mirror of https://github.com/rclone/rclone.git synced 2024-11-22 15:30:06 +08:00

History

David 643192b347 vendor: add pkcs8 helpers for decrypting encrypted private keys		2019-09-20 17:15:16 +01:00
..
.gitignore	vendor: add pkcs8 helpers for decrypting encrypted private keys	2019-09-20 17:15:16 +01:00
.travis.yml	vendor: add pkcs8 helpers for decrypting encrypted private keys	2019-09-20 17:15:16 +01:00
LICENSE	vendor: add pkcs8 helpers for decrypting encrypted private keys	2019-09-20 17:15:16 +01:00
pkcs8.go	vendor: add pkcs8 helpers for decrypting encrypted private keys	2019-09-20 17:15:16 +01:00
README	vendor: add pkcs8 helpers for decrypting encrypted private keys	2019-09-20 17:15:16 +01:00
README.md	vendor: add pkcs8 helpers for decrypting encrypted private keys	2019-09-20 17:15:16 +01:00

README.md

pkcs8

OpenSSL can generate private keys in both "traditional format" and PKCS#8 format. Newer applications are advised to use more secure PKCS#8 format. Go standard crypto package provides a function to parse private key in PKCS#8 format. There is a limitation to this function. It can only handle unencrypted PKCS#8 private keys. To use this function, the user has to save the private key in file without encryption, which is a bad practice to leave private keys unprotected on file systems. In addition, Go standard package lacks the functions to convert RSA/ECDSA private keys into PKCS#8 format.

pkcs8 package fills the gap here. It implements functions to process private keys in PKCS#8 format, as defined in RFC5208 and RFC5958. It can handle both unencrypted PKCS#8 PrivateKeyInfo format and EncryptedPrivateKeyInfo format with PKCS#5 (v2.0) algorithms.

Godoc

Installation

Supports Go 1.9+

go get github.com/youmark/pkcs8

dependency

This package depends on golang.org/x/crypto/pbkdf2 package. Use the following command to retrive pbkdf2 package

go get golang.org/x/crypto/pbkdf2