1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
// Copyright 2018 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package tink
import "context"
/*
AEAD is the interface for authenticated encryption with associated data.
Implementations of this interface are secure against adaptive chosen ciphertext attacks.
Encryption with associated data ensures authenticity and integrity of that data, but not
its secrecy. (see RFC 5116, https://tools.ietf.org/html/rfc5116)
*/
type AEAD interface {
// Encrypt encrypts plaintext with associatedData as associated data.
// The resulting ciphertext allows for checking authenticity and integrity of associated data
// associatedData, but does not guarantee its secrecy.
Encrypt(plaintext, associatedData []byte) ([]byte, error)
// Decrypt decrypts ciphertext with associatedData as associated data.
// The decryption verifies the authenticity and integrity of the associated data, but there are
// no guarantees with respect to secrecy of that data.
Decrypt(ciphertext, associatedData []byte) ([]byte, error)
}
/*
AEADWithContext offers the same functionality as [AEAD], but in each call a
[context.Context] parameter is passed along.
This is the prefered interface for e.g., AEAD primitives implemented with RPC
calls.
*/
type AEADWithContext interface {
// Encrypt encrypts plaintext with associatedData as associated data.
// The resulting ciphertext allows for checking authenticity and integrity of associated data
// associatedData, but does not guarantee its secrecy.
EncryptWithContext(ctx context.Context, plaintext, associatedData []byte) ([]byte, error)
// Decrypt decrypts ciphertext with associatedData as associated data.
// The decryption verifies the authenticity and integrity of the associated data, but there are
// no guarantees with respect to secrecy of that data.
DecryptWithContext(ctx context.Context, ciphertext, associatedData []byte) ([]byte, error)
}
|
