mega-security-rs

An implementation of Mega's security whitepaper

Note: This implementation is for educational and research purposes only. No copyright infrigment was intended.

for usage example check tests/auth.rs

TODO

• use ECB logic to encrypt blocks
• return a Mega-like confirmation token after register

Some notes

• Mega does check for password security, this crate does not. I leave for whomever implements this crate to define what is a 'good password' or not.
• Mega uses 'mega.nz' to generate salt. As noted in the whitepaper, ideally this value would be an user identifier, so thats whats being used in this code.
• The current implementation uses a simple AES128 for encryption, unlike the whitepaper. This is enough to encrypt the master key, but in the future it will problaly bring in some trouble.
• The server uses a HashMap<String, Client> to store registered users. Ideally you would code your own Server, or send a PR making the server be a trait of sorts.
• This crate does not YET implement file or data encryption of any kind. It is planned though.