Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func DecryptCredentials ¶
DecryptCredentials reverses EncryptCredentials.
func DecryptString ¶ added in v0.2.0
DecryptString reverses EncryptString. It fails if the ciphertext is corrupted, truncated, or was not produced on this device (the device key differs).
func EncryptCredentials ¶
EncryptCredentials encrypts AWS credentials using the device-specific key. The access and secret keys are combined with a ":" separator.
func EncryptString ¶ added in v0.2.0
EncryptString encrypts an arbitrary string using the device-specific key (AES-256-GCM, random nonce, base64-encoded result). The output includes the nonce as a prefix to the ciphertext.
func GetDeviceKey ¶
GetDeviceKey derives a unique encryption key from device-specific data. It dispatches to a platform-specific collector, falling back to a hostname-based identity when none is available, then SHA-256s the result together with a project-wide salt.
Types ¶
This section is empty.
Source Files