The following summarizes how to use the Secure Data API in an application. The key size must be 2048 bit.

1. Import the isec gopackage:

   import "intel.com/isec"

2. Create a protection policy by using the NewLocalPolicy function:

   policy, err := isec.NewLocalPolicy(isec.DataUsageRsaPublicKey, isec.DataAccessUpdate, isec.DataFlagsNoVersionTracking)
   if err != nil {
        fmt.Printf("Error string for '%+v' should be nil \n", err)
   }

3. Create an RSA Private Key using the policy you just created:

   pubKeyPolicy, err := isec.NewLocalPolicy(isec.DataUsageRsaPublicKey, isec.DataAccessUse, DataFlagsNoVersionTracking)
       if err != nil {
           logError("NewLocal Policy return with ", err)
           return nil, nil, err
       }
       priKeyPolicy, err := isec.NewLocalPolicy(isec.DataUsageRsaPrivateKey, isec.DataAccessUse, isec.DataFlagsNoVersionTracking)
       if err != nil {
           logError("NewLocal Policy return with ", err)
           return nil, nil, err, pubKey, priKey, isecerr := isec.GenerateKeyPair(isec.KeyGenTypeRSA, 2048, isec.KeyGenMethodDefault, "RRP_HW_Root_Key", pubKeyPolicy, priKeyPolicy)
       }
       if isecerr != nil {
       fmt.Printf("Key Generate failed with: %v", isecerr)
   }
   fmt.Printf("pubKey is %x\n", pubKey.handle)
   fmt.Printf("priKey is %x\n", priKey.handle)

4. Create a Secure Data object of the key by using the NewSecureDataWithPolicy function and reference the handle of the policy object you created in step 1:

   nonsecretdata := []byte("this is nonSecretData")
   data := []byte("this is secret data")
   sd, err := isec.NewSecureDataWithPolicy(data, nonsecretdata, policy)
       if err != nil {
           fmt.Printf("isec.NewSecureDataWithPolicy failed with %v", err)
       }
       fmt.Printf("SecureData object is %v", sd)
   }

Get a Sealed Blob

err := sd.Close()