Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

security

package

Go to main page

Versions in this module

v1

v1.5.3

Dec 30, 2025

Changes in this version

type TrustConfigValidateArgs

+ IgnoreValidity optional.Optional[bool]

v1.5.2

Apr 27, 2025

Changes in this version

type SignCertArgs

+ CrossSchema enc.Wire

type TrustConfig

+ UseDataNameFwHint bool

type TrustConfigValidateArgs

+ UseDataNameFwHint optional.Optional[bool]

v1.5.1

Apr 16, 2025

Changes in this version

+ type CertCache struct

+ func NewCertCache() *CertCache

+ func (cc *CertCache) Get(name enc.Name) (ndn.Data, bool)

+ func (cc *CertCache) Put(cert ndn.Data)

v1.5.0

Feb 15, 2025

Changes in this version

+ func GetIdentityFromCertName(name enc.Name) (enc.Name, error)

+ func SelfSign(args SignCertArgs) (enc.Wire, error)

v1.4.3

Jan 25, 2025

Changes in this version

+ const PEM_HEADER_KEY

+ const PEM_HEADER_NAME

+ const PEM_HEADER_SIGTYPE

+ const PEM_HEADER_VALIDITY

+ const PEM_TYPE_CERT

+ const PEM_TYPE_SECRET

+ func CertIsExpired(cert ndn.Data) bool

+ func DecodeFile(content []byte) (signers []ndn.Signer, certs [][]byte, err error)

+ func GetIdentityFromKeyName(name enc.Name) (enc.Name, error)

+ func GetKeyNameFromCertName(name enc.Name) (enc.Name, error)

+ func MakeCertName(keyName enc.Name, issuerId enc.Component, version uint64) (enc.Name, error)

+ func MakeKeyName(name enc.Name) enc.Name

+ func PemDecode(str []byte) [][]byte

+ func PemEncode(raw []byte) ([]byte, error)

+ func SignCert(args SignCertArgs) (enc.Wire, error)

+ type SignCertArgs struct

+ Data ndn.Data

+ Description map[string]string

+ IssuerId enc.Component

+ NotAfter time.Time

+ NotBefore time.Time

+ Signer ndn.Signer

+ type TrustConfig struct

+ func NewTrustConfig(keyChain ndn.KeyChain, schema ndn.TrustSchema, roots []enc.Name) (*TrustConfig, error)

+ func (tc *TrustConfig) String() string

+ func (tc *TrustConfig) Suggest(name enc.Name) ndn.Signer

+ func (tc *TrustConfig) Validate(args TrustConfigValidateArgs)

+ type TrustConfigValidateArgs struct

+ Callback func(bool, error)

+ Data ndn.Data

+ DataSigCov enc.Wire

+ Fetch func(enc.Name, *ndn.InterestConfig, ndn.ExpressCallbackFunc)

+ OverrideName enc.Name

v1.4.2

Jan 3, 2025

Changes in this version

+ func Ed25519DerivePubKey(privKey ed25519.PrivateKey) ed25519.PublicKey

+ func NewEdSigner(forCert bool, forInt bool, expireTime time.Duration, key ed25519.PrivateKey, ...) ndn.Signer

v1.4.1

Dec 24, 2024

v1.4.0

Dec 24, 2024

Changes in this version

+ func CheckHmacSig(sigCovered enc.Wire, sigValue []byte, key []byte) bool

+ func EcdsaValidate(sigCovered enc.Wire, sig ndn.Signature, pubKey *ecdsa.PublicKey) bool

+ func EddsaValidate(sigCovered enc.Wire, sig ndn.Signature, pubKey ed25519.PublicKey) bool

+ func HmacValidate(sigCovered enc.Wire, sig ndn.Signature, key []byte) bool

+ func NewEccSigner(forCert bool, forInt bool, expireTime time.Duration, key *ecdsa.PrivateKey, ...) ndn.Signer

+ func NewEmptySigner() ndn.Signer

+ func NewHmacIntSigner(key []byte, timer ndn.Timer) ndn.Signer

+ func NewHmacSigner(keyName enc.Name, key []byte, forCert bool, expireTime time.Duration) ndn.Signer

+ func NewRsaSigner(forCert bool, forInt bool, expireTime time.Duration, key *rsa.PrivateKey, ...) ndn.Signer

+ func NewSha256IntSigner(timer ndn.Timer) ndn.Signer

+ func NewSha256Signer() ndn.Signer

+ func RsaValidate(sigCovered enc.Wire, sig ndn.Signature, pubKey *rsa.PublicKey) bool

+ func Sha256Validate(sigCovered enc.Wire, sig ndn.Signature) bool