CertifyKey certifies a public key using the given CA's private key and cert; The certificate template for the public key is optional.

CreateECDSAKey creates an elliptic curve key for the given curve.

CreateECDSATestKey creates and elliptic curve key for the given curve and returns the public and private key in DER format.

CreateRSAKey creates an RSA key.

CreateRSATestKey creates an RSA key of the given size and returns the public and private key in PEM or DER format.

CreateTestCA creates a root CA for testing.

FillBuffer fills the given buffer with as many bytes from the reader as possible.

IsCertificate returns true in case the given byte array represents an x.509 certificate.

IsGPGPrivateKeyRing returns true in case the given byte array represents a GPG private key ring file.

IsPasswordError checks whether an error is related to a missing or wrong password.

IsPkcs11PrivateKey returns true in case the given byte array represents a pkcs11 private key.

IsPkcs11PublicKey returns true in case the given byte array represents a pkcs11 public key.

IsPrivateKey returns true in case the given byte array represents a private key It returns an error if for example the password is wrong.

IsPublicKey returns true in case the given byte array represents a public key.

NewDelayedReader wraps a io.Reader and allocates a delay buffer of bufsize bytes.

ParseCertificate tries to parse a public key in DER format first and PEM format after, returning an error if the parsing failed.

ParsePrivateKey tries to parse a private key in DER format first and PEM format after, returning an error if the parsing failed.

ParsePublicKey tries to parse a public key in DER format first and PEM format after, returning an error if the parsing failed.

SortDecryptionKeys parses a list of comma separated base64 entries and sorts the data into a map.

DelayedReader wraps a io.Reader and allows a client to use the Reader interface.

first argument is the command, like cat or echo, the second is the list of args to pass to it.