chore: clean up security

README.md

@@ -2,13 +2,13 @@
 
 ## Features
 
-| Package   | Examples   | Use Case                          |
-| --------- | ---------- | --------------------------------- |
-| api       | http       | build gateway servers             |
-| client    | grpc       | synchronous communication         |
-| runtime   | kubernetes | service info                      |
-| security  | jwts, TBD  | token provisioning and encryption |
-| server    | grpc       | build backend servers             |
-| store     | cockroach  | data persistence                  |
-| streams   | TBD        | asynchronous communication        |
-| telemetry | memory     | logs, metrics, and traces         |
+| Package   | Examples        | Use Case                   |
+| --------- | --------------- | -------------------------- |
+| api       | http            | build gateway servers      |
+| client    | grpc            | synchronous communication  |
+| runtime   | kubernetes      | service info               |
+| security  | jwts, nacl, TBD | tokens, secrets, and certs |
+| server    | grpc            | build backend servers      |
+| store     | cockroach       | data persistence           |
+| streams   | TBD             | asynchronous communication |
+| telemetry | memory          | logs, metrics, and traces  |

security/secret/naclbox/naclbox.go

@@ -0,0 +1 @@
+package naclbox

security/secret/naclbox/naclbox_test.go

@@ -0,0 +1 @@
+package naclbox

security/secret/naclbox/options.go

@@ -0,0 +1 @@
+package naclbox

security/secret/options.go

@@ -0,0 +1,57 @@
+package secret
+
+import "context"
+
+type SecretOption func(o *SecretOptions)
+
+type SecretOptions struct {
+	Context context.Context
+}
+
+func NewSecretOptions(opts ...SecretOption) SecretOptions {
+	options := SecretOptions{
+		Context: context.Background(),
+	}
+
+	for _, fn := range opts {
+		fn(&options)
+	}
+
+	return options
+}
+
+type EncryptOption func(o *EncryptOptions)
+
+type EncryptOptions struct {
+	Context context.Context
+}
+
+func NewEncryptOptions(opts ...EncryptOption) EncryptOptions {
+	options := EncryptOptions{
+		Context: context.Background(),
+	}
+
+	for _, fn := range opts {
+		fn(&options)
+	}
+
+	return options
+}
+
+type DecryptOption func(o *DecryptOptions)
+
+type DecryptOptions struct {
+	Context context.Context
+}
+
+func NewDecryptOptions(opts ...DecryptOption) DecryptOptions {
+	options := DecryptOptions{
+		Context: context.Background(),
+	}
+
+	for _, fn := range opts {
+		fn(&options)
+	}
+
+	return options
+}

security/secret/secret.go

@@ -0,0 +1,8 @@
+package secret
+
+type Secret interface {
+	Options() SecretOptions
+	Encrypt(bytes []byte, opts ...EncryptOption) ([]byte, error)
+	Decrypt(bytes []byte, opts ...DecryptOption) ([]byte, error)
+	String() string
+}