//! Implements an Aes256Siv encryption engine //! //! Can be initialised from scratch or with a pw/salt //! combintaion which derives a key via the `keybob` crate. use lcc::traits::{AutoEncoder, Encryptable, EncryptionHandler}; use lcc::{EncryptedBody, PackedData}; use miscreant::aead::{Aes256Siv, Algorithm}; use super::databody::DataBody; use lcc::crypto::random; use lcc::crypto::{Key, KeyType}; impl Encryptable for DataBody {} pub struct AesEngine { ctx: Aes256Siv, _key: Option, iv: Vec, } impl AesEngine { /// Initialise an AesEngine and take ownership of a raw key pub fn new(key: Key) -> Self { assert!(key.len() == 64); Self { ctx: Aes256Siv::new(&key.as_slice()), _key: Some(key), iv: random::bytes(64), } } /// Generate new key and encryption engine #[deprecated] pub fn generate() -> Self { // let key = Key::new(KeyType::Aes256); // let len = key.len(); // Self { // ctx: Aes256Siv::new(&key.as_slice()), // _key: key, // new_key: None, // iv: random::bytes(len), // } unimplemented!() } /// Generate an Aes context from password #[deprecated] pub fn from_pw(pw: &str, salt: &str) -> Self { // let key = Key::from_pw(KeyType::Aes256, pw, salt); // let len = key.len(); // Self { // ctx: Aes256Siv::new(&key.as_slice()), // _key: key, // new_key: None, // iv: random::bytes(len), // } unimplemented!() } /// Load a packed data object which contains an Aes context #[deprecated] pub fn load(packed: PackedData, pw: &str, salt: &str) -> Option { // let mut temp = Self::from_pw(pw, salt); // let k: Key = Key::decode(&String::from_utf8(temp.decrypt_primitive(&packed)?).ok()?).ok()?; // Some(Self { // ctx: Aes256Siv::new(&k.as_slice()), // _key: k, // new_key: None, // iv: packed.iv, // }) unimplemented!() } /// Serialise the current context to save it somewhere #[deprecated] pub fn save(&mut self) -> PackedData { // let k = self._key.as_slice().into(); // self.encrypt_primitive(&k) unimplemented!() } fn encrypt_primitive(&mut self, data: &Vec) -> PackedData { let nonce = random::bytes(64); let iv = &self.iv.as_slice(); let encrypted = self.ctx.seal(nonce.as_slice(), iv, data.as_slice()); PackedData { iv: self.iv.clone(), data: encrypted, nonce: nonce, } } fn decrypt_primitive(&mut self, packed: &PackedData) -> Option> { let iv = &self.iv.as_slice(); Some( self.ctx .open(packed.nonce.as_slice(), iv, packed.data.as_slice()) .ok()?, ) } } impl EncryptionHandler for AesEngine { fn encrypt(&mut self, item: DataBody) -> EncryptedBody { let ser = item.encode().unwrap(); let data = self .encrypt_primitive(&ser.as_bytes().to_vec()) .encode() .unwrap(); EncryptedBody { data } } fn decrypt(&mut self, item: EncryptedBody) -> Option { let packed = PackedData::decode(&item.data).ok()?; Some(DataBody::decode(&String::from_utf8(self.decrypt_primitive(&packed)?).ok()?).ok()?) } }