open-vault/builtin/logical/transit
Vishal Nayak 52df62d4ff
Encrypt/Decrypt/Sign/Verify using RSA in Transit backend (#3489)
* encrypt/decrypt/sign/verify RSA

* update path-help and doc

* Fix the bug which was breaking convergent encryption

* support both 2048 and 4096

* update doc to contain both 2048 and 4096

* Add test for encrypt, decrypt and rotate on RSA keys

* Support exporting RSA keys

* Add sign and verify test steps

* Remove 'RSA' from PEM header

* use the default salt length

* Add 'RSA' to PEM header since openssl is expecting that

* export rsa keys as signing-key as well

* Comment the reasoning behind the PEM headers

* remove comment

* update comment

* Parameterize hashing for RSA signing and verification

* Added test steps to check hash algo choice for RSA sign/verify

* fix test by using 'prehashed'
2017-11-03 10:45:53 -04:00
..
backend.go
backend_test.go
path_config.go
path_config_test.go
path_datakey.go
path_decrypt.go
path_decrypt_test.go
path_encrypt.go
path_encrypt_test.go
path_export.go
path_export_test.go
path_hash.go
path_hash_test.go
path_hmac.go
path_hmac_test.go
path_keys.go
path_keys_test.go
path_random.go
path_random_test.go
path_rewrap.go
path_rewrap_test.go
path_rotate.go
path_sign_verify.go
path_sign_verify_test.go