mls-rs 0.55.0

An implementation of Messaging Layer Security (RFC 9420)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
// Copyright by contributors to this project.
// SPDX-License-Identifier: (Apache-2.0 OR MIT)

use alloc::vec::Vec;
use zeroize::Zeroizing;

use crate::{crypto::CipherSuiteProvider, group::secret_tree::MessageKeyData};

use super::reuse_guard::ReuseGuard;

#[derive(Debug, PartialEq, Eq)]
pub struct MessageKey(MessageKeyData);

impl MessageKey {
    pub(crate) fn new(key: MessageKeyData) -> MessageKey {
        MessageKey(key)
    }

    #[cfg_attr(not(mls_build_async), maybe_async::must_be_sync)]
    pub(crate) async fn encrypt<P: CipherSuiteProvider>(
        &self,
        provider: &P,
        data: &[u8],
        aad: &[u8],
        reuse_guard: &ReuseGuard,
    ) -> Result<Vec<u8>, P::Error> {
        provider
            .aead_seal(
                &self.0.key,
                data,
                Some(aad),
                &reuse_guard.apply(&self.0.nonce),
            )
            .await
    }

    #[cfg_attr(not(mls_build_async), maybe_async::must_be_sync)]
    pub(crate) async fn decrypt<P: CipherSuiteProvider>(
        &self,
        provider: &P,
        data: &[u8],
        aad: &[u8],
        reuse_guard: &ReuseGuard,
    ) -> Result<Zeroizing<Vec<u8>>, P::Error> {
        provider
            .aead_open(
                &self.0.key,
                data,
                Some(aad),
                &reuse_guard.apply(&self.0.nonce),
            )
            .await
    }
}

// TODO: Write test vectors