EncryptIfNeeded encrypts the provided SOPS data key, if it has not been encrypted yet.
(dataKey []byte)
| 290 | // EncryptIfNeeded encrypts the provided SOPS data key, if it has not been |
| 291 | // encrypted yet. |
| 292 | func (key *MasterKey) EncryptIfNeeded(dataKey []byte) error { |
| 293 | if key.EncryptedKey == "" { |
| 294 | return key.Encrypt(dataKey) |
| 295 | } |
| 296 | return nil |
| 297 | } |
| 298 | |
| 299 | // EncryptedDataKey returns the encrypted data key this master key holds. |
| 300 | func (key *MasterKey) EncryptedDataKey() []byte { |