Decrypt decrypts a message for a given nonce and public/private keypair.

Encrypt takes a message, a nonce and a public/private keypair and returns the encrypted and authenticated message.

GenKeyPair generates a public/private key pair.

GetPubKey generates the public key for the provided private key.

JWSignatureInput computes the signature input according to rfc7517 (see: https://tools.ietf.org/html/rfc7515#section-5.1).

Nonce takes an input length and returns a random nonce of the given length.

RandInt64 returns a random int64 value.

Sign takes a signature input and a signing key to create a signature.

Verify takes a signature input and a verifying key and returns an error, if the signature does not match.

Available asymmetric crypto algorithms.

Available asymmetric crypto algorithms.

LatestVer is the wildcard version indicating the highest available version when requesting certificate chains and TRCs.

Constants for nacl/box implementation of Curve25519xSalsa20Poly1305.

Constants for nacl/box implementation of Curve25519xSalsa20Poly1305.

Base64 is the base64 encoding used when packing and unpacking encoded data.

ErrAlgorithmNotSet indicates the key algorithm is not set.

ErrInvalidValidityPeriod indicates an invalid validity period.

ErrInvalidVersion indicates an invalid trust file version.

ErrKeyNotSet indicates the key is not set.

ErrKeyVersionNotSet indicates KeyVersion is not set.

ErrNotAfterNotSet indicates not_after is not set.

ErrNotBeforeNotSet indicates not_before is not set.

KeyMeta holds the raw key with metadata.

Validity indicates a validity period.

KeyVersion identifies a key version.

Version identifies the version of a trust file.