Crate block_modes

This crate contains generic implementation of block cipher modes of operation.

Note that some block modes (such as CTR, CFB, and OFB) transform block ciphers into stream ciphers. Implementations in this crate require padding, so if you want use those modes as stream ciphers (i.e. without padding), then check out crates in the RustCrypto/stream-ciphers repository.

Usage example

use aes::Aes128;
use block_modes::{BlockMode, Cbc};
use block_modes::block_padding::Pkcs7;
use hex_literal::hex;

// create an alias for convenience
type Aes128Cbc = Cbc<Aes128, Pkcs7>;

let key = hex!("000102030405060708090a0b0c0d0e0f");
let iv = hex!("f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff");
let plaintext = b"Hello world!";
let cipher = Aes128Cbc::new_from_slices(&key, &iv).unwrap();

// buffer must have enough space for message+padding
let mut buffer = [0u8; 32];
// copy message to the buffer
let pos = plaintext.len();
buffer[..pos].copy_from_slice(plaintext);
let ciphertext = cipher.encrypt(&mut buffer, pos).unwrap();

assert_eq!(ciphertext, hex!("1b7a4c403124ae2fb52bedc534d82fa8"));

// re-create cipher mode instance
let cipher = Aes128Cbc::new_from_slices(&key, &iv).unwrap();
let mut buf = ciphertext.to_vec();
let decrypted_ciphertext = cipher.decrypt(&mut buf).unwrap();

assert_eq!(decrypted_ciphertext, plaintext);

With an enabled alloc feature (which is enabled by default) you can use encrypt_vec and descrypt_vec methods:

let cipher = Aes128Cbc::new_from_slices(&key, &iv).unwrap();
let ciphertext = cipher.encrypt_vec(plaintext);

assert_eq!(ciphertext, hex!("1b7a4c403124ae2fb52bedc534d82fa8"));

let cipher = Aes128Cbc::new_from_slices(&key, &iv).unwrap();
let decrypted_ciphertext = cipher.decrypt_vec(&ciphertext).unwrap();

assert_eq!(decrypted_ciphertext, plaintext);

Re-exports

pub use block_padding;
pub use cipher;

Structs

BlockModeError	Block mode error.
Cbc	Cipher Block Chaining (CBC) block cipher mode instance.
Cfb	Cipher feedback (CFB) block mode instance with a full block feedback.
Cfb8	Cipher feedback (CFB) block mode instance with a full block feedback.
Ecb	Electronic Codebook (ECB) block cipher mode instance.
Ige	Infinite Garble Extension (IGE) block cipher mode instance.
InvalidKeyIvLength	Invalid key or IV length error.
Ofb	Output feedback (OFB) block mode instance with a full block feedback.
Pcbc	Propagating Cipher Block Chaining (PCBC) mode instance.

Traits

BlockMode	Trait for a block cipher mode of operation that is used to apply a block cipher operation to input data to transform it into a variable-length output message.
IvState	Trait for a BlockMode, used to obtain the current state in the form of an IV that can initialize a BlockMode later and resume the original operation.