Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

ext

package

Go to main page

Versions in this module

v0

v0.7.0

Sep 18, 2026

Changes in this version

+ const CipherAES256GCM

+ const CipherChaCha20Poly1305

+ const CipherXChaCha20Poly1305

+ func BindingContext(namespace, version string, opaque []byte) ([]byte, error)

+ func NewAES256GCM(key []byte) (cipher.AEAD, error)

+ func NewChaCha20Poly1305(key []byte) (cipher.AEAD, error)

+ func NewXChaCha20Poly1305(key []byte) (cipher.AEAD, error)

+ type CipherFunc func(key []byte) (cipher.AEAD, error)

+ type CipherID = ext.KeyMaterial_Cipher

+ func MustCipherID(id int) CipherID

type KMS

+ func NewKeyWrapper(lookup KeyLookup, opts ...KeyWrapperOption) (KMS, error)

+ func NewSealWrapper(s KeySealer) (KMS, error)

+ type Key struct

+ Bytes []byte

+ Version string

+ type KeyLookup func(context.Context, KeyRequest) (Key, error)

+ type KeyRequest struct

+ Namespace string

+ Version string

+ type KeySealer interface

+ Open func(context.Context, OpenRequest) ([]byte, error)

+ Seal func(context.Context, SealRequest) (SealedKey, error)

+ type KeyWrapperOption interface

+ func WithCipher(id CipherID) KeyWrapperOption

+ func WithCipherFunc(id CipherID, fn CipherFunc) KeyWrapperOption

+ type OpenRequest struct

+ Ciphertext []byte

+ Namespace string

+ Opaque []byte

+ Version string

+ type SealRequest struct

+ DEK []byte

+ Namespace string

+ type SealedKey struct

+ Ciphertext []byte

+ Opaque []byte

+ Version string

v0.6.0

Sep 11, 2026

v0.5.2

Aug 27, 2026

v0.5.1

Aug 19, 2026

v0.5.0

Aug 13, 2026

Changes in this version

+ func Allow() *auth.AuthResponse

+ func BearerToken(req *auth.AuthRequest, header string) (string, error)

+ func Deny(reason string) *auth.AuthResponse

+ func IsHealthCheckMethod(full string) bool

v0.4.1

Aug 5, 2026

Changes in this version

+ func Serve(ctx context.Context, opts ...Option) error

+ type Auth interface

+ Authenticate func(context.Context, []*auth.CallerCredential) error

+ type CredentialCheck func(string) bool

+ type KMS interface

+ Unwrap func(context.Context, []byte) ([]byte, error)

+ Wrap func(context.Context, string, []byte) ([]byte, error)

+ type Option func(*options)

+ func WithAddr(hostPort string) Option

+ func WithAuth(a Auth) Option

+ func WithKMS(kms KMS) Option

+ func WithListener(lis net.Listener) Option

+ func WithLogger(l logger.Logger) Option

+ func WithServerAuth(header string, check CredentialCheck) Option

+ func WithServerOption(opts ...grpc.ServerOption) Option

+ func WithShutdownTimeout(t time.Duration) Option