secretbox

package

v1.0.2 Latest Latest Go to latest Published: Oct 28, 2026 License: Apache-2.0 Imports: 6 Imported by: 0

Details

Package secretbox seals small secrets (such as API keys) at rest with AES-256-GCM, keyed from the server's secret in a caller-chosen domain.

This section is empty.

This section is empty.

func DeriveKey(secret, domain string) []byte

DeriveKey makes a 32-byte key from the server's secret in its own MAC domain.

func Open(key, aad, blob []byte) ([]byte, error)

Open reverses Seal. It fails when the key, aad or blob differ.

func Seal(key, aad, plain []byte) ([]byte, error)

Seal encrypts plain and authenticates aad. The result is nonce||ciphertext.

This section is empty.