Documentation
¶
Index ¶
- Constants
- func New(ctx context.Context, signer, pass, tinkKEKURI, tinkKeysetPath string, ...) (signature.Signer, error)
- func NewTinkSigner(ctx context.Context, kekURI, keysetPath string) (signature.Signer, error)
- func NewTinkSignerWithHandle(kek tink.AEAD, keysetPath string) (signature.Signer, error)
- type File
- type Memory
- type SigningConfig
Constants ¶
View Source
const MemoryScheme = "memory"
View Source
const TinkScheme = "tink"
Variables ¶
This section is empty.
Functions ¶
func NewTinkSigner ¶ added in v1.3.7
NewTinkSigner returns a signature.SignerVerifier that wraps crypto.Signer and a hash function. Provide a path to the encrypted keyset and cloud KMS key URI for decryption
func NewTinkSignerWithHandle ¶ added in v1.3.7
NewTinkSignerWithHandle returns a signature.SignerVerifier that wraps crypto.Signer and a hash function. Provide a path to the encrypted keyset and a key handle for decrypting the keyset
Types ¶
type File ¶ added in v0.12.1
type File struct {
signature.SignerVerifier
}
returns an file based signer and verify, used for spinning up local instances
type Memory ¶
type Memory struct {
signature.ECDSASignerVerifier
}
returns an in-memory signer and verify, used for spinning up local instances
type SigningConfig ¶ added in v1.3.9
type SigningConfig struct {
SigningSchemeOrKeyPath string `json:"signingSchemeOrKeyPath" yaml:"signingSchemeOrKeyPath"`
FileSignerPassword string `json:"fileSignerPassword" yaml:"fileSignerPassword"`
TinkKEKURI string `json:"tinkKEKURI" yaml:"tinkKEKURI"`
TinkKeysetPath string `json:"tinkKeysetPath" yaml:"tinkKeysetPath"`
GCPKMSRetries uint `json:"gcpkmsRetries" yaml:"gcpkmsRetries"`
GCPKMSTimeout uint `json:"gcpkmsTimeout" yaml:"gcpkmsTimeout"`
}
SigningConfig initializes the signer for a specific shard
func (SigningConfig) IsUnset ¶ added in v1.3.9
func (sc SigningConfig) IsUnset() bool
Source Files
Click to show internal directories.
Click to hide internal directories.