DecryptPEMBlock takes a password encrypted PEM block and the password used to encrypt it and returns a slice of decrypted DER encoded bytes.

AEADEncryptPEMBlock returns a PEM block of the specified type holding the given DER-encoded data encrypted with AES-GCM256 algorithm, key is derived using PBKDF2 on the password.

CreateKxKeys create an KexKey structure using provide randomness source and compute the initial EC Ephemeral keypair XXX Make sure PRNG is strong.

XXX TODO: to reimplement properly..

TODO: need to implement type Signer interface which mean we need Public() and Sign().

some variable to handle the maps and the run loop.

we hash our data based on server we're connected to each entry will host channel keys and public keys within that server context .

KexKey describe the internal structure stored in memory for public/private key pairs owned or received from peers.

This is for the public key cache XXX Pk map[string](*KexKey).

this type is a map[string](*AcCOMM) it's a map defining a set of Public/Session Keys used for encrypting and KEX on a specific network based on the server name as hash key.

RDMap store the random value we use for "protecting/obfuscating" secret keys in memory, it is far from perfect, but better than pure plain text.

This is for the CHANNEL/QUERY keys cache .