CreateKeyStore calls the key server's create keystore REST function and returns the resulting keystoreURL value.

New creates a new remoteKMS instance using http client connecting to keystoreURL.

NewCryptoBox creates a CryptoBox which provides remote crypto box encryption using the given KMS's key.

NewOpt creates a new empty option.

WithCache add cache.

WithHeaders option is for setting additional http request headers (since it's a function, it can call a remote authorization server to fetch the necessary info needed in these headers).

WithMarshalFn allows providing marshal function.

ContentType is remoteKMS http content-type.

KeystoreEndpoint represents a remote keystore endpoint with swappable {serverEndpoint} value.

HTTPClient interface for the http client.

CryptoBox provides an elliptic-curve-based authenticated encryption scheme executed on a remote key server Payloads are encrypted using symmetric encryption (XChacha20Poly1305) using a shared key derived from a shared secret created by Curve25519 Elliptic Curve Diffie-Hellman key exchange.

Opt are the remoteKMS option.

Opts represents option.

RemoteKMS implementation of kms.KeyManager api.