bitwarden-crypto 3.0.0

use super::{
    kdf::{Kdf, KdfDerivedKeyMaterial},
    master_key::decrypt_user_key,
    utils::stretch_key,
};
use crate::{
    EncString, KeyDecryptable, KeyEncryptable, Result, SymmetricCryptoKey,
    keys::key_encryptable::CryptoKey,
};

/// Pin Key.
///
/// Derived from a specific password, used for pin encryption and exports.
pub struct PinKey(KdfDerivedKeyMaterial);

impl PinKey {
    /// Derives a users pin key from their password, email and KDF.
    pub fn derive(password: &[u8], email: &[u8], kdf: &Kdf) -> Result<Self> {
        KdfDerivedKeyMaterial::derive_kdf_key(password, email, kdf).map(Self)
    }

    /// Encrypt the users user key
    pub fn encrypt_user_key(&self, user_key: &SymmetricCryptoKey) -> Result<EncString> {
        user_key.encrypt_with_key(self)
    }

    /// Decrypt the users user key
    pub fn decrypt_user_key(&self, user_key: EncString) -> Result<SymmetricCryptoKey> {
        decrypt_user_key(&self.0.0, user_key)
    }
}

impl CryptoKey for PinKey {}

impl KeyEncryptable<PinKey, EncString> for &SymmetricCryptoKey {
    fn encrypt_with_key(self, key: &PinKey) -> Result<EncString> {
        let stretched_key = SymmetricCryptoKey::Aes256CbcHmacKey(stretch_key(&key.0.0));
        // The (stretched) pin key is currently always an AES-256-CBC-HMAC key, and wraps a
        // bitwarden legacy encoded symmetric key
        self.to_encoded().encrypt_with_key(&stretched_key)
    }
}

impl KeyEncryptable<PinKey, EncString> for String {
    fn encrypt_with_key(self, key: &PinKey) -> Result<EncString> {
        self.encrypt_with_key(&SymmetricCryptoKey::Aes256CbcHmacKey(stretch_key(&key.0.0)))
    }
}

impl KeyDecryptable<PinKey, String> for EncString {
    fn decrypt_with_key(&self, key: &PinKey) -> Result<String> {
        let stretched_key = SymmetricCryptoKey::Aes256CbcHmacKey(stretch_key(&key.0.0));
        self.decrypt_with_key(&stretched_key)
    }
}