cas-lib 0.2.89

A function wrapper layer for RustCrypto and Dalek-Cryptography. Intended to be used in FFI situations with a global heap deallactor at the top level project.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

use ascon_aead::{AsconAead128 as Ascon128, Key, AsconAead128Nonce, aead::{Aead, KeyInit}};
use rand::{rngs::OsRng, RngCore};

use crate::error::{CasError, CasResult};

use super::cas_ascon_aead::{CASAsconAead};

const ASCON_KEY_LEN: usize = 16;
const ASCON_NONCE_LEN: usize = 16;

pub struct AsconAead;

impl CASAsconAead for AsconAead {
    /// Encrypts with AsconAead.
    /// Returns an error if the key or nonce is not 16 bytes long, or if encryption fails.
    fn encrypt(key: Vec<u8>, nonce: Vec<u8>, plaintext: Vec<u8>) -> CasResult<Vec<u8>> {
        let key_array: [u8; ASCON_KEY_LEN] =
            key.try_into().map_err(|_| CasError::InvalidKey)?;
        let nonce_array: [u8; ASCON_NONCE_LEN] =
            nonce.try_into().map_err(|_| CasError::InvalidNonce)?;
        let key_generic_array = Key::<Ascon128>::from(key_array);
        let nonce_generic_array = AsconAead128Nonce::from(nonce_array);
        let cipher = Ascon128::new(&key_generic_array);
        cipher
            .encrypt(&nonce_generic_array, plaintext.as_ref())
            .map_err(|_| CasError::EncryptionFailed)
    }

    /// Decrypts with AsconAead.
    /// Returns an error if the key or nonce is not 16 bytes long, or if decryption fails.
    fn decrypt(key: Vec<u8>, nonce: Vec<u8>, ciphertext: Vec<u8>) -> CasResult<Vec<u8>> {
        let key_array: [u8; ASCON_KEY_LEN] =
            key.try_into().map_err(|_| CasError::InvalidKey)?;
        let nonce_array: [u8; ASCON_NONCE_LEN] =
            nonce.try_into().map_err(|_| CasError::InvalidNonce)?;
        let key_generic_array = Key::<Ascon128>::from(key_array);
        let nonce_generic_array = AsconAead128Nonce::from(nonce_array);
        let cipher = Ascon128::new(&key_generic_array);
        cipher
            .decrypt(&nonce_generic_array, ciphertext.as_ref())
            .map_err(|_| CasError::DecryptionFailed)
    }

    /// Generates a 16-byte key for Ascon Aead
    fn generate_key() -> Vec<u8> {
        let mut key_bytes = [0u8; ASCON_KEY_LEN];
        OsRng.fill_bytes(&mut key_bytes);
        return Key::<Ascon128>::from(key_bytes).to_vec();
    }

    /// Generates a Ascon Aead nonce
    fn generate_nonce() -> Vec<u8> {
        let mut nonce_bytes = [0u8; ASCON_NONCE_LEN];
        OsRng.fill_bytes(&mut nonce_bytes);
        return AsconAead128Nonce::from(nonce_bytes).to_vec();
    }
}