self_encryption 0.36.1

Self-encrypting, content-addressed storage - convergent encryption that splits data into obfuscated chunks. The peer-reviewed core of Autonomi.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

// Copