Signing secrets at rest. They cannot be hashed — signing needs the
plaintext — so they are AES-256-GCM encrypted, in the enc:v1: format the
user module uses for MFA seeds.
Signing secrets at rest. They cannot be hashed — signing needs the plaintext — so they are AES-256-GCM encrypted, in the `enc:v1:` format the user module uses for MFA seeds.
(decrypt key value)The plaintext of a value encrypt produced. Throws on anything else, or
under the wrong key: a secret that cannot be read cannot sign.
The plaintext of a value `encrypt` produced. Throws on anything else, or under the wrong key: a secret that cannot be read cannot sign.
(derive-key key-material)The 32-byte key for key-material, a string of at least 32 characters.
The 32-byte key for `key-material`, a string of at least 32 characters.
(encrypt key plaintext)plaintext as enc:v1:<base64(iv || ciphertext)>.
`plaintext` as `enc:v1:<base64(iv || ciphertext)>`.
cljdoc builds & hosts documentation for Clojure/Script libraries
| Ctrl+k | Jump to recent docs |
| ← | Move to previous article |
| → | Move to next article |
| Ctrl+/ | Jump to the search field |