crymap 2.0.1

A simple, secure IMAP server with encrypted data at rest
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68

//-
// Copyright (c) 2020, Jason Lingle
//
// This file is part of Crymap.
//
// Crymap is free software: you can  redistribute it and/or modify it under the
// terms of  the GNU General Public  License as published by  the Free Software
// Foundation, either version  3 of the License, or (at  your option) any later
// version.
//
// Crymap is distributed  in the hope that  it will be useful,  but WITHOUT ANY
// WARRANTY; without  even the implied  warranty of MERCHANTABILITY  or FITNESS
// FOR  A PARTICULAR  PURPOSE.  See the  GNU General  Public  License for  more
// details.
//
// You should have received a copy of the GNU General Public License along with
// Crymap. If not, see <http://www.gnu.org/licenses/>.

use rand::{rngs::OsRng, Rng};

use super::AES_BLOCK;

/// A context for reading and writing "naked" encrypted streams.
///
/// Naked encrypted streams have no associated metadata, so they are unreadable
/// without this context object. They are used for temporary buffers that must
/// be spilled to disk. Internally, this operates with AES-128-CTR, allowing it
/// to operate on a 1:1 basis.
///
/// Each context has a unique key and IV.
#[derive(Clone, Copy)]
pub struct NakedCryptContext {
    key: [u8; AES_BLOCK],
    iv: [u8; AES_BLOCK],
}

impl NakedCryptContext {
    pub fn new() -> Self {
        NakedCryptContext {
            key: OsRng.gen(),
            iv: OsRng.gen(),
        }
    }

    pub fn encryptor(&self) -> openssl::symm::Crypter {
        let mut c = openssl::symm::Crypter::new(
            openssl::symm::Cipher::aes_128_ctr(),
            openssl::symm::Mode::Encrypt,
            &self.key,
            Some(&self.iv),
        )
        .unwrap();
        c.pad(false);
        c
    }

    pub fn decryptor(&self) -> openssl::symm::Crypter {
        let mut c = openssl::symm::Crypter::new(
            openssl::symm::Cipher::aes_128_ctr(),
            openssl::symm::Mode::Decrypt,
            &self.key,
            Some(&self.iv),
        )
        .unwrap();
        c.pad(false);
        c
    }
}