aboutsummaryrefslogtreecommitdiff
path: root/lockchain-crypto/src/engine.rs
blob: 388f4ccc4f0d3716f0ebb4cd8bc16ea68da326db (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
//!

use lcc::{traits::{AutoEncoder, Encryptable, EncryptionHandler},
          EncryptedBody};
use miscreant::aead::{Aes256Siv, Algorithm};

use super::data::PackedData;
use super::databody::DataBody;
use super::{keys::{Key, KEY_LENGTH},
            utils::random};

use std::collections::BTreeMap;

impl Encryptable for DataBody {}

pub struct AesEngine {
    ctx: Aes256Siv,
    key: Key,
    iv: Vec<u8>,
}

impl AesEngine {
    /// Generate new key and encryption engine
    pub fn generate() -> Self {
        let key = Key::generate();
        Self {
            ctx: Aes256Siv::new(&key.to_slice()),
            key,
            iv: random::bytes(KEY_LENGTH),
        }
    }

    pub fn from_pw(pw: &str, salt: &str) -> Self {
        let key = Key::from_password(pw, salt);
        Self {
            ctx: Aes256Siv::new(&key.to_slice()),
            key,
            iv: random::bytes(KEY_LENGTH),
        }
    }
}

impl EncryptionHandler<DataBody> for AesEngine {
    fn encrypt(&mut self, item: DataBody) -> EncryptedBody {
        let ser = item.encode();
        let nonce = random::bytes(64);
        let iv = &self.iv.as_slice();
        let data = &ser.as_bytes();

        let encrypted = self.ctx.seal(nonce.as_slice(), iv, data);
        let data = PackedData {
            iv: self.iv.clone(),
            data: encrypted,
            nonce: nonce,
        }.encode();

        EncryptedBody { data }
    }

    fn decrypt(&mut self, item: EncryptedBody) -> Option<DataBody> {
        let packed = PackedData::decode(&item.data);
        let iv = &self.iv.as_slice();
        let decrypted = self.ctx
            .open(packed.nonce.as_slice(), iv, packed.data.as_slice())
            .ok()?;

        Some(DataBody::decode(&String::from_utf8(decrypted).ok()?))
    }
}