepts standard base64, URL-safe base64, hex, or raw 32 bytes.

This section is empty.