rgp 0.6.1

Enabling E2EE for a range of applications.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122

/*
Copyright (c) 2026 Ordinary Labs, LLC

SPDX-License-Identifier: AGPL-3.0-only
*/
use super::super::{
    KEY_SIZE, NONCE_SIZE, base_decrypt, base_encrypt, bytes_to_usize, usize_to_bytes,
};
use anyhow::bail;

use blake2::digest::{FixedOutput, Mac};
use chacha20::XNonce;
use chacha20poly1305::aead::Generate;

/// #
/// **ENCRYPTED FORMAT:**
/// - nonce = 24 bytes
/// - iteration
///     - IF 0..=127
///         - is single byte = 1 bit (set)
///         - iteration = 7 bits
///     - ELSE
///         - is single byte = 1 bit (unset)
///         - int size = 2 bits
///         - iteration = 8-64 bits
/// - encrypted content = `content.len()`
/// - signature = 64 bytes (encrypted along with the content)
/// - Poly1305 MAC = 16 bytes
/// - mode = 1 byte (set to `HMAC_MODE`)
///
/// **PROCESS:**
/// 1. Generate nonce
/// 2. Hash the provided components
/// 3. Sign plaintext to generate content signature
/// 4. Encrypt plaintext and content signature with the hashed key
pub const HMAC_MODE: u8 = 1;

/// hmac encryption.
pub fn hmac_encrypt(
    fingerprint: [u8; 32],
    mut content: Vec<u8>,
    hmac_key: [u8; KEY_SIZE],
    hmac_value: [u8; KEY_SIZE],
    iteration: usize,
) -> anyhow::Result<(Vec<u8>, [u8; KEY_SIZE])> {
    let nonce: [u8; NONCE_SIZE] = XNonce::generate().into();
    let mut out = nonce.to_vec();

    let key = blake2::Blake2sMac256::new_from_slice(&hmac_key)?
        .chain_update(hmac_value)
        .finalize_fixed();

    let (size, bytes) = usize_to_bytes(iteration)?;
    out.extend_from_slice(&bytes[..size]);

    let encrypted_content = base_encrypt(&fingerprint, &nonce, &key.into(), &mut content)?;
    out.extend(encrypted_content);

    out.push(HMAC_MODE);

    Ok((out, key.into()))
}

/// hmac decryption.
pub fn hmac_decrypt(
    verifier: Option<&[u8; 32]>,
    encrypted_content: &[u8],

    hmac_key: [u8; KEY_SIZE],
    hmac_value: [u8; KEY_SIZE],
) -> anyhow::Result<(Vec<u8>, [u8; KEY_SIZE])> {
    let nonce: [u8; NONCE_SIZE] = match encrypted_content[0..NONCE_SIZE].try_into() {
        Ok(n) => n,
        Err(_) => bail!("failed to convert to bytes"),
    };

    let encrypted_content = &encrypted_content[NONCE_SIZE..];

    let key = blake2::Blake2sMac256::new_from_slice(&hmac_key)?
        .chain_update(hmac_value)
        .finalize_fixed();

    base_decrypt(verifier, &nonce, &key.into(), encrypted_content)
}

/// extract hmac components.
pub fn hmac_extract(encrypted_content: &mut Vec<u8>) -> anyhow::Result<usize> {
    let (itr_size, itr) = bytes_to_usize(&encrypted_content[NONCE_SIZE..NONCE_SIZE + 9])?;

    encrypted_content.copy_within(NONCE_SIZE + itr_size.., NONCE_SIZE);
    encrypted_content.truncate(encrypted_content.len() - itr_size - 1);

    Ok(itr)
}

#[cfg(test)]
mod tests {
    use super::{hmac_decrypt, hmac_encrypt, hmac_extract};

    #[test]
    fn test_hmac() -> anyhow::Result<()> {
        let (fingerprint, verifier) = crate::generate_fingerprint();
        let (hmac_key, hmac_value) = crate::generate_dh_keys();

        let content = vec![0u8; 1024];

        let (mut encrypted_content, content_key) =
            hmac_encrypt(fingerprint, content.clone(), hmac_key, hmac_value, 42)?;

        let itr = hmac_extract(&mut encrypted_content)?;

        assert_eq!(itr, 42);

        let (decrypted_content, decrypted_content_key) =
            hmac_decrypt(Some(&verifier), &encrypted_content, hmac_key, hmac_value)?;

        assert_eq!(content, decrypted_content);
        assert_eq!(content_key, decrypted_content_key);

        Ok(())
    }
}