crypto

package

v0.5.0 Latest Latest Go to latest Published: Jan 4, 2026 License: MIT Imports: 6 Imported by: 0

Details

This section is empty.

View Source

var (
	ErrInvalidCiphertext = errors.New("invalid ciphertext")
	ErrInvalidKey        = errors.New("invalid encryption key")
)

func DecodeKey(encoded string) ([]byte, error)

DecodeKey decodes a base64-encoded key

func EncodeKey(key []byte) string

EncodeKey encodes a key to base64 for storage

func GenerateKey() ([]byte, error)

GenerateKey generates a random 32-byte encryption key

type Encryptor struct {
	// contains filtered or unexported fields
}

Encryptor provides encryption/decryption operations using XChaCha20-Poly1305

func NewEncryptor(key []byte) (*Encryptor, error)

NewEncryptor creates a new encryptor with the given 32-byte key

func (e *Encryptor) Decrypt(ciphertext string) ([]byte, error)

Decrypt decrypts base64-encoded ciphertext (with nonce prepended)

func (e *Encryptor) DecryptMap(data map[string]interface{}, sensitiveKeys map[string]bool) error

DecryptMap decrypts all string values in a map that match the given keys

func (e *Encryptor) DecryptString(ciphertext string) (string, error)

DecryptString decrypts a base64-encoded ciphertext to a string

func (e *Encryptor) Encrypt(plaintext []byte) (string, error)

Encrypt encrypts plaintext and returns base64-encoded ciphertext with nonce prepended

func (e *Encryptor) EncryptMap(data map[string]interface{}, sensitiveKeys map[string]bool) error

EncryptMap encrypts all string values in a map that match the given keys

func (e *Encryptor) EncryptString(plaintext string) (string, error)

EncryptString encrypts a string value