Decrypt sends decryption requests to pald for every secret specified in the configuration for this Client. Upon success, the decrypted plaintexts are

Encrypts the given secret with the given encryptLabels for both alice and bob with a minimum of two delegations. Then, alice and bob each delegate for

Decrypt the ciphertext r.

NewServer constructs a new Server that supports versions 1 and 2 of the PAL protocol.

ServeRPC serves version 2 of the PAL protocol.

returns the listener and the temporary directory that was created to contain it; the listener should be closed and the directory deleted when finished

Exec executes the given command with the given environment. It additonally injects any secrets decrypted with a previous call to Decrypt.

Decrypt sends decryption requests to pald for every secret specified in the configuration for this Client. Upon success, the decrypted plaintexts are

NewPGPDecrypter returns a new Decrypter that operates by using the provided keyring and credentials to perform PGP decryption on ciphertexts.

NewPGPPacketConfig constructs a new OpenPGP packet configuration from the given cipher and hash, as specified in RFC 4880.

SplitPALValue parses a PAL secret, returning the parsed decrypter type, whether or not the plaintext is itself base64-encoded, and the value of the ci

listenFDAddrs returns the list of listeners backed by the systemd-activated sockets. It returns error if the required listeners are not in the list of

listenUnixAddrs returns list of unix-socket listeners mapped to their local addresses

notaryRepository returns a NotaryRepository which stores all the information needed to operate on a notary repository. It creates an HTTP transport pr

Convert a cipher name into an RFC 4880 identifier. Why is there no function for this in golang.org/x/crypto/openpgp?

Convert a named hash algorithm into Go's hash algorithm enumeration for parsing configuration

Critical logs its arguments at the "critical" level. The arguments are handled in the same manner as fmt.Print.

Criticalf logs a formatted message at the "critical" level. The arguments are handled in the same manner as fmt.Printf.

Debug logs its arguments at the "debug" level. The arguments are handled in the same manner as fmt.Print.

Debugf logs a formatted message at the "debug" level. The arguments are handled in the same manner as fmt.Printf.

Disable disables logging altogether, regardless of level. However, calls to Fatal and Fatalf will still halt the process; they just won't log anything

Enable enables logging if it has previously been disabled with Disable. Calling Enable when logging is already enabled is a no-op.

Error logs its arguments at the "error" level. The arguments are handled in the same manner as fmt.Print.

Errorf logs a formatted message at the "error" level. The arguments are handled in the same manner as fmt.Printf.

Exec executes the given command with the given environment. It additonally injects any secrets decrypted with a previous call to Decrypt.

Fatal logs its arguments at the "fatal" level and then exits. The arguments are handled in the same manner as fmt.Print.

Fatalf logs a formatted message at the "fatal" level and then exits. The arguments are handled in the same manner as fmt.Printf.

Info logs its arguments at the "info" level. The arguments are handled in the same manner as fmt.Print.

Infof logs a formatted message at the "info" level. The arguments are handled in the same manner as fmt.Printf.

LoadServerConfigEntry reads and parses r as a PAL server YAML configuration file, and returns the entry corresponding to the given environment name.

NewClientV1 constructs a new Client that implements version 1 of the PAL protocol. r is a PAL YAML configuration, socketAddr is the file path to the p

NewClientV2 constructs a new Client that implements version 2 of the PAL protocol. r is a PAL YAML configuration, socketAddr is the file path to the p

NewDocker returns a new Retriever that uses the provided notary server and trust store base directory to look up labels in the Docker daemon and then

NewMock returns a mocked Retriever which always responds with the given set of labels to any request.

NewRODecrypter returns a new Decrypter that operates by making decryption requests to the specified Red October server with the given credentials. ca

ServeHTTP serves the legacy version 1 of the PAL protocol. It is only capable of handling Red October decryption requests.

Warning logs its arguments at the "warning" level. The arguments are handled in the same manner as fmt.Print.

Warningf logs a formatted message at the "warning" level. The arguments are handled in the same manner as fmt.Printf.