Documentation
¶
Index ¶
- func ParsePublicKey(s string) (ed25519.PublicKey, error)
- func ParseX25519PublicKey(s string) (*ecdh.PublicKey, error)
- func SaveKeypair(kp *Keypair, path string) error
- func Sign(privKey ed25519.PrivateKey, data []byte) string
- func SignEnvelope(env SignableEnvelope, privKey ed25519.PrivateKey)
- func Verify(pubKey ed25519.PublicKey, data []byte, sig string) error
- func VerifyEnvelope(env SignableEnvelope, pubKey ed25519.PublicKey) error
- type Keypair
- type SignableEnvelope
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ParsePublicKey ¶
ParsePublicKey decodes a base64-encoded public key string.
func ParseX25519PublicKey ¶
ParseX25519PublicKey decodes a base64-encoded X25519 public key string.
func SaveKeypair ¶
SaveKeypair writes the private key seed to a file (32 bytes, base64-encoded).
func Sign ¶
func Sign(privKey ed25519.PrivateKey, data []byte) string
Sign creates an Ed25519 signature over the data.
func SignEnvelope ¶
func SignEnvelope(env SignableEnvelope, privKey ed25519.PrivateKey)
SignEnvelope signs the envelope's payload and sets the signature field.
func VerifyEnvelope ¶
func VerifyEnvelope(env SignableEnvelope, pubKey ed25519.PublicKey) error
VerifyEnvelope verifies the envelope's signature.
Types ¶
type Keypair ¶
type Keypair struct {
PublicKey ed25519.PublicKey
PrivateKey ed25519.PrivateKey
}
Keypair holds an Ed25519 key pair for agent identity.
func GenerateKeypair ¶
GenerateKeypair creates a new random Ed25519 key pair.
func KeypairFromSeed ¶
KeypairFromSeed creates a deterministic key pair from a 32-byte seed.
func LoadKeypair ¶
LoadKeypair reads a keypair from a seed file.
func (*Keypair) PublicKeyString ¶
PublicKeyString returns the base64-encoded public key.
func (*Keypair) X25519PrivateKey ¶
func (kp *Keypair) X25519PrivateKey() (*ecdh.PrivateKey, error)
X25519PrivateKey derives an X25519 private key from the Ed25519 keypair's seed. The derivation matches the standard Ed25519-to-X25519 conversion used by libsodium: SHA-512 of the seed, clamp the lower 32 bytes.
func (*Keypair) X25519PublicKey ¶
X25519PublicKey derives an X25519 public key from the Ed25519 keypair's seed. This uses the standard conversion: hash the Ed25519 seed with SHA-512, clamp the first 32 bytes, and use that as the X25519 private key to derive the public key.
func (*Keypair) X25519PublicKeyString ¶
X25519PublicKeyString returns the base64-encoded X25519 public key.
type SignableEnvelope ¶
type SignableEnvelope interface {
SigningPayload() []byte
SetSignature(sig string)
GetSignature() string
}
SignableEnvelope defines the fields needed for envelope signing. This avoids a circular import with the envelope package.
Source Files