algorithm

type AES struct {
	// contains filtered or unexported fields
}

type AESEncrypter interface {
	EncryptAESCBC(algorithm EncryptAESCBCAlgorithm, plaintext, iv []byte) (EncryptResult, error)
	DecryptAESCBC(algorithm EncryptAESCBCAlgorithm, ciphertext, iv []byte) (DecryptResult, error)
	EncryptAESGCM(algorithm EncryptAESGCMAlgorithm, plaintext, nonce, additionalAuthenticatedData []byte) (EncryptResult, error)
	DecryptAESGCM(algorithm EncryptAESGCMAlgorithm, ciphertext, nonce, authenticationTag, additionalAuthenticatedData []byte) (DecryptResult, error)
}

type DecryptResult struct {
	// Algorithm is encryption algorithm used to decrypt.
	Algorithm EncryptAlgorithm

	// KeyID is the key ID used to decrypt.
	KeyID string

	// Plaintext is the decryption result.
	Plaintext []byte
}

type ECDsa struct {
	// contains filtered or unexported fields
}

type EncryptAESCBCAlgorithm = azkeys.EncryptionAlgorithm

type EncryptAESGCMAlgorithm = azkeys.EncryptionAlgorithm

type EncryptAlgorithm = azkeys.EncryptionAlgorithm

type EncryptResult struct {
	// Algorithm is encryption algorithm used to encrypt.
	Algorithm EncryptAlgorithm

	// KeyID is the key ID used to encrypt. This key ID should be retained.
	KeyID string

	// Ciphertext is the encryption result.
	Ciphertext []byte

	// IV is the initialization vector used to encrypt using AES-CBC.
	IV []byte

	// Nonce is the nonce used to encrypt using AES-GCM.
	Nonce []byte

	// AdditionalAuthenticatedData passed to EncryptAESGCM.
	AdditionalAuthenticatedData []byte

	// AuthenticationTag returned from EncryptAESGCM.
	AuthenticationTag []byte
}

type Encrypter interface {
	Encrypt(algorithm EncryptAlgorithm, plaintext []byte) (EncryptResult, error)
	Decrypt(algorithm EncryptAlgorithm, ciphertext []byte) (DecryptResult, error)
}

type KeyWrapper interface {
	WrapKey(algorithm WrapKeyAlgorithm, key []byte) (WrapKeyResult, error)
	UnwrapKey(algorithm WrapKeyAlgorithm, encryptedKey []byte) (UnwrapKeyResult, error)
}

type RSA struct {
	// contains filtered or unexported fields
}

type SignAlgorithm = azkeys.SignatureAlgorithm

type SignResult struct {
	// Algorithm is the signature algorithm used to sign.
	Algorithm SignAlgorithm

	// KeyID is the key ID used to sign. This key ID should be retained.
	KeyID string

	// Signature is a signed hash of the data.
	Signature []byte
}

type Signer interface {
	Sign(algorithm SignAlgorithm, digest []byte) (SignResult, error)
	Verify(algorithm SignAlgorithm, digest, signature []byte) (VerifyResult, error)
}

type UnwrapKeyResult struct {
	// Algorithm is the key wrap algorithm used to unwrap.
	Algorithm WrapKeyAlgorithm

	// KeyID is the key ID used to unwrap.
	KeyID string

	// Key is the unwrapped (decrypted) key.
	Key []byte
}

type VerifyResult struct {
	// Algorithm is the signature algorithm used to verify.
	Algorithm SignAlgorithm

	// KeyID is the key ID used to verify.
	KeyID string

	// Valid is true of the signature is valid.
	Valid bool
}

type WrapKeyAlgorithm = azkeys.EncryptionAlgorithm

type WrapKeyResult struct {
	// Algorithm is the key wrap algorithm used to wrap.
	Algorithm WrapKeyAlgorithm

	// KeyID is the key ID used to wrap. This key ID should be retained.
	KeyID string

	// EncryptedKey is the wrapped (encrypted) key.
	EncryptedKey []byte
}