enprot 0.4.0

Engyon Protected Text (EPT) — confidentiality processor and capability ledger
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51

// Example: basic encrypt/decrypt round-trip via the library API.
//
// Run: cargo run --example basic_encrypt_decrypt

use enprot::crypto::CryptoPolicyDefault;
use enprot::etree::ParseOps;

fn main() -> enprot::Result<()> {
    let casdir = tempfile::tempdir()?;
    let ept_dir = tempfile::tempdir()?;
    let ept = ept_dir.path().join("test.ept");

    // Write a fixture file
    std::fs::write(
        &ept,
        "// <( BEGIN Secret )>\nplaintext\n// <( END Secret )>\n",
    )?;

    // Encrypt
    {
        let mut paops = ParseOps::new(Box::new(CryptoPolicyDefault {}))?;
        paops.io.casdir = casdir.path().to_path_buf();
        paops.transforms.encrypt.insert("Secret".into());
        paops.passwords.insert("Secret".into(), "password".into());
        let content = std::fs::read_to_string(&ept)?;
        let tree = enprot::etree::parse(std::io::Cursor::new(content.into_bytes()), &mut paops)?;
        let tree = enprot::etree::transform(&tree, &mut paops)?;
        let mut out = Vec::new();
        enprot::etree::tree_write(&mut out, &tree, &mut paops)?;
        std::fs::write(&ept, out)?;
    }
    println!("Encrypted. Content is now ciphertext.");

    // Decrypt
    {
        let mut paops = ParseOps::new(Box::new(CryptoPolicyDefault {}))?;
        paops.io.casdir = casdir.path().to_path_buf();
        paops.transforms.decrypt.insert("Secret".into());
        paops.passwords.insert("Secret".into(), "password".into());
        let content = std::fs::read_to_string(&ept)?;
        let tree = enprot::etree::parse(std::io::Cursor::new(content.into_bytes()), &mut paops)?;
        let tree = enprot::etree::transform(&tree, &mut paops)?;
        let mut out = Vec::new();
        enprot::etree::tree_write(&mut out, &tree, &mut paops)?;
        std::fs::write(&ept, out)?;
    }
    println!("Decrypted. Content is back to plaintext.");
    println!("Result: {}", std::fs::read_to_string(&ept)?);

    Ok(())
}