rdedup-lib 3.2.0

Data deduplication with compression and public key encryption. - library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79

use std::io;

use serde::{Deserialize, Serialize};
use sodiumoxide::crypto::pwhash;

use crate::util::{as_base64, from_base64};

pub(crate) trait PWHash {
    fn derive_key(&self, passphrase: &str) -> io::Result<Vec<u8>>;
}

#[derive(Serialize, Deserialize, Clone, Debug)]
pub(crate) struct SodiumOxide {
    #[serde(serialize_with = "as_base64", deserialize_with = "from_base64")]
    salt: pwhash::Salt,
    #[serde(rename = "mem_limit")]
    mem_limit: u64,
    #[serde(rename = "ops_limit")]
    ops_limit: u64,
}

impl SodiumOxide {
    pub(crate) fn new_weak() -> Self {
        Self {
            ops_limit: 0,
            mem_limit: 0,
            salt: pwhash::gen_salt(),
        }
    }

    pub(crate) fn new_interactive() -> Self {
        Self {
            ops_limit: pwhash::OPSLIMIT_INTERACTIVE.0 as u64,
            mem_limit: pwhash::MEMLIMIT_INTERACTIVE.0 as u64,
            salt: pwhash::gen_salt(),
        }
    }

    pub(crate) fn new_sensitive() -> Self {
        Self {
            ops_limit: pwhash::OPSLIMIT_SENSITIVE.0 as u64,
            mem_limit: pwhash::MEMLIMIT_SENSITIVE.0 as u64,
            salt: pwhash::gen_salt(),
        }
    }
}

impl Default for SodiumOxide {
    fn default() -> Self {
        SodiumOxide {
            ops_limit: pwhash::OPSLIMIT_SENSITIVE.0 as u64,
            mem_limit: pwhash::MEMLIMIT_SENSITIVE.0 as u64,
            salt: pwhash::gen_salt(),
        }
    }
}

impl PWHash for SodiumOxide {
    /// Derive secret key from passphrase and salt
    fn derive_key(&self, passphrase: &str) -> io::Result<Vec<u8>> {
        let mut key = vec![0; 32];

        pwhash::derive_key(
            &mut key,
            passphrase.as_bytes(),
            &self.salt,
            pwhash::OpsLimit(self.ops_limit as usize),
            pwhash::MemLimit(self.mem_limit as usize),
        )
        .map_err(|_| {
            io::Error::new(
                io::ErrorKind::InvalidData,
                "can't derive encryption key from passphrase",
            )
        })?;

        Ok(key)
    }
}