Function deriveKey

pkg/utils/crypto.go:105–120

deriveKey derives a 32-byte AES key from a password using iterated HMAC-SHA256.

(password []byte)

// deriveKey derives a 32-byte AES key from a password using iterated HMAC-SHA256.
func deriveKey(password []byte) ([]byte, error) {
	if len(password) < 4 {
		return nil, fmt.Errorf("master password must be at least 4 characters")
	}
	salt := []byte("tryssh-config-v1")
	key := make([]byte, 32)
	h := hmac.New(sha256.New, password)
	h.Write(salt)
	copy(key, h.Sum(nil))
	for i := 0; i < kdfIter; i++ {
		h = hmac.New(sha256.New, password)
		h.Write(key)
		key = h.Sum(key[:0])
	}
	return key, nil
}

// Encrypt encrypts plaintext and returns a prefixed base64 string.
func Encrypt(plaintext string, key []byte) (string, error) {