append to user agent (will be ft/s3-encrypt).

NewAESCBCContentCipher will create a new aes cbc content cipher.

NewAESGCMContentCipher returns a new encryption only AES/GCM mode structure with a specific cipher data generator that will provide keys to be used for content encryption.

NewPKCS7Padder follows the RFC 2315: https://www.ietf.org/rfc/rfc2315.txt PKCS7 padding is subject to side-channel attacks and timing attacks.

DefaultInstructionKeySuffix is appended to the end of the instruction file key when grabbing or saving to S3.

AESCBCPadder is used to pad AES encrypted and decrypted data.

NoPadder does not pad anything.

CryptoReadCloser handles closing of the body and allowing reads from the decrypted content.

DefaultLoadStrategy This is the only exported LoadStrategy since cx are no longer able to configure their client with a specific load strategy.

LoadStrategyRequest represents a request sent to a LoadStrategy to load the contents of an ObjectMetadata.

ObjectMetadata encryption starts off by generating a random symmetric key using AES GCM.

ObjectMetadataSaveStrategy will save the metadata of the crypto contents to the header of the object.

SaveStrategyRequest represents a request sent to a SaveStrategy to save the contents of an ObjectMetadata.

Cipher interface allows for either encryption and decryption of an object.

ContentCipher deals with encrypting and decrypting content.

ContentCipherBuilder is a builder interface that builds ciphers for each request.

ContentCipherBuilderWithContext is a builder interface that builds ciphers for each request.

Decrypter interface with only the decrypt method.

Encrypter interface with only the encrypt method.

GetObjectAPIClient is a client that implements the GetObject operation.

LoadStrategy ...

Padder handles padding of crypto data.

CEKEntry is a builder that returns a proper content decrypter and error.