securebody

package

v1.0.4 Latest Latest Go to latest Published: Aug 22, 2026 License: MIT Imports: 10 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/tobsai/fort

Links

Open Source Insights

Documentation ¶

Overview ¶

Package securebody encrypts sensitive Fort record bodies before they enter the cloud ledger. Routing metadata remains separate and plaintext.

Index ¶

Constants
Variables
type Envelope
type KeyRing
- func (ring KeyRing) Decrypt(scope Scope, envelope Envelope) ([]byte, error)
- func (ring KeyRing) Encrypt(scope Scope, plaintext []byte) (Envelope, error)
type Scope

Constants ¶

View Source

const (
	EnvelopeVersion            = 1
	MaximumPlaintextChunkBytes = 2 << 20
	// AEADOverheadBytes is the fixed authentication-tag overhead of the
	// AES-256-GCM envelope used by Fort. It lets the server derive artifact
	// manifest lengths without disclosing a data-encryption key to a worker.
	AEADOverheadBytes = 16
)

Variables ¶

View Source

var (
	ErrInvalid        = errors.New("secure body envelope invalid")
	ErrKeyUnavailable = errors.New("secure body key unavailable")
	ErrAuthentication = errors.New("secure body authentication failed")
	ErrPayloadLimit   = errors.New("secure body payload limit exceeded")
	ErrVersion        = errors.New("secure body envelope version unsupported")
)

Functions ¶

This section is empty.

Types ¶

type Envelope ¶

type Envelope struct {
	Version    int    `json:"version"`
	KeyID      string `json:"key_id"`
	Nonce      string `json:"nonce"`
	Ciphertext string `json:"ciphertext"`
}

Envelope is the versioned value stored in the ledger. The referenced key is held outside Supabase.

type KeyRing ¶

type KeyRing struct {
	ActiveKeyID string
	Keys        map[string][]byte
	Random      io.Reader
}

KeyRing retains every decryption key still referenced by durable ciphertext and uses ActiveKeyID only for new writes.

func (KeyRing) Decrypt ¶

func (ring KeyRing) Decrypt(scope Scope, envelope Envelope) ([]byte, error)

func (KeyRing) Encrypt ¶

func (ring KeyRing) Encrypt(scope Scope, plaintext []byte) (Envelope, error)

type Scope ¶

type Scope struct {
	AccountID  string `json:"account_id"`
	RecordType string `json:"record_type"`
	RecordID   string `json:"record_id"`
}

Scope is authenticated but not encrypted. It prevents ciphertext from one account or durable record from being replayed as another.

Source Files ¶

View all Source files

envelope.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL