Directories
¶
| Path | Synopsis |
|---|---|
|
Package encryption provides authenticated encryption over a rotatable set of keys.
|
Package encryption provides authenticated encryption over a rotatable set of keys. |
|
aes
Package aes contains the interfaces and implementations for encrypting and decrypting data.
|
Package aes contains the interfaces and implementations for encrypting and decrypting data. |
|
config
Package encryptioncfg builds an encryption keyring over a caller-supplied encryption.Keyset, with one cipher provider — AES-256-GCM today — governing every key in the ring.
|
Package encryptioncfg builds an encryption keyring over a caller-supplied encryption.Keyset, with one cipher provider — AES-256-GCM today — governing every key in the ring. |
|
kms
Package kms groups the encryption.KeyWrapper implementations.
|
Package kms groups the encryption.KeyWrapper implementations. |
|
kms/aws
Package aws wraps key material with AWS KMS.
|
Package aws wraps key material with AWS KMS. |
|
kms/gcp
Package gcp wraps key material with Google Cloud KMS.
|
Package gcp wraps key material with Google Cloud KMS. |
|
kms/local
Package local wraps key material with an encryption.Cipher held in this process.
|
Package local wraps key material with an encryption.Cipher held in this process. |
|
mock
Package encryptionmock provides moq-generated mock implementations of the encryption package's interfaces.
|
Package encryptionmock provides moq-generated mock implementations of the encryption package's interfaces. |
|
Package hashing is the seam for reducing content to a digest, so that which algorithm computes it can be a runtime choice.
|
Package hashing is the seam for reducing content to a digest, so that which algorithm computes it can be a runtime choice. |
|
adler32
Package adler32 implements hashing.Hasher using the Adler-32 checksum.
|
Package adler32 implements hashing.Hasher using the Adler-32 checksum. |
|
canonical
Package canonical hashes Go values by content, producing the same digest for semantically identical values regardless of which process built them, in what order, or how their types declare fields.
|
Package canonical hashes Go values by content, producing the same digest for semantically identical values regardless of which process built them, in what order, or how their types declare fields. |
|
crc64
Package crc64 implements hashing.Hasher using the CRC-64 (ISO) checksum, and exposes ChecksumISO for callers that want the checksum as the integer it natively is.
|
Package crc64 implements hashing.Hasher using the CRC-64 (ISO) checksum, and exposes ChecksumISO for callers that want the checksum as the integer it natively is. |
|
fnv
Package fnv implements hashing.Hasher using the FNV-1a hash, and exposes Sum64a and Sum128a for callers that want the hash as the integer it natively is.
|
Package fnv implements hashing.Hasher using the FNV-1a hash, and exposes Sum64a and Sum128a for callers that want the hash as the integer it natively is. |
|
hmac
Package hmac provides keyed hashing.Hasher implementations, for the cases where a digest has to prove who computed it rather than only what was computed.
|
Package hmac provides keyed hashing.Hasher implementations, for the cases where a digest has to prove who computed it rather than only what was computed. |
|
sha256
Package sha256 implements hashing.Hasher using SHA-256, producing a 32-byte digest.
|
Package sha256 implements hashing.Hasher using SHA-256, producing a 32-byte digest. |
|
sha512
Package sha512 implements hashing.Hasher using SHA-512, producing a 64-byte digest.
|
Package sha512 implements hashing.Hasher using SHA-512, producing a 64-byte digest. |
|
Package requestsigning proves that an HTTP request body was produced by someone holding a shared key, and that it was produced recently.
|
Package requestsigning proves that an HTTP request body was produced by someone holding a shared key, and that it was produced recently. |
|
http
Package http adapts requestsigning to inbound HTTP.
|
Package http adapts requestsigning to inbound HTTP. |
|
Package shredding provides per-subject data keys that can be destroyed, so that erasure reaches media nothing can write to.
|
Package shredding provides per-subject data keys that can be destroyed, so that erasure reaches media nothing can write to. |
|
config
Package shreddingcfg assembles per-subject data keys from environment configuration: the Store the keys live in, the Keys surface that uses them, and the Broadcaster that tells the rest of the fleet when one is destroyed.
|
Package shreddingcfg assembles per-subject data keys from environment configuration: the Store the keys live in, the Keys surface that uses them, and the Broadcaster that tells the rest of the fleet when one is destroyed. |
|
migrations
Package migrations supplies the subject-key table's DDL, rendered for a dialect and table prefix.
|
Package migrations supplies the subject-key table's DDL, rendered for a dialect and table prefix. |
|
mock
Package shreddingmock provides moq-generated mock implementations of the shredding package's interfaces.
|
Package shreddingmock provides moq-generated mock implementations of the shredding package's interfaces. |
Click to show internal directories.
Click to hide internal directories.