Calibrate determines new KDF parameters for the current hardware.

CiphertextLength returns the encrypted length of a blob with plaintextSize bytes.

KDF derives encryption and message authentication keys from the password using the supplied parameters N, R and P and the Salt.

NewBlobBuffer returns a buffer that is large enough to hold a blob of size plaintext bytes, including the crypto overhead.

NewRandomKey returns new encryption and message authentication keys.

NewRandomNonce returns a new random nonce.

NewSalt returns new random salt bytes to use with KDF().

PlaintextLength returns the plaintext length of a blob with ciphertextSize bytes.

Extension is the number of bytes a plaintext is enlarged by encrypting it.

DefaultKDFParams are the default parameters used for Calibrate and KDF().

ErrUnauthenticated is returned when ciphertext verification has failed.

Key holds encryption and message authentication keys for a repository.

MACKey is used to sign (authenticate) data.

Params are the default parameters used for the key derivation function KDF().

EncryptionKey is key used for encryption.