Decrypt PEM

Golang package that decrypts encrypted PEM files and blocks. Provides (optional) TTY prompt for input for password.

Installation

go get github.com/phayes/decryptpem

Example

// Get private key, prompt for password and decrypt if necessarypem, err:=decryptpem.DecryptFileWithPrompt("/path/to/private_key.pem")
iferr!=nil {
log.Fatal(err)
}
privateKey, err:=x509.ParsePKCS1PrivateKey(pem.Bytes());
iferr!=nil {
log.Fatal(err)
}
// It will also work with unencrypted plaintext PEM filespem, err:=decryptpem.DecryptFileWithPrompt("/path/to/plaintext_key.pem") // Will not prompt for pasword.iferr!=nil {
log.Fatal(err)
}
privateKey, err:=x509.ParsePKCS1PrivateKey(pem.Bytes());
iferr!=nil {
log.Fatal(err)
}

Configuration

There are two configuration variables provided:

// PasswordDelay sets the delay for any password tries and retries as a defence against brute force password guessing// By default there is no delayvardecryptpem.PasswordDelay time.Duration// MaxTries sets the maximum number of times a password may be tried before erroring out.// A MaxTries of 1 means that there is only one try allowed (no retries)// A MaxTries of 0 means infinite retries are allowed.// When tries run out, an error of x509.IncorrectPasswordError will be returned.vardecryptpem.MaxTriesint