Method Encrypt

internal/crypto/awskms/key.go:41–71

Encrypt symmetric key with AWS KMS

()

// Encrypt symmetric key with AWS KMS
func (symmetricKey *SymmetricKey) Encrypt() error {
	kmsConfig := aws.NewConfig()

	if symmetricKey.Region != "" {
		kmsConfig = kmsConfig.WithRegion(symmetricKey.Region)
	}

	kmsSession, err := session.NewSession()
	if err != nil {
		return err
	}

	svc := kms.New(kmsSession, kmsConfig)

	symmetricKey.mutex.RLock()
	input := &kms.EncryptInput{
		KeyId:     aws.String(symmetricKey.KeyID),
		Plaintext: symmetricKey.SymmetricKey,
	}
	symmetricKey.mutex.RUnlock()

	result, err := svc.Encrypt(input)

	if err == nil {
		symmetricKey.mutex.Lock()
		symmetricKey.EncryptedSymmetricKey = result.CiphertextBlob
		symmetricKey.mutex.Unlock()
	}

	return err
}

// Decrypt symmetric key with AWS KMS
func (symmetricKey *SymmetricKey) Decrypt() error {