search

zntrio / paseto

v3/v4 Golang PASETO implementation
Apache License 2.0
7 stars 1 forks source link
blake2b chacha20 crypto ed25519 golang golang-library jwt-alternative paseto paseto-tokens

readme

PASETO

This go library exposed as zntr.io/paseto provides :

This is used in my OIDC framework SolID.

I removed the JSON part encoding requirement to allow PASETO to be used as a generic data container. You can still use JSON, but also more bytes oriented serialization for message, footer and implicit-assertion.

What is PASETO?

From https://github.com/paragonie/paseto :

PASETO: Platform-Agnostic Security Tokens Paseto is everything you love about JOSE (JWT, JWE, JWS) without any of the many design deficits that plague the JOSE standards.

How to use the library?

import (
  pasetov4 "zntr.io/paseto/v4"
)

func main () {
    // Generate an encryption key.
    localKey, err := pasetov4.GenerateLocalKey(rand.Reader)
    if err != nil {
        panic(err)
    }

    // Prepare the message
    m := []byte("my super secret message")

    // Encrypt the token
    token, err := pasetov4.Encrypt(rand.Reader, localKey, m, nil, nil)
    if err != nil {
        panic(err)
    }
}

More examples - here

Benchmarks

Go version 1.21 / Mac M1

V3

❯ go test -bench=. -test.benchtime=1s
goos: darwin
goarch: arm64
pkg: zntr.io/paseto/v3
Benchmark_Paseto_Encrypt-10       200414          6050 ns/op        8274 B/op         59 allocs/op
Benchmark_Paseto_Decrypt-10       214208          5558 ns/op        8050 B/op         59 allocs/op
Benchmark_Paseto_Sign-10            9921        117440 ns/op        9060 B/op         86 allocs/op
Benchmark_Paseto_Verify-10          2373        504017 ns/op        2504 B/op         36 allocs/op
PASS
ok      zntr.io/paseto/v3   6.169s

V4

❯ go test -bench=. -test.benchtime=1s
goos: darwin
goarch: arm64
pkg: zntr.io/paseto/v4
Benchmark_Paseto_Encrypt-10       411024          2532 ns/op        2288 B/op         12 allocs/op
Benchmark_Paseto_Decrypt-10       567030          2092 ns/op        2064 B/op         12 allocs/op
Benchmark_Paseto_Sign-10           51487         23268 ns/op         928 B/op          4 allocs/op
Benchmark_Paseto_Verify-10         23076         51794 ns/op         704 B/op          4 allocs/op
PASS
ok      zntr.io/paseto/v4   5.825s

License

All artifacts and source code are released under Apache 2.0 Software License.

Reference(s)