Authentifizierte kryptografische Verschlüsselung mittels AES-GCM-Chiffrenkonstrukten

package main
 
import (
	"crypto/aes"
	"crypto/cipher"
	"crypto/rand"
	"fmt"
	"io"
)
 
func EncryptAESGCM(key []byte, plaintext []byte) ([]byte, error) {
	block, err := aes.NewCipher(key)
	if err != nil {
		return nil, err
	}
	gcm, err := cipher.NewGCM(block)
	if err != nil {
		return nil, err
	}
	nonce := make([]byte, gcm.NonceSize())
	if _, err := io.ReadFull(rand.Reader, nonce); err != nil {
		return nil, err
	}
	return gcm.Seal(nonce, nonce, plaintext, nil), nil
}
 
func main() {
	key := make([]byte, 32)
	rand.Read(key)
	cipherText, _ := EncryptAESGCM(key, []byte("confidential payload"))
	fmt.Printf("Encrypted output byte length: %d\n", len(cipherText))
}