diff options
author | Gustav Simonsson <gustav.simonsson@gmail.com> | 2015-01-16 02:58:38 +0800 |
---|---|---|
committer | Gustav Simonsson <gustav.simonsson@gmail.com> | 2015-01-16 02:58:38 +0800 |
commit | 9caf32befebb41fbb013b299caf2fff5fe840430 (patch) | |
tree | 0dbdccc3d86832b5d7225c741228fe574d3b11bb /crypto/key_store_passphrase.go | |
parent | 47d3b3dd58172c2e7c1f72fb072bd9385aff8205 (diff) | |
download | go-tangerine-9caf32befebb41fbb013b299caf2fff5fe840430.tar.gz go-tangerine-9caf32befebb41fbb013b299caf2fff5fe840430.tar.zst go-tangerine-9caf32befebb41fbb013b299caf2fff5fe840430.zip |
Update code comments
Diffstat (limited to 'crypto/key_store_passphrase.go')
-rw-r--r-- | crypto/key_store_passphrase.go | 10 |
1 files changed, 4 insertions, 6 deletions
diff --git a/crypto/key_store_passphrase.go b/crypto/key_store_passphrase.go index 1e7c50f96..c7f740ae3 100644 --- a/crypto/key_store_passphrase.go +++ b/crypto/key_store_passphrase.go @@ -22,9 +22,8 @@ */ /* -This key store behaves as KeyStorePlaintextFile with the difference that -the private key is encrypted and encoded as a JSON object within the -key JSON object. +This key store behaves as KeyStorePlain with the difference that +the private key is encrypted and on disk uses another JSON encoding. Cryptography: @@ -39,9 +38,9 @@ Cryptography: Encoding: -1. On disk, ciphertext, salt and IV are encoded as a JSON object. +1. On disk, ciphertext, salt and IV are encoded in a nested JSON object. cat a key file to see the structure. -2. byte arrays are ASCII HEX encoded as JSON strings. +2. byte arrays are base64 JSON strings. 3. The EC private key bytes are in uncompressed form [7]. They are a big-endian byte slice of the absolute value of D [8][9]. 4. The checksum is the last 32 bytes of the plaintext byte array and the @@ -205,7 +204,6 @@ func DecryptKey(ks keyStorePassphrase, keyId *uuid.UUID, auth string) (keyBytes return keyBytes, err } -// plain crypto/rand. this is /dev/urandom on Unix-like systems. func getEntropyCSPRNG(n int) []byte { mainBuff := make([]byte, n) _, err := io.ReadFull(crand.Reader, mainBuff) |