crypt-config 0.2.2

A crypt module that encrypt/decrypt json data based on the configuration. This might be used as a layer before saving data in Mongo DB or after fetching the data from the DB in order to decrypt them.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124

extern crate openssl;

use openssl::symm::{decrypt, encrypt, Cipher};

use crate::cipher::{generate_salt, ICipher};
use crate::error::CryptResult;

pub struct CBCCipher {
  secret: Vec<u8>,
  salt:   Vec<u8>,
  cipher: Cipher
}

impl CBCCipher {
  #[allow(dead_code)]
  pub fn new(secret: &[u8], salt: &[u8]) -> CBCCipher {
    let mut secret = secret.to_vec();
    let mut salt = salt.to_vec();
    let cipher = match secret.len() {
      16 => Cipher::aes_128_cbc(),
      24 => Cipher::aes_192_cbc(),
      32 => Cipher::aes_256_cbc(),
      _ => {
        println!("[crypt-config][WARNING] incorrect secret length. Expected 16, 24 or 32, got {}. Secret will be resized to 32 with value 0.", secret.len());
        secret.resize(32, 0);
        Cipher::aes_256_cbc()
      }
    };

    if salt.is_empty() {
      salt = generate_salt();
    }

    salt.resize(16, 0);

    CBCCipher { secret: secret, salt: salt, cipher: cipher }
  }
}

impl ICipher for CBCCipher {
  fn encrypt(&self, data: &str) -> CryptResult<Vec<u8>> {
    Ok(encrypt(self.cipher, &self.secret, Some(&self.salt), data.as_bytes())?)
  }

  fn encrypt_with_salt(&self, data: &str, salt: &[u8]) -> CryptResult<Vec<u8>> {
    Ok(encrypt(self.cipher, &self.secret, Some(salt), data.as_bytes())?)
  }

  fn decrypt(&self, data: &[u8]) -> CryptResult<String> {
    let plain = decrypt(self.cipher, &self.secret, Some(&self.salt), data)?;
    Ok(String::from_utf8(plain)?)
  }

  fn decrypt_with_salt(&self, data: &[u8], salt: &[u8]) -> CryptResult<String> {
    let plain = decrypt(self.cipher, &self.secret, Some(salt), data)?;
    Ok(String::from_utf8(plain)?)
  }

  fn get_salt(&self) -> &Vec<u8> {
    &self.salt
  }
}

#[cfg(test)]
mod tests {
  use crate::cipher::ICipher;
  use rand::Rng;

  #[test]
  fn cbc_encrypt_decrypt_128() {
    let secret = rand::thread_rng().gen::<[u8; 16]>();
    let salt = rand::thread_rng().gen::<[u8; 16]>();

    let data = "this is a data that will be encrypted";

    let cipher = super::CBCCipher::new(&secret, &salt);
    let crypted_data = cipher.encrypt(data).unwrap();
    let uncrypted_data = cipher.decrypt(&crypted_data).unwrap();

    assert_eq!(data, uncrypted_data);
  }

  #[test]
  fn cbc_encrypt_decrypt_192() {
    let secret = rand::thread_rng().gen::<[u8; 24]>();
    let salt = rand::thread_rng().gen::<[u8; 16]>();

    let data = "this is a data that will be encrypted";

    let cipher = super::CBCCipher::new(&secret, &salt);
    let crypted_data = cipher.encrypt(data).unwrap();
    let uncrypted_data = cipher.decrypt(&crypted_data).unwrap();

    assert_eq!(data, uncrypted_data);
  }

  #[test]
  fn cbc_encrypt_decrypt_256() {
    let secret = rand::thread_rng().gen::<[u8; 32]>();
    let salt = rand::thread_rng().gen::<[u8; 16]>();

    let data = "this is a data that will be encrypted";

    let cipher = super::CBCCipher::new(&secret, &salt);
    let crypted_data = cipher.encrypt(data).unwrap();
    let uncrypted_data = cipher.decrypt(&crypted_data).unwrap();

    assert_eq!(data, uncrypted_data);
  }

  #[test]
  fn cbc_encrypt_decrypt_other() {
    let secret = rand::thread_rng().gen::<[u8; 30]>();
    let salt = rand::thread_rng().gen::<[u8; 10]>();

    let data = "this is a data that will be encrypted";

    let cipher = super::CBCCipher::new(&secret, &salt);
    let crypted_data = cipher.encrypt(data).unwrap();
    let uncrypted_data = cipher.decrypt(&crypted_data).unwrap();

    assert_eq!(data, uncrypted_data);
  }
}