Function ParseEncryptionKeyring

admin/database/database.go:1276–1288

ParseEncryptionKeyring parses a JSON string containing an array of EncryptionKey objects. If the provided string is empty, an empty keyring is returned. When using an empty keyring, columns will be read and written without applying encryption/decryption.

(keyring string)

// If the provided string is empty, an empty keyring is returned.
// When using an empty keyring, columns will be read and written without applying encryption/decryption.
func ParseEncryptionKeyring(keyring string) ([]*EncryptionKey, error) {
	if keyring == "" {
		return nil, nil
	}

	var encKeyring []*EncryptionKey
	err := json.Unmarshal([]byte(keyring), &encKeyring)
	if err != nil {
		return nil, err
	}

	return encKeyring, nil
}

func NewRandomKeyring() ([]*EncryptionKey, error) {
	secret := make([]byte, 32) // 32 bytes for AES-256