composite

type EncryptedData struct {
	EncAlg     string                 `json:"encalg,omitempty"`
	EncType    string                 `json:"enctype,omitempty"`
	Ciphertext []byte                 `json:"ciphertext,omitempty"`
	IV         []byte                 `json:"iv,omitempty"`
	Tag        []byte                 `json:"tag,omitempty"`
	Recipients []*RecipientWrappedKey `json:"recipients,omitempty"`
	// SingleRecipientAAD is the result of an AAD update using a single recipient JWE envelope with recipient headers.
	// The JWE encrypter in this framework rebuilds this AAD value when building/parsing the JWE envelope. It does not
	// use this field. It is added here to provide access to the updated AAD for single recipient encryption use by
	// external users of this crypto primitive.
	SingleRecipientAAD []byte `json:"singlerecipientaad,omitempty"`
}

type EncrypterHelper interface {
	// GetSymmetricKeySize gives the size of the Encryption key (CEK) in bytes
	GetSymmetricKeySize() int

	// GetAEAD returns the newly created AEAD primitive used for the content Encryption
	GetAEAD(symmetricKeyValue []byte) (tink.AEAD, error)

	// GetTagSize provides the aead primitive tag size
	GetTagSize() int

	// GetIVSize provides the aead primitive nonce size
	GetIVSize() int

	// BuildEncData will build the []byte representing the ciphertext sent to the end user as a result of the Composite
	// Encryption primitive execution
	BuildEncData(eAlg, eTyp string, recipientsWK []*RecipientWrappedKey, ct, singleRecipientAAD []byte) ([]byte, error)

	// MergeSingleRecipientHeaders for single recipient encryption, recipient header info is available in the key, this
	// function will update AAD with this info and return the marshalled merged result
	MergeSingleRecipientHeaders(recipientWK *RecipientWrappedKey, aad []byte) ([]byte, error)

	// BuildDecData will build the []byte representing the ciphertext coming from encData struct returned as a result of
	// Composite Encrypt() call to prepare the Composite Decryption primitive execution
	BuildDecData(encData *EncryptedData) []byte
}

type PublicKey struct {
	KID   string `json:"kid,omitempty"`
	X     []byte `json:"x,omitempty"`
	Y     []byte `json:"y,omitempty"`
	Curve string `json:"curve,omitempty"`
	Type  string `json:"type,omitempty"`
}

type RecipientWrappedKey struct {
	KID          string    `json:"kid,omitempty"`
	EncryptedCEK []byte    `json:"encryptedcek,omitempty"`
	EPK          PublicKey `json:"epk,omitempty"`
	Alg          string    `json:"alg,omitempty"`
}

type RegisterCompositeAEADEncHelper struct {
	// contains filtered or unexported fields
}