Package testvector provides test vectors for key derivation and crypto functions.

DeriveKey derives a key from a secret.

GenerateCertificateSerialNumber generates a random serial number for an X.509 certificate.

GenerateRandomBytes reads length bytes from getrandom(2) if available, /dev/urandom otherwise.

PemToX509Cert takes a list of PEM-encoded certificates, parses the first one and returns it as an x.509 certificate.

X509CertToPem takes an x.509 certificate and returns it as a PEM-encoded certificate.

DEKPrefix is the prefix used to prefix DEK IDs.

DerivedKeyLengthDefault is the default length in bytes for KMS derived keys.

MasterSecretLengthDefault is the default length in bytes for CLI generated master secrets.

MasterSecretLengthMin is the minimal length in bytes for user provided master secrets.

MeasurementSecretKeyID is name used for the measurementSecret DEK.

RNGLengthDefault is the number of bytes used for generating nonces.

StateDiskKeyLength is key length in bytes for node state disk.