funcRegisterHash¶

func RegisterHash(hHash, f func()hash.Hash)

RegisterHash registers a function that returns a new instance of the givenhash function. This is intended to be called from the init function inpackages that implement hash functions.

funcSignMessage¶added ingo1.25.0

func SignMessage(signerSigner, randio.Reader, msg []byte, optsSignerOpts) (signature []byte, errerror)

SignMessage signs msg with signer. If signer implementsMessageSigner,[MessageSigner.SignMessage] is called directly. Otherwise, msg is hashedwith opts.HashFunc() and signed with [Signer.Sign].

typeDecrypter¶added ingo1.5

type Decrypter interface {// Public returns the public key corresponding to the opaque,// private key.Public()PublicKey// Decrypt decrypts msg. The opts argument should be appropriate for// the primitive used. See the documentation in each implementation for// details.Decrypt(randio.Reader, msg []byte, optsDecrypterOpts) (plaintext []byte, errerror)}

Decrypter is an interface for an opaque private key that can be used forasymmetric decryption operations. An example would be an RSA keykept in a hardware module.

typeDecrypterOpts¶added ingo1.5

type DecrypterOptsany

typeHash¶

type Hashuint

Hash identifies a cryptographic hash function that is implemented in anotherpackage.

const (MD4Hash = 1 +iota// import golang.org/x/crypto/md4MD5// import crypto/md5SHA1// import crypto/sha1SHA224// import crypto/sha256SHA256// import crypto/sha256SHA384// import crypto/sha512SHA512// import crypto/sha512MD5SHA1// no implementation; MD5+SHA1 used for TLS RSARIPEMD160// import golang.org/x/crypto/ripemd160SHA3_224// import golang.org/x/crypto/sha3SHA3_256// import golang.org/x/crypto/sha3SHA3_384// import golang.org/x/crypto/sha3SHA3_512// import golang.org/x/crypto/sha3SHA512_224// import crypto/sha512SHA512_256// import crypto/sha512BLAKE2s_256// import golang.org/x/crypto/blake2sBLAKE2b_256// import golang.org/x/crypto/blake2bBLAKE2b_384// import golang.org/x/crypto/blake2bBLAKE2b_512// import golang.org/x/crypto/blake2b)

func (hHash) Available()bool

func (hHash) HashFunc()Hash

func (hHash) New()hash.Hash

func (hHash) Size()int

func (hHash) String()string

typeMessageSigner¶added ingo1.25.0

type MessageSigner interface {SignerSignMessage(randio.Reader, msg []byte, optsSignerOpts) (signature []byte, errerror)}

MessageSigner is an interface for an opaque private key that can be used forsigning operations where the message is not pre-hashed by the caller.It is a superset of the Signer interface so that it can be passed to APIswhich accept Signer, which may try to do an interface upgrade.

MessageSigner.SignMessage and MessageSigner.Sign should produce the sameresult given the same opts. In particular, MessageSigner.SignMessage shouldonly accept a zero opts.HashFunc if the Signer would also accept messageswhich are not pre-hashed.

Implementations which do not provide the pre-hashed Sign API should implementSigner.Sign by always returning an error.

typePrivateKey¶

type PrivateKeyany

PrivateKey represents a private key using an unspecified algorithm.

Although this type is an empty interface for backwards compatibility reasons,all private key types in the standard library implement the following interface

interface{    Public() crypto.PublicKey    Equal(x crypto.PrivateKey) bool}

as well as purpose-specific interfaces such asSigner andDecrypter, whichcan be used for increased type safety within applications.

typePublicKey¶added ingo1.2

type PublicKeyany

PublicKey represents a public key using an unspecified algorithm.

Although this type is an empty interface for backwards compatibility reasons,all public key types in the standard library implement the following interface

interface{    Equal(x crypto.PublicKey) bool}

which can be used for increased type safety within applications.

typeSigner¶added ingo1.4

type Signer interface {// Public returns the public key corresponding to the opaque,// private key.Public()PublicKey// Sign signs digest with the private key, possibly using entropy from// rand. For an RSA key, the resulting signature should be either a// PKCS #1 v1.5 or PSS signature (as indicated by opts). For an (EC)DSA// key, it should be a DER-serialised, ASN.1 signature structure.//// Hash implements the SignerOpts interface and, in most cases, one can// simply pass in the hash function used as opts. Sign may also attempt// to type assert opts to other types in order to obtain algorithm// specific values. See the documentation in each package for details.//// Note that when a signature of a hash of a larger message is needed,// the caller is responsible for hashing the larger message and passing// the hash (as digest) and the hash function (as opts) to Sign.Sign(randio.Reader, digest []byte, optsSignerOpts) (signature []byte, errerror)}

Signer is an interface for an opaque private key that can be used forsigning operations. For example, an RSA key kept in a hardware module.

typeSignerOpts¶added ingo1.4

type SignerOpts interface {// HashFunc returns an identifier for the hash function used to produce// the message passed to Signer.Sign, or else zero to indicate that no// hashing was done.HashFunc()Hash}

SignerOpts contains options for signing with aSigner.