aes-wasm 0.1.17

//! AEGIS-256X2 AEAD cipher for WASI (WebAssembly System Interface).
//!
//! Provides authenticated encryption and decryption using the AEGIS-256X2 construction.
//!
//! ## Example
//! ```rust
//! use aes_wasm::aegis256x2::{encrypt, decrypt, Key, Nonce};
//! let key = Key::default();
//! let nonce = Nonce::default();
//! let msg = b"hello";
//! let ad = b"ad";
//! let ciphertext = encrypt(msg, ad, &key, nonce);
//! let plaintext = decrypt(ciphertext, ad, &key, nonce).unwrap();
//! assert_eq!(plaintext, msg);
//! ```

mod zig {
    extern "C" {
        pub fn _aegis256x2_encrypt(
            c: *mut u8,
            c_len: usize,
            tag: *mut u8,
            m: *const u8,
            m_len: usize,
            ad: *const u8,
            ad_len: usize,
            nonce: *const u8,
            k: *const u8,
        ) -> i32;

        pub fn _aegis256x2_decrypt(
            m: *mut u8,
            m_len: usize,
            c: *const u8,
            c_len: usize,
            tag: *const u8,
            ad: *const u8,
            ad_len: usize,
            nonce: *const u8,
            k: *const u8,
        ) -> i32;
    }
}

pub use crate::*;

/// The length of the key in bytes.
///
/// This constant is used for key array sizing.
pub const KEY_LEN: usize = 32;
/// The length of the authentication tag in bytes.
///
/// This constant is used for tag array sizing.
pub const TAG_LEN: usize = 32;
/// The length of the nonce in bytes.
///
/// This constant is used for nonce array sizing.
pub const NONCE_LEN: usize = 32;

/// Key type for AEGIS-256X2 (32 bytes).
pub type Key = [u8; KEY_LEN];
/// Tag type for AEGIS-256X2 (32 bytes).
pub type Tag = [u8; TAG_LEN];
/// Nonce type for AEGIS-256X2 (32 bytes).
pub type Nonce = [u8; NONCE_LEN];

/// Encrypts a message and returns the ciphertext and authentication tag separately (detached).
///
/// # Arguments
/// * `msg` - The plaintext message to encrypt.
/// * `ad` - Additional authenticated data (AAD).
/// * `key` - Reference to the secret key.
/// * `nonce` - Nonce value.
///
/// # Returns
/// Tuple of ciphertext and tag.
///
/// # Example
/// ```
/// use aes_wasm::aegis256x2::{encrypt_detached, Key, Nonce};
/// let key = Key::default();
/// let nonce = Nonce::default();
/// let msg = b"hello";
/// let ad = b"ad";
/// let (ciphertext, tag) = encrypt_detached(msg, ad, &key, nonce);
/// ```
pub fn encrypt_detached(
    msg: impl AsRef<[u8]>,
    ad: impl AsRef<[u8]>,
    key: &Key,
    nonce: Nonce,
) -> (Vec<u8>, Tag) {
    let msg = msg.as_ref();
    let ad = ad.as_ref();
    let ciphertext_len = msg.len();
    let mut ciphertext = Vec::with_capacity(ciphertext_len);
    let mut tag = Tag::default();
    unsafe {
        zig::_aegis256x2_encrypt(
            ciphertext.as_mut_ptr(),
            ciphertext_len,
            tag.as_mut_ptr(),
            msg.as_ptr(),
            msg.len(),
            ad.as_ptr(),
            ad.len(),
            nonce.as_ptr(),
            key.as_ptr(),
        );
        ciphertext.set_len(ciphertext_len);
    };
    (ciphertext, tag)
}

/// Encrypts a message and returns the ciphertext with the authentication tag appended.
///
/// # Arguments
/// * `msg` - The plaintext message to encrypt.
/// * `ad` - Additional authenticated data (AAD).
/// * `key` - Reference to the secret key.
/// * `nonce` - Nonce value.
///
/// # Returns
/// Ciphertext with tag appended.
///
/// # Example
/// ```
/// use aes_wasm::aegis256x2::{encrypt, Key, Nonce};
/// let key = Key::default();
/// let nonce = Nonce::default();
/// let msg = b"hello";
/// let ad = b"ad";
/// let ciphertext = encrypt(msg, ad, &key, nonce);
/// ```
pub fn encrypt(msg: impl AsRef<[u8]>, ad: impl AsRef<[u8]>, key: &Key, nonce: Nonce) -> Vec<u8> {
    let mut res = encrypt_detached(msg, ad, key, nonce);
    res.0.extend_from_slice(res.1.as_ref());
    res.0
}

