internal/goaes.go


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15

package internal

import (
	"crypto/rand"
	"fmt"
	"io"
)

func NewDEK() (DEK, error) {
	key := make([]byte, 32) // AES-256
	if _, err := io.ReadFull(rand.Reader, key); err != nil {
		return nil, fmt.Errorf("random DEK gen: %w", err)
	}
	return DEK(key), nil
}