28 lines
967 B
Go
28 lines
967 B
Go
// Copyright (c) HashiCorp, Inc.
|
|
// SPDX-License-Identifier: BUSL-1.1
|
|
|
|
package vault
|
|
|
|
import "context"
|
|
|
|
// BarrierEncryptorAccess is a wrapper around BarrierEncryptor that allows Core
|
|
// to expose its barrier encrypt/decrypt operations through BarrierEncryptorAccess()
|
|
// while restricting the ability to modify Core.barrier itself.
|
|
type BarrierEncryptorAccess struct {
|
|
barrierEncryptor BarrierEncryptor
|
|
}
|
|
|
|
var _ BarrierEncryptor = (*BarrierEncryptorAccess)(nil)
|
|
|
|
func NewBarrierEncryptorAccess(barrierEncryptor BarrierEncryptor) *BarrierEncryptorAccess {
|
|
return &BarrierEncryptorAccess{barrierEncryptor: barrierEncryptor}
|
|
}
|
|
|
|
func (b *BarrierEncryptorAccess) Encrypt(ctx context.Context, key string, plaintext []byte) ([]byte, error) {
|
|
return b.barrierEncryptor.Encrypt(ctx, key, plaintext)
|
|
}
|
|
|
|
func (b *BarrierEncryptorAccess) Decrypt(ctx context.Context, key string, ciphertext []byte) ([]byte, error) {
|
|
return b.barrierEncryptor.Decrypt(ctx, key, ciphertext)
|
|
}
|