# mega-security-rs
An implementation of [Mega's security whitepaper](https://mega.nz/SecurityWhitepaper.pdf)
Note: This implementation is for educational and research purposes only. No copyright infrigment was intended.
for usage example check `tests/auth.rs`
### TODO
- [ ] use ECB logic to encrypt blocks
- [x] return a Mega-like confirmation token after register
### Some notes
- Mega does check for password security, this crate does not. I leave for whomever implements this crate to define what is a 'good password' or not.
- Mega uses 'mega.nz' to generate salt. As noted in the whitepaper, ideally this value would be an user identifier, so thats whats being used in this code.
- The current implementation uses a simple AES128 for encryption, unlike the whitepaper. This is enough to encrypt the master key, but in the future it will problaly bring in some trouble.
- The server uses a `HashMap<String, Client>` to store registered users. Ideally you would code your own Server, or send a PR making the server be a trait of sorts.
- This crate does not YET implement file or data encryption of any kind. It is planned though.