aws

package

v1.5.6 Latest Latest Go to latest Published: Mar 30, 2026 License: Apache-2.0 Imports: 8 Imported by: 0

Details

This section is empty.

This section is empty.

func CreateKmsSigner(uri string) (signature.Signer, error)

CreateKmsSigner creates a signer instance from a KMS ARN

func CreateKmsVerifier(uri string) (signature.Verifier, error)

CreateKmsVerifier creates a verifier instance from a KMS ARN

func NewKMSClient(ctx context.Context) (*kms.Client, error)

newKMSClient generates a new KMS Client instance with default config

type KMSCryptoClient struct {
	KeyID string
	// contains filtered or unexported fields
}

KMSCryptoClient is the container for the KMS Key

func (enc *KMSCryptoClient) CanEncrypt() bool

CanEncrypt provides a bool if the key is able to en-/decrypt

func (enc *KMSCryptoClient) KeySize() int

KeySize returns the key length in bytes

type KMSDecrypter struct {
	KMSCryptoClient
}

KMSDecrypter implements the Decrypter interface with KMS

func NewKMSDecrypter(keyID string) (*KMSDecrypter, error)

NewKMSDecrypter generates a new KMSDecrypter instance

func (dec *KMSDecrypter) DecryptMessage(message []byte) ([]byte, error)

DecryptMessage decrypts a message using the KMS API

type KMSEncrypter struct {
	KMSCryptoClient
}

KMSEncrypter implements the Encrypter interface with KMS

func NewKMSEncrypter(keyID string) (*KMSEncrypter, error)

NewKMSEncrypter generatea a new KMSEncrypter instance

func (enc *KMSEncrypter) EncryptMessage(message []byte) ([]byte, error)

EncryptMessage using the KMS API