This repository includes the YOTI Core team interview test, and its resources.
At Yoti we use a microservice architecture. This test asks for the development of a software encryption module to fit this architecture.
Please implement an encryption-server with two endpoints, described below. The
server's interface may, for the purposes of this test, be anything convenient
for you: it could be Unix sockets, HTTP, or even pure command line driven.
Use of built-in and third party Go libraries is encouraged, particularly with regard to serialising data/messages/commands.
We're happy for the data store to be implemented in any way: it could be an in-memory structure (don't worry about memory usage), on-disk, or using a third party library/database.
Inputs:
- data to encrypt (plaintext)
- an ID (will be used later to retrieve the data)
Actions:
- generate an AES encryption key
- encrypt the plaintext data using the generated key
- store the encrypted data (ciphertext)
Outputs:
- the key used to encrypt the ciphertext
Inputs:
- encryption key
- ID
Actions:
- retrieve the encrypted data (ciphertext)
- decrypt the ciphertext using the provided key
Outputs:
- the original plaintext
A client interface has also been provided. Please implement a client which satisfies the interface in order to interact with the above server.
Optional things for extra credits! Only do these if you wish to spend more time on this. We're happy to consider answers with and without these.
-
It would be desirable for the data store key (used internally by
encryption-server) to be difficult to derive from the original ID provided when storing the data. The intention is to provide an extra layer of protection of user data (hiding any information in the data IDs) if an attacker was able to dump the raw database. -
Split the storage component out into its own microservice.
All work should be committed to a git repository where the commit history can be
reviewed. github is fine, but we're also happy for a .tar or similar of the
git repository.
Your solution should also be easy to run/verify. To that end please feel free to provide any further instructions, documentation, etc on how to go about the verification process.
Run server using: go run server.go
Run client test using go run client.go