Z.Crypto.KeyWrap

This module provides RFC3394 key Wrapping. It uses a 128-bit, 192-bit, or 256-bit key to encrypt an input key. AES is always used. The input must be a multiple of 8 bytes; if not an exception is thrown.

Documentation

keyWrap

Arguments

:: Bytes

key

-> Bytes

kek

-> IO Bytes

Wrap the input key using kek (the key encryption key), and return the result. It will be 8 bytes longer than the input key.

keyUnwrap

Arguments

:: Bytes

wrapped key

-> Bytes

kek

-> IO Bytes

Unwrap a key wrapped with rfc3394_keywrap.