Function Encrypt

pkg/utils/crypto.go:123–145

Encrypt encrypts plaintext and returns a prefixed base64 string.

(plaintext string, key []byte)

// Encrypt encrypts plaintext and returns a prefixed base64 string.
func Encrypt(plaintext string, key []byte) (string, error) {
	if plaintext == "" {
		return "", nil
	}

	block, err := aes.NewCipher(key)
	if err != nil {
		return "", err
	}

	aesGCM, err := cipher.NewGCM(block)
	if err != nil {
		return "", err
	}

	nonce := make([]byte, aesGCM.NonceSize())
	if _, err := io.ReadFull(rand.Reader, nonce); err != nil {
		return "", err
	}

	ciphertext := aesGCM.Seal(nonce, nonce, []byte(plaintext), nil)
	return encryptedPrefix + base64.StdEncoding.EncodeToString(ciphertext), nil
}

// Decrypt decrypts a prefixed base64 string back to plaintext.
func Decrypt(encrypted string, key []byte) (string, error) {