snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)

cipher/cipher.go

@@ -0,0 +1,29 @@
+// Copyright © 2023 Ory Corp
+// SPDX-License-Identifier: Apache-2.0
+
+package cipher
+
+import "context"
+
+// Cipher provides methods for encrypt and decrypt string
+type Cipher interface {
+	// Encrypt encrypts the (binary) message and returns a hex-encoded binary ciphertext
+	// or an error if the encryption failed.
+	//
+	// If the message is empty, the ciphertext is also empty and no error is returned.
+	Encrypt(ctx context.Context, message []byte) (string, error)
+
+	// Decrypt takes a hex-encoded binary ciphertext and decrypts it or returns an error if the decryption
+	// failed.
+	//
+	// If the ciphertext is empty a nil byte slice is returned.
+	Decrypt(ctx context.Context, encrypted string) ([]byte, error)
+}
+
+type Provider interface {
+	Cipher(ctx context.Context) Cipher
+}
+
+type SecretsProvider interface {
+	SecretsCipher(ctx context.Context) [][32]byte
+}