Method Encrypt

server-source-code/internal/util/encryption.go:66–86

Encrypt encrypts plaintext using AES-256-GCM. Format: iv:authTag:ciphertext (all hex encoded), matching Node.

(plaintext string)

// Encrypt encrypts plaintext using AES-256-GCM.
// Format: iv:authTag:ciphertext (all hex encoded), matching Node.
func (e *Encryption) Encrypt(plaintext string) (string, error) {
	if plaintext == "" {
		return "", nil
	}
	block, err := aes.NewCipher(e.key)
	if err != nil {
		return "", err
	}
	aead, err := cipher.NewGCM(block)
	if err != nil {
		return "", err
	}
	iv := make([]byte, ivLength)
	if _, err := io.ReadFull(rand.Reader, iv); err != nil {
		return "", err
	}
	ciphertext := aead.Seal(nil, iv, []byte(plaintext), nil)
	authTag := ciphertext[len(ciphertext)-authTagLength:]
	ct := ciphertext[:len(ciphertext)-authTagLength]
	return hex.EncodeToString(iv) + ":" + hex.EncodeToString(authTag) + ":" + hex.EncodeToString(ct), nil
}

// IsEncrypted returns true if the string appears to be in encrypted format (iv:authTag:ciphertext).
func IsEncrypted(s string) bool {