Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

crypto

package

Go to main page

Versions in this module

v1

v1.7.0

Apr 27, 2026

v1.6.0

Mar 28, 2026

v1.5.0

Mar 27, 2026

v1.4.1

Mar 27, 2026

v1.4.0

Mar 19, 2026

v1.3.4

Mar 17, 2026

v1.3.3

Mar 17, 2026

Changes in this version

+ const JWTAlgHS256

+ const JWTAlgHS384

+ const JWTAlgHS512

type Client

+ func GetClient() *Client

v1.3.2

Mar 13, 2026

Changes in this version

+ var ErrInvalidCiphertext = errors.New("crypto: invalid ciphertext")

+ var ErrInvalidKey = errors.New("crypto: invalid key")

+ var ErrInvalidSignature = errors.New("crypto: signature verification failed")

+ var ErrInvalidToken = errors.New("crypto: invalid JWT token")

+ var ErrMissingClient = errors.New("crypto: client not configured, call Configure first")

+ var ErrTokenExpired = errors.New("crypto: JWT token expired")

+ var ErrUnsupportedAlg = errors.New("crypto: unsupported algorithm")

+ func Configure(config *Config) error

+ func DecryptAES(ciphertext []byte) ([]byte, error)

+ func DecryptAESString(ciphertext string) (string, error)

+ func DecryptAESWithKey(ciphertext []byte, key string) ([]byte, error)

+ func DecryptRSA(ciphertext []byte) ([]byte, error)

+ func DecryptRSAWithKey(ciphertext []byte, privateKey []byte) ([]byte, error)

+ func EncryptAES(plaintext []byte) ([]byte, error)

+ func EncryptAESString(plaintext string) (string, error)

+ func EncryptAESWithKey(plaintext []byte, key string) ([]byte, error)

+ func EncryptRSA(plaintext []byte) ([]byte, error)

+ func EncryptRSAWithKey(plaintext []byte, publicKey []byte) ([]byte, error)

+ func SignJWT(claims JWTClaims) (string, error)

+ func SignJWTWithAlg(claims JWTClaims, alg string) (string, error)

+ func SignRSA(data []byte) ([]byte, error)

+ func SignRSAWithKey(data []byte, privateKey []byte) ([]byte, error)

+ func VerifyRSA(data, signature []byte) error

+ func VerifyRSAWithKey(data, signature []byte, publicKey []byte) error

+ type Client struct

+ func NewClient(config *Config) (*Client, error)

+ func (c *Client) DecryptAES(ciphertext []byte) ([]byte, error)

+ func (c *Client) DecryptRSA(ciphertext []byte) ([]byte, error)

+ func (c *Client) EncryptAES(plaintext []byte) ([]byte, error)

+ func (c *Client) EncryptRSA(plaintext []byte) ([]byte, error)

+ func (c *Client) ParseJWT(token string) (*JWTClaims, error)

+ func (c *Client) SignJWT(claims JWTClaims) (string, error)

+ func (c *Client) SignJWTWithAlg(claims JWTClaims, alg string) (string, error)

+ func (c *Client) SignRSA(data []byte) ([]byte, error)

+ func (c *Client) VerifyRSA(data, signature []byte) error

+ type Config struct

+ AESKey string

+ JWTExpiry time.Duration

+ JWTPrivateKey []byte

+ JWTPublicKey []byte

+ JWTSecret string

+ RSAPrivateKey []byte

+ RSAPublicKey []byte

+ func DefaultConfig() *Config

+ func (c *Config) Validate() error

+ type JWTClaims struct

+ Custom map[string]interface{}

+ func ParseJWT(token string) (*JWTClaims, error)