internal

type CEKEntry func(materials.CryptographicMaterials) (ContentCipher, error)

type Cipher interface {
	Encrypter
	Decrypter
}

type ContentCipher interface {
	EncryptContents(io.Reader) (io.Reader, error)
	DecryptContents(io.ReadCloser) (io.ReadCloser, error)
	GetCipherData() materials.CryptographicMaterials
}

type ContentCipherBuilder interface {
	ContentCipher() (ContentCipher, error)
}

type ContentCipherBuilderWithContext interface {
	ContentCipherWithContext(context.Context) (ContentCipher, error)
}

type CryptoReadCloser struct {
	Body      io.ReadCloser
	Decrypter io.Reader
	// contains filtered or unexported fields
}

type Decrypter interface {
	Decrypt(io.Reader) io.Reader
}

type DefaultLoadStrategy struct {
	// contains filtered or unexported fields
}

type Encrypter interface {
	Encrypt(io.Reader) io.Reader
}

type GetObjectAPIClient interface {
	GetObject(context.Context, *s3.GetObjectInput, ...func(*s3.Options)) (*s3.GetObjectOutput, error)
}

type KeyDerivationResult struct {
	DerivedEncryptionKey []byte
	CommitKey            []byte
}

type LoadStrategy interface {
	Load(context.Context, *LoadStrategyRequest) (ObjectMetadata, error)
}

type LoadStrategyRequest struct {
	// The HTTP response
	HTTPResponse *http.Response

	// The operation Input type
	Input interface{}
}

type MetadataFormat int

type ObjectMetadata struct {
	// IV is the randomly generated IV base64 encoded.
	//= ../specification/s3-encryption/data-format/content-metadata.md#content-metadata-mapkeys
	//# - The mapkey "x-amz-iv" MUST be present for V2 format objects.
	IV string `json:"x-amz-iv"`
	// CipherKey is the randomly generated cipher key.
	//= ../specification/s3-encryption/data-format/content-metadata.md#content-metadata-mapkeys
	//# - The mapkey "x-amz-key-v2" MUST be present for V2 format objects.
	CipherKey string `json:"x-amz-key-v2"`
	// MaterialDesc is a description to distinguish from other envelopes.
	//= ../specification/s3-encryption/data-format/content-metadata.md#content-metadata-mapkeys
	//# - The mapkey "x-amz-matdesc" MUST be present for V2 format objects.
	MatDesc string `json:"x-amz-matdesc"`
	//= ../specification/s3-encryption/data-format/content-metadata.md#content-metadata-mapkeys
	//# - The mapkey "x-amz-wrap-alg" MUST be present for V2 format objects.
	KeyringAlg string `json:"x-amz-wrap-alg"`
	//= ../specification/s3-encryption/data-format/content-metadata.md#content-metadata-mapkeys
	//# - The mapkey "x-amz-cek-alg" MUST be present for V2 format objects.
	CEKAlg string `json:"x-amz-cek-alg"`
	//= ../specification/s3-encryption/data-format/content-metadata.md#content-metadata-mapkeys
	//# - The mapkey "x-amz-tag-len" MUST be present for V2 format objects.
	TagLen                string `json:"x-amz-tag-len"`
	UnencryptedContentLen string `json:"x-amz-unencrypted-content-length"`
	//= ../specification/s3-encryption/data-format/content-metadata.md#content-metadata-mapkeys
	//# - The mapkey "x-amz-c" MUST be present for V3 format objects.
	ContentCipher string `json:"x-amz-c"`
	//= ../specification/s3-encryption/data-format/content-metadata.md#content-metadata-mapkeys
	//# - The mapkey "x-amz-3" MUST be present for V3 format objects.
	EncryptedDataKey string `json:"x-amz-3"`
	//= ../specification/s3-encryption/data-format/content-metadata.md#content-metadata-mapkeys
	//# - The mapkey "x-amz-m" SHOULD be present for V3 format objects that use Raw Keyring Material Description.
	MatDescV3 string `json:"x-amz-m"`
	//= ../specification/s3-encryption/data-format/content-metadata.md#content-metadata-mapkeys
	//# - The mapkey "x-amz-t" SHOULD be present for V3 format objects that use KMS Encryption Context.
	EncryptionContext string `json:"x-amz-t"`
	//= ../specification/s3-encryption/data-format/content-metadata.md#content-metadata-mapkeys
	//# - The mapkey "x-amz-w" MUST be present for V3 format objects.
	WrappingAlgorithm string `json:"x-amz-w"`
	//= ../specification/s3-encryption/data-format/content-metadata.md#content-metadata-mapkeys
	//# - The mapkey "x-amz-d" MUST be present for V3 format objects.
	KeyCommitment string `json:"x-amz-d"`
	//= ../specification/s3-encryption/data-format/content-metadata.md#content-metadata-mapkeys
	//# - The mapkey "x-amz-i" MUST be present for V3 format objects.
	MessageID string `json:"x-amz-i"`
}

type ObjectMetadataSaveStrategy struct{}

type Padder interface {
	// Pad will pad the byte array.
	// The second parameter is NOT how many
	// bytes to pad by, but how many bytes
	// have been read prior to the padding.
	// This allows for streamable padding.
	Pad([]byte, int) ([]byte, error)
	// Unpad will unpad the byte bytes. Unpad
	// methods must be constant time.
	Unpad([]byte) ([]byte, error)
	// Name returns the name of the padder.
	// This is used when decrypting on
	// instantiating new padders.
	Name() string
}

type SaveStrategyRequest struct {
	// The envelope to save
	Envelope *ObjectMetadata

	// The HTTP request being built
	HTTPRequest *http.Request

	// The operation Input type
	Input interface{}
}