storagekey

package

v0.1.0-rc.40 Latest Latest Go to latest Published: Oct 3, 2026 License: MIT Imports: 8 Imported by: 0

Details

Package storagekey encrypts recoverable secrets stored by control.

This section is empty.

This section is empty.

This section is empty.

type Keyring struct {
	// contains filtered or unexported fields
}

Keyring holds the current storage key and an optional previous key used only while ciphertext is being re-encrypted.

func New(current, previous string) (*Keyring, error)

func (k *Keyring) CurrentID() string

func (k *Keyring) Open(keyID, context string, ciphertext []byte) ([]byte, bool, error)

Open decrypts ciphertext and reports whether it used the previous key.

func (k *Keyring) PreviousID() string

func (k *Keyring) Seal(context string, plaintext []byte) ([]byte, error)