redact-crypto 2.7.1

Crypto abstractions for the Redact framework
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109

use serde::{de, Deserialize, Deserializer, Serialize, Serializer};
use sodiumoxide::crypto::{
    box_::{self, Nonce as ExternalAsymmetricNonce, NONCEBYTES as EXTERNALASYMMETRICNONCEBYTES},
    secretbox::{self, Nonce as ExternalSymmetricNonce, NONCEBYTES as EXTERNALSYMMETRICNONCEBYTES},
};

#[derive(Serialize, Deserialize, Debug, Clone)]
pub struct SodiumOxideSymmetricNonce {
    #[serde(
        serialize_with = "symmetric_nonce_serialize",
        deserialize_with = "symmetric_nonce_deserialize"
    )]
    pub nonce: ExternalSymmetricNonce,
}

/// Custom serialization function base64-encodes the bytes before storage
fn symmetric_nonce_serialize<S>(nonce: &ExternalSymmetricNonce, s: S) -> Result<S::Ok, S::Error>
where
    S: Serializer,
{
    let b64_encoded = base64::encode(nonce.as_ref());
    s.serialize_some(&Some(b64_encoded))
}

/// Custom deserialization function base64-decodes the bytes before passing them back
fn symmetric_nonce_deserialize<'de, D>(deserializer: D) -> Result<ExternalSymmetricNonce, D::Error>
where
    D: Deserializer<'de>,
{
    let b64_encoded: String = de::Deserialize::deserialize(deserializer)?;
    let decoded = base64::decode(b64_encoded).map_err(de::Error::custom)?;
    let nonce = ExternalSymmetricNonce::from_slice(decoded.as_ref());
    match nonce {
        Some(n) => Ok(n),
        None => Err(de::Error::custom(format!(
            "deserialized nonce was {} bytes long, expected 24 bytes",
            decoded.len()
        ))),
    }
}

impl SodiumOxideSymmetricNonce {
    pub const NONCEBYTES: usize = EXTERNALSYMMETRICNONCEBYTES;

    pub fn from_slice(bs: &[u8]) -> Option<Self> {
        Some(SodiumOxideSymmetricNonce {
            nonce: ExternalSymmetricNonce::from_slice(bs)?,
        })
    }

    pub fn new() -> Self {
        SodiumOxideSymmetricNonce {
            nonce: secretbox::gen_nonce(),
        }
    }
}

#[derive(Serialize, Deserialize, Debug, Clone)]
pub struct SodiumOxideAsymmetricNonce {
    #[serde(
        serialize_with = "asymmetric_nonce_serialize",
        deserialize_with = "asymmetric_nonce_deserialize"
    )]
    pub nonce: ExternalAsymmetricNonce,
}

/// Custom serialization function base64-encodes the bytes before storage
fn asymmetric_nonce_serialize<S>(nonce: &ExternalAsymmetricNonce, s: S) -> Result<S::Ok, S::Error>
where
    S: Serializer,
{
    let b64_encoded = base64::encode(nonce.as_ref());
    s.serialize_some(&Some(b64_encoded))
}

/// Custom deserialization function base64-decodes the bytes before passing them back
fn asymmetric_nonce_deserialize<'de, D>(
    deserializer: D,
) -> Result<ExternalAsymmetricNonce, D::Error>
where
    D: Deserializer<'de>,
{
    let b64_encoded: String = de::Deserialize::deserialize(deserializer)?;
    let decoded = base64::decode(b64_encoded).map_err(de::Error::custom)?;
    let nonce = ExternalAsymmetricNonce::from_slice(decoded.as_ref());
    match nonce {
        Some(n) => Ok(n),
        None => Err(de::Error::custom(format!(
            "deserialized nonce was {} bytes long, expected 24 bytes",
            decoded.len()
        ))),
    }
}

impl SodiumOxideAsymmetricNonce {
    pub const NONCEBYTES: usize = EXTERNALASYMMETRICNONCEBYTES;

    pub fn from_slice(bs: &[u8]) -> Option<Self> {
        Some(SodiumOxideAsymmetricNonce {
            nonce: ExternalAsymmetricNonce::from_slice(bs)?,
        })
    }

    pub fn new() -> Self {
        SodiumOxideAsymmetricNonce {
            nonce: box_::gen_nonce(),
        }
    }
}