crypto

func CalcIVAndSeek ¶

func CalcIVAndSeek(seekOffset int64) ([]byte, int64)

func ComputeMAC ¶

func ComputeMAC(messageHash []byte, key []byte) []byte

func DecryptBlobEntry ¶

func DecryptBlobEntry(in io.Reader, seekOffset int64, key []byte) io.Reader

take advantage of AES-CTR by seeking assume seekOffset is where this reader is "starting", and the seeking has *already taken place* (e.g. by a Range query to s3)

func DecryptDatabaseV2 ¶

func DecryptDatabaseV2(data []byte, dbKey []byte) []byte

lazy buffer for now - need to peel the last 32 bytes off, which is super annoying to do on an io.Reader of unknown length!

func EncryptBlob ¶

func EncryptBlob(out io.Writer, seekOffset int64) (io.Writer, []byte)

func EncryptBlobWithKey ¶

func EncryptBlobWithKey(out io.Writer, seekOffset int64, key []byte) io.Writer

func EncryptDatabaseV2 ¶

func EncryptDatabaseV2(out io.Writer, dbKey []byte) io.Writer

func LegacyDecryptDatabase ¶

func LegacyDecryptDatabase(data []byte, key []byte) []byte

func LegacyEncryptDatabase ¶

func LegacyEncryptDatabase(data []byte, key []byte) []byte

func RandBytes ¶

func RandBytes(length int) []byte