internal/encryption/key.go - master - githubmirror/ydb-kubernetes-operator

internal/encryption/key.go

31 строка532 B

Mikhail Babich

Add Database encryption settings

04 мар 2022, 15:39

04 мар 2022, 15:3957de107

package encryption

import (
	"crypto/rand"
	"crypto/rsa"
	"crypto/x509"
	"encoding/pem"
)

func GenerateRSAKey(pin string) (string, error) {
	rnd := rand.Reader
	key, err := rsa.GenerateKey(rnd, 2048)
	if err != nil {
		return "", err
	}
	keyBytes, err := x509.MarshalPKCS8PrivateKey(key)
	if err != nil {
		return "", err
	}
	block, err := x509.EncryptPEMBlock(
		rnd,
		"RSA PRIVATE KEY",
		keyBytes,
		[]byte(pin),
		x509.PEMCipherAES256,
	)
	if err != nil {
		return "", err
	}
	return string(pem.EncodeToMemory(block)), nil
}