dat 2.3.0

DAT - Distributed Access Token
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114

use crate::crypto_algorithm::DatCryptoAlgorithm;
use crate::error::DatError;
use aes_gcm::aead::array::Array;
use aes_gcm::aead::common::Generate;
use aes_gcm::aead::consts::{U12, U16, U32};
use aes_gcm::aes::cipher::InOutBuf;
use aes_gcm::aes::Aes128;
use aes_gcm::{AeadInOut, Aes128Gcm, AesGcm, Nonce};
use aes_gcm::{Aes256Gcm, Key, KeyInit};

const NONCE_LEN: usize = 12;

pub enum DatCryptoKey {
    AES128GCMN(Array<u8, U16>, AesGcm<aes_gcm::aes::Aes128, U12>),
    AES256GCMN(Array<u8, U32>, AesGcm<aes_gcm::aes::Aes256, U12>),
}

impl DatCryptoKey {
    pub fn algorithm(&self) -> DatCryptoAlgorithm {
        match self {
            DatCryptoKey::AES128GCMN(_, _) => DatCryptoAlgorithm::AES128GCMN,
            DatCryptoKey::AES256GCMN(_, _) => DatCryptoAlgorithm::AES256GCMN,
        }
    }
    pub fn from_bytes(algorithm: DatCryptoAlgorithm, data: &[u8]) -> Result<DatCryptoKey, DatError> {
        Ok(match algorithm {
            DatCryptoAlgorithm::AES128GCMN => {
                let bytes = Array::<u8, U16>::try_from(data)
                    .map_err(|_| DatError::ParseCryptoKeyError)?;
                DatCryptoKey::AES128GCMN(bytes, Aes128Gcm::new(&bytes))
            },
            DatCryptoAlgorithm::AES256GCMN => {
                let bytes = Array::<u8, U32>::try_from(data)
                    .map_err(|_| DatError::ParseCryptoKeyError)?;
                DatCryptoKey::AES256GCMN(bytes, Aes256Gcm::new(&bytes))
            },
        })
    }
    pub fn to_bytes(&self) -> Box<[u8]> {
        match self {
            DatCryptoKey::AES128GCMN(c, _) => Box::from(c.as_slice()),
            DatCryptoKey::AES256GCMN(c, _) => Box::from(c.as_slice()),
        }
    }
    pub fn generate(algorithm: DatCryptoAlgorithm) -> Self {
        match algorithm {
            DatCryptoAlgorithm::AES128GCMN => {
                let bytes = Key::<Aes128Gcm>::generate();
                DatCryptoKey::AES128GCMN(bytes, Aes128Gcm::new(&bytes))
            },
            DatCryptoAlgorithm::AES256GCMN => {
                let bytes = Key::<Aes256Gcm>::generate();
                DatCryptoKey::AES256GCMN(bytes, Aes256Gcm::new(&bytes))
            },
        }
    }

    pub fn encrypt(&self, body: &[u8]) -> Result<Vec<u8>, DatError> {
        if body.is_empty() {
            return Ok(vec![]);
        }
        let nonce: Array<u8, U12> = Nonce::generate();
        // 64 = nonce (12) + tag + space
        let mut enc_data = Vec::with_capacity(64 + body.len());
        enc_data.extend_from_slice(&nonce);
        enc_data.extend_from_slice(body);
        let inout = InOutBuf::from(&mut enc_data[NONCE_LEN..]);

        match self {
            DatCryptoKey::AES128GCMN(_, c) => {
                let tag = c.encrypt_inout_detached(&nonce, &[], inout)
                    .map_err(|_| DatError::EncryptError)?;
                enc_data.extend_from_slice(&tag.as_slice());
            },
            DatCryptoKey::AES256GCMN(_, c) => {
                let tag = c.encrypt_inout_detached(&nonce, &[], inout)
                    .map_err(|_| DatError::EncryptError)?;
                enc_data.extend_from_slice(&tag.as_slice());
            },
        };

        Ok(enc_data)
    }

    pub fn decrypt(&self, mut data: Vec<u8>) -> Result<Vec<u8>, DatError> {
        if data.is_empty() {
            return Ok(Vec::with_capacity(0));
        }
        if data.len() <= NONCE_LEN {
            return Err(DatError::DecryptError);
        }
        let mut secure = data.split_off(NONCE_LEN);
        let nonce: aes_gcm::aead::Nonce<AesGcm<Aes128, U12>> = data.as_slice().try_into().map_err(|_| DatError::DecryptError)?;

        match self {
            DatCryptoKey::AES128GCMN(_, c) => {
                c.decrypt_in_place(&nonce, &[], &mut secure).map_err(|_| DatError::DecryptError)
            },
            DatCryptoKey::AES256GCMN(_, c) => {
                c.decrypt_in_place(&nonce, &[], &mut secure).map_err(|_| DatError::DecryptError)
            },
        }?;
        Ok(secure)
    }
}

impl Clone for DatCryptoKey {
    fn clone(&self) -> Self {
        match self {
            DatCryptoKey::AES128GCMN(b, c) => DatCryptoKey::AES128GCMN(b.clone(), c.clone()),
            DatCryptoKey::AES256GCMN(b, c) => DatCryptoKey::AES256GCMN(b.clone(), c.clone()),
        }
    }
}