keys

type Algorithm interface {
	Name() string
	Provider() Provider
}

type BlockMode string

type CryptOptions struct {
	Block   BlockMode
	Padding PaddingMode
	Hash    crypto.Hash // hash 算法 id
	Label   []byte
	IV      []byte // 初始化向量
}

type Decrypter interface {
	Decrypt(data []byte, options *CryptOptions) ([]byte, *CryptOptions, error)
}

type Encrypter interface {
	Encrypt(data []byte, options *CryptOptions) ([]byte, *CryptOptions, error)
}

type KeyAlgorithmName string

type KeyPair interface {
	PublicKey() PublicKey

	PrivateKey() PrivateKey

	Export(want *KeyPairData) (*KeyPairData, error)
}

type KeyPairAlgorithm interface {
	Algorithm

	GetGenerator() KeyPairGenerator

	GetKeyPairLoader() KeyPairLoader

	GetPublicKeyLoader() PublicKeyLoader

	GetPrivateKeyLoader() PrivateKeyLoader
}

type KeyPairData struct {
	Algorithm   string
	Format      string
	ContentType string
	Content     []byte
}

type KeyPairGenerator interface {
	Generate(params *KeyPairParams) (KeyPair, error)
}

type KeyPairLoader interface {
	Load(o *KeyPairData) (KeyPair, error)
}

type KeyPairParams struct {
	Size int // key-size in bits
}

type Manager interface {

	// 根据名称，查找算法（可能有多条结果）
	Find(algorithm string) ([]Algorithm, error)

	// 根据名称，查找算法（如果选择器函数为 nil, 则适配任何条目）
	Get(algorithm string, selector func(reg *Registration) bool) (Algorithm, error)
}

type Padding interface {

	// 取模式名称
	Mode() PaddingMode

	// 填充
	Pad(src []byte, blockSize int) ([]byte, error)

	// 去除填充
	Unpad(src []byte, blockSize int) ([]byte, error)
}

type PaddingCache struct {
	// contains filtered or unexported fields
}

type PaddingMode string

type PrivateKey interface {
	Pair() KeyPair

	NewDecrypter(options *CryptOptions) Decrypter

	NewSigner(options *SignatureOptions) Signer

	Export(want *PrivateKeyData) (*PrivateKeyData, error)
}

type PrivateKeyData struct {
	Algorithm   string
	Format      string
	ContentType string
	Content     []byte
}

type PrivateKeyLoader interface {
	Load(o *PrivateKeyData) (PrivateKey, error)
}

type Provider interface {
	Name() string
	PackageName() string
	Description() string
}

type PublicKey interface {
	NewEncrypter(options *CryptOptions) Encrypter

	NewVerifier(options *SignatureOptions) Verifier

	Export(want *PublicKeyData) (*PublicKeyData, error)
}

type PublicKeyData struct {
	Algorithm   string
	Format      string
	ContentType string
	Content     []byte
}

type PublicKeyLoader interface {
	Load(o *PublicKeyData) (PublicKey, error)
}

type Registration struct {
	Name      string
	Enabled   bool
	Priority  int
	Algorithm Algorithm
	Provider  Provider
}

type Registry interface {
	ListRegistrations() []*Registration
}

type SecretKey interface {
	Export(want *SecretKeyData) (*SecretKeyData, error)

	NewEncrypter(options *CryptOptions) Encrypter

	NewDecrypter(options *CryptOptions) Decrypter

	BlockSize() int
}

type SecretKeyAlgorithm interface {
	Algorithm

	GetGenerator() SecretKeyGenerator

	GetLoader() SecretKeyLoader
}

type SecretKeyData struct {
	Algorithm   string
	Format      string
	ContentType string
	Content     []byte
}

type SecretKeyGenerator interface {
	Generate(params *SecretKeyParams) (SecretKey, error)
}

type SecretKeyLoader interface {
	Load(o *SecretKeyData) (SecretKey, error)
}

type SecretKeyParams struct {
	Size int // key-size in bits
}

type Service interface {
	GetManager() Manager

	GetKeyPairAlgorithm(algorithm string, selector func(reg *Registration) bool) (KeyPairAlgorithm, error)

	GetSecretKeyAlgorithm(algorithm string, selector func(reg *Registration) bool) (SecretKeyAlgorithm, error)

	GetSignatureAlgorithm(algorithm string, selector func(reg *Registration) bool) (SignatureAlgorithm, error)
}

type Signature struct {
	Algorithm SignatureAlgorithmName
	Digest    []byte
	Signature []byte
}

type SignatureAlgorithm interface {
	Algorithm

	Options() *SignatureOptions

	NewSigner(key PrivateKey) Signer

	NewVerifier(key PublicKey) Verifier
}

type SignatureAlgorithmName string

type SignatureOptions struct {
	KeyAlgorithm KeyAlgorithmName // 密钥算法
	Hash         crypto.Hash      // hash 算法 id
	Padding      PaddingMode      // 填充模式
}

type Signer interface {

	// 取私钥
	PrivateKey() PrivateKey

	// 生成签名
	Sign(want *Signature) (*Signature, error)
}

type Verifier interface {

	// 取公钥
	PublicKey() PublicKey

	// 验证签名
	Verify(signature *Signature) error
}