/// Decrypts a ciphertext and tag, returning the plaintext if verification succeeds.
///
/// # Arguments
/// * `ciphertext` - The ciphertext to decrypt.
/// * `tag` - The authentication tag.
/// * `ad` - Additional authenticated data (AAD).
/// * `key` - Reference to the secret key.
/// * `nonce` - Nonce value.
///
/// # Returns
/// `Ok(plaintext)` if verification succeeds, or `Err(Error)` if it fails.
///
/// # Example
/// ```
/// use aes_wasm::aegis256x2::{encrypt_detached, decrypt_detached, Key, Nonce};
/// let key = Key::default();
/// let nonce = Nonce::default();
/// let msg = b"hello";
/// let ad = b"ad";
/// let (ciphertext, tag) = encrypt_detached(msg, ad, &key, nonce);
/// let plaintext = decrypt_detached(ciphertext, &tag, ad, &key, nonce).unwrap();
/// ```
pub fn decrypt_detached(
    ciphertext: impl AsRef<[u8]>,
    tag: &Tag,
    ad: impl AsRef<[u8]>,
    key: &Key,
    nonce: Nonce,
) -> Result<Vec<u8>, Error> {
    let ciphertext = ciphertext.as_ref();
    let ad = ad.as_ref();
    let msg_len = ciphertext.len();
    let mut msg = Vec::with_capacity(msg_len);
    unsafe {
        let res = zig::_aegis256x2_decrypt(
            msg.as_mut_ptr(),
            msg_len,
            ciphertext.as_ptr(),
            ciphertext.len(),
            tag.as_ptr(),
            ad.as_ptr(),
            ad.len(),
            nonce.as_ptr(),
            key.as_ptr(),
        );
        if res != 0 {
            return Err(Error::VerificationFailed);
        }
        msg.set_len(msg_len);
    };
    Ok(msg)
}

/// Decrypts a ciphertext with tag appended, returning the plaintext if verification succeeds.
///
/// # Arguments
/// * `ciphertext_and_tag` - Ciphertext with tag appended.
/// * `ad` - Additional authenticated data (AAD).
/// * `key` - Reference to the secret key.
/// * `nonce` - Nonce value.
///
/// # Returns
/// `Ok(plaintext)` if verification succeeds, or `Err(Error)` if it fails.
///
/// # Example
/// ```
/// use aes_wasm::aegis256x2::{encrypt, decrypt, Key, Nonce};
/// let key = Key::default();
/// let nonce = Nonce::default();
/// let msg = b"hello";
/// let ad = b"ad";
/// let ciphertext = encrypt(msg, ad, &key, nonce);
/// let plaintext = decrypt(ciphertext, ad, &key, nonce).unwrap();
/// ```
pub fn decrypt(
    ciphertext_and_tag: impl AsRef<[u8]>,
    ad: impl AsRef<[u8]>,
    key: &Key,
    nonce: Nonce,
) -> Result<Vec<u8>, Error> {
    let ciphertext_and_tag = ciphertext_and_tag.as_ref();
    if ciphertext_and_tag.len() < TAG_LEN {
        return Err(Error::VerificationFailed);
    }
    let ciphertext = &ciphertext_and_tag[..ciphertext_and_tag.len() - TAG_LEN];
    let tag = &ciphertext_and_tag[ciphertext_and_tag.len() - TAG_LEN..];
    decrypt_detached(ciphertext, tag.try_into().unwrap(), ad, key, nonce)
}

#[cfg(test)]
mod test {
    use super::*;

    #[test]
    fn aegis256x2() {
        let key = Key::default();
        let nonce = Nonce::default();
        let msg = b"hello world";
        let ad = b"additional data";
        let (ciphertext, tag) = encrypt_detached(msg, ad, &key, nonce);
        let plaintext = decrypt_detached(ciphertext, &tag, ad, &key, nonce).unwrap();
        assert_eq!(plaintext, msg);
        let ciphertext_and_tag = encrypt(msg, ad, &key, nonce);
        let plaintext = decrypt(ciphertext_and_tag, ad, &key, nonce).unwrap();
        assert_eq!(plaintext, msg);
    }
}