Struct Cipher

server/usersecrets/crypto.go:24–26

Cipher seals and opens user secret statements with AES-256-GCM. The (org, user, name) row key is bound in as additional authenticated data, so a ciphertext copied onto another row fails to decrypt.

// (org, user, name) row key is bound in as additional authenticated data, so
// a ciphertext copied onto another row fails to decrypt.
type Cipher struct {
	aead cipher.AEAD
}

// NewCipher builds a Cipher from a base64-encoded (std or url, padded or raw)
// 32-byte key.