Add ability to encrypt files

1 files changed, 38 insertions, 0 deletions

diff --git a/internal/encrypt.go b/internal/encrypt.go
new file mode 100644
index 0000000..a404de7
--- /dev/null
+++ b/internal/encrypt.go
@@ -0,0 +1,38 @@
+package internal
+
+import (
+	"log"
+
+	"github.com/joho/godotenv"
+)
+
+func Encrypt(data []byte) (EncryptedDataPayload, error) {
+	if err := godotenv.Load(); err != nil {
+		log.Fatal("Error loading .env file")
+	}
+
+	kek, err := NewKEKFromEnvB64("SECRET_KEY")
+	if err != nil {
+		return EncryptedDataPayload{}, err
+	}
+
+	dek, err := NewDEK()
+	if err != nil {
+		return EncryptedDataPayload{}, err
+	}
+
+	edek, err := WrapDEK(dek, kek)
+	if err != nil {
+		return EncryptedDataPayload{}, err
+	}
+
+	ct, err := EncryptData(data, dek)
+	if err != nil {
+		return EncryptedDataPayload{}, err
+	}
+
+	return EncryptedDataPayload{
+		DEK:     edek,
+		Payload: ct,
+	}, nil
+}