Copy is identical to Go's builtin copy function except the copying is done in constant time.

Decrypt decrypts a given ciphertext with a given 32 byte key and writes the result to the start of a given buffer.

EnclaveSize returns the number of bytes of plaintext data stored inside an Enclave.

Encrypt takes a plaintext message and a 32 byte key and returns an authenticated ciphertext.

Equal does a constant-time comparison of two byte slices.

Exit terminates the process with a specified exit code but securely wipes and cleans up sensitive data before doing so.

Hash implements a cryptographic hash function using Blake2b.

Move is identical to Copy except it wipes the source buffer after the copy operation is executed.

NewBuffer is a raw constructor for the Buffer object.

NewCoffer is a raw constructor for the *Coffer object.

NewEnclave is a raw constructor for the Enclave object.

Open decrypts an Enclave and puts the contents into a Buffer object.

Panic is identical to the builtin panic except it purges the session before calling panic.

Purge wipes all sensitive data and keys before reinitialising the session with a fresh encryption key and secure values.

Scramble fills a given buffer with cryptographically-secure random bytes.

Seal consumes a given Buffer object and returns its data secured and encrypted inside an Enclave.

Wipe takes a buffer and wipes it with zeroes.

auth + nonce.

ErrBufferExpired is returned when attempting to perform an operation on or with a buffer that has been destroyed.

ErrBufferTooSmall is returned when the decryption function, Open, is given an output buffer that is too small to hold the plaintext.

ErrCofferExpired is returned when a function attempts to perform an operation using a secure key container that has been wiped and destroyed.

ErrDecryptionFailed is returned when the attempted decryption fails.

ErrInvalidKeyLength is returned when attempting to encrypt or decrypt with a key that is not exactly 32 bytes in size.

ErrNullBuffer is returned when attempting to construct a buffer of size less than one.

ErrNullEnclave is returned when attempting to construct an enclave of size less than one.

Buffer is a structure that holds raw sensitive data.

Coffer is a specialized container for securing highly-sensitive, 32 byte values.

Enclave is a sealed and encrypted container for sensitive data.