Add symmetric AES encryption functions

crypto/subtle.go

@@ -0,0 +1,31 @@
+package crypto
+
+import (
+	"crypto/aes"
+	"crypto/cipher"
+
+	"golang.org/x/crypto/scrypt"
+)
+
+// EncryptWithoutIntegrity encrypts data with AES-CTR. Note: this encryption mode is not secure when stored/sent on an untrusted medium.
+func EncryptWithoutIntegrity(key, input, iv []byte) (output []byte, err error) {
+	var block cipher.Block
+	if block, err = aes.NewCipher(key); err != nil {
+		return
+	}
+	output = make([]byte, len(input))
+	stream := cipher.NewCTR(block, iv)
+	stream.XORKeyStream(output, input)
+	return
+}
+
+// DecryptWithoutIntegrity decrypts data encrypted with AES-CTR.
+func DecryptWithoutIntegrity(key, input, iv []byte) ([]byte, error) {
+	// AES-CTR decryption is identical to encryption.
+	return EncryptWithoutIntegrity(key, input, iv)
+}
+
+// DeriveKey derives a key from a password using scrypt.
+func DeriveKey(password string, salt []byte) ([]byte, error) {
+	return scrypt.Key([]byte(password), salt, 32768, 8, 1, 32)
+}