seal

type AsymmetricSealer interface {
	PublicKey() crypto.PublicKey

	PrivateKey() crypto.PrivateKey

	EncodePublicKey() (string, error)

	EncodePrivateKey() (string, error)

	Seal(plaintext []byte, recipient crypto.PublicKey) (ciphertext []byte, err error)

	Open(ciphertext []byte, sender crypto.PublicKey) (plaintext []byte, err error)
}

type AsymmetricSigner interface {
	PublicKey() crypto.PublicKey

	PrivateKey() crypto.PrivateKey

	EncodePublicKey() (string, error)

	EncodePrivateKey() (string, error)

	Sign(plaintext []byte) (sign []byte, err error)

	Verify(plaintext, sign []byte) (valid bool, err error)
}

type AuthenticatedCipher interface {
	Key() cipher.AEAD

	Encrypt(plaintext []byte) (ciphertext []byte, err error)

	Decrypt(ciphertext []byte) (plaintext []byte, err error)
}

type CipherOption interface {
	Apply(*CipherOptions) error
}

type CipherOptions struct {
	Algorithm string

	Block cipher.Block
}

type SealService interface {
	IssueSealer(algorithm string, bits int) (AsymmetricSealer, error)

	Sealer(options ...SealerOption) (AsymmetricSealer, error)

	IssueSigner(algorithm string, bits int) (AsymmetricSigner, error)

	Signer(options ...SealerOption) (AsymmetricSigner, error)

	AuthenticatedCipher(options ...CipherOption) (AuthenticatedCipher, error)
}

type SealerOption interface {
	Apply(*SealerOptions) error
}

type SealerOptions struct {
	Algorithm string

	PublicKey crypto.PublicKey

	PrivateKey crypto.PrivateKey // optional

}