stack

package

v0.3.7 Latest Latest Go to latest Published: Aug 2, 2026 License: MIT Imports: 8 Imported by: 0

Details

Package stack implements symmetric secure:v1 encryption for recipe secrets.

View Source

const SymmetricKeyBytes = 32

SymmetricKeyBytes is the AES-256 key size for secure:v1.

This section is empty.

func DecryptSymmetricV1(key []byte, value string) (string, error)

DecryptSymmetricV1 decrypts inner form "v1:<base64-nonce>:<base64-ciphertext>".

func EncryptSymmetricV1(key []byte, plaintext string) (string, error)

EncryptSymmetricV1 encrypts plaintext with key; inner form is v1:<nonce-b64>:<ct-b64>.

func FormatSecureRef(key []byte, plaintext string) (string, error)

FormatSecureRef returns a full recipe ref "secure:v1:…".

func ValidateSecureRef(ref string) error

ValidateSecureRef checks recipe secret values are secure:v1:… with decodable segments.

This section is empty.