cas-lib 0.2.89

A function wrapper layer for RustCrypto and Dalek-Cryptography. Intended to be used in FFI situations with a global heap deallactor at the top level project.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

use rand::RngCore;
use aes_gcm::{aead::Aead};
use chacha20poly1305::{ChaCha20Poly1305, Key, Nonce, KeyInit};
use rand::rngs::OsRng;

use crate::error::{CasError, CasResult};
use crate::symmetric::cas_symmetric_encryption::Chacha20Poly1305Encryption;

const CHACHA20_KEY_LEN: usize = 32;
const CHACHA20_NONCE_LEN: usize = 12;

pub struct CASChacha20Poly1305;

impl Chacha20Poly1305Encryption for CASChacha20Poly1305 {

    fn generate_key() -> Vec<u8> {
        ChaCha20Poly1305::generate_key(&mut OsRng).to_vec()
    }

    fn encrypt_plaintext(aes_key: Vec<u8>, nonce: Vec<u8>, plaintext: Vec<u8>) -> CasResult<Vec<u8>> {
        if aes_key.len() != CHACHA20_KEY_LEN {
            return Err(CasError::InvalidKey);
        }
        if nonce.len() != CHACHA20_NONCE_LEN {
            return Err(CasError::InvalidNonce);
        }
        let key = Key::from_slice(aes_key.as_slice());
        let cipher = ChaCha20Poly1305::new(&key);
        let nonce = Nonce::from_slice(nonce.as_slice());
        cipher
            .encrypt(nonce, plaintext.as_ref())
            .map_err(|_| CasError::EncryptionFailed)
    }

    fn decrypt_ciphertext(aes_key: Vec<u8>, nonce: Vec<u8>, ciphertext: Vec<u8>) -> CasResult<Vec<u8>> {
        if aes_key.len() != CHACHA20_KEY_LEN {
            return Err(CasError::InvalidKey);
        }
        if nonce.len() != CHACHA20_NONCE_LEN {
            return Err(CasError::InvalidNonce);
        }
        let key = Key::from_slice(aes_key.as_slice());
        let cipher = ChaCha20Poly1305::new(&key);
        let nonce = Nonce::from_slice(nonce.as_slice());
        cipher
            .decrypt(nonce, ciphertext.as_ref())
            .map_err(|_| CasError::DecryptionFailed)
    }

    fn generate_nonce() -> Vec<u8> {
        let mut nonce = [0u8; CHACHA20_NONCE_LEN]; // ChaCha20Poly1305 uses 96-bit (12-byte) nonces
        OsRng.fill_bytes(&mut nonce);
        nonce.to_vec()
    }
}