opentofu/internal/encryption
Andrei Ciobanu 8e808f3cc2
Make it clear for the external key providers when it needs to generate decryption key (#3672)
Signed-off-by: Andrei Ciobanu <andrei.ciobanu@opentofu.org>
2026-01-27 12:20:23 +02:00
..
compliancetest [State Encryption] Compliance tests (#1377) 2024-03-14 15:53:40 +01:00
config Improve encryption internals and fix a few bugs therein (#2551) 2025-03-06 12:51:09 -05:00
enctest tofu: EvalContext expression evaluation takes context.Context (#2937) 2025-06-19 10:46:31 +01:00
keyprovider Make it clear for the external key providers when it needs to generate decryption key (#3672) 2026-01-27 12:20:23 +02:00
method Key provider decoding moved from gohcl to hcl/v2 (#3654) 2026-01-15 17:51:16 +02:00
registry Key provider decoding moved from gohcl to hcl/v2 (#3654) 2026-01-15 17:51:16 +02:00
base.go tofu: EvalContext expression evaluation takes context.Context (#2937) 2025-06-19 10:46:31 +01:00
default_registry.go Implement the Azure Key Provider 2025-09-29 06:19:02 -04:00
dual_custody_test.go tofu: EvalContext expression evaluation takes context.Context (#2937) 2025-06-19 10:46:31 +01:00
encryption.go tofu: EvalContext expression evaluation takes context.Context (#2937) 2025-06-19 10:46:31 +01:00
example_test.go tofu: EvalContext expression evaluation takes context.Context (#2937) 2025-06-19 10:46:31 +01:00
keyprovider.go Ephemeral variables (#3108) 2025-09-10 07:45:23 -04:00
keyprovider_meta_change_test.go tofu: EvalContext expression evaluation takes context.Context (#2937) 2025-06-19 10:46:31 +01:00
methods.go Key provider decoding moved from gohcl to hcl/v2 (#3654) 2026-01-15 17:51:16 +02:00
plan.go tofu: EvalContext expression evaluation takes context.Context (#2937) 2025-06-19 10:46:31 +01:00
README.md Documentation updates for 1.7.0-alpha1 (state encryption) (#1396) 2024-03-14 15:05:05 +01:00
state.go tofu: EvalContext expression evaluation takes context.Context (#2937) 2025-06-19 10:46:31 +01:00
targets.go fix: Improve validation for encryption method identifiers (#3048) 2025-07-21 14:38:02 +01:00
targets_test.go Key provider decoding moved from gohcl to hcl/v2 (#3654) 2026-01-15 17:51:16 +02:00

OpenTofu State and Plan encryption

Warning

This file is not an end-user documentation, it is intended for developers. Please follow the user documentation on the OpenTofu website unless you want to work on the encryption code.

This folder contains the code for state and plan encryption. For a quick example on how to use this package, please take a look at the example_test.go file.

Structure

The current folder contains the top level API. It requires a registry for holding the available key providers and encryption methods, which is located in the registry folder. The key providers are located in the keyprovider folder, while the encryption methods are located in the method folder. You can also find the configuration struct and its related functions in the config folder.

Further reading

For a detailed design document on state encryption, please read this document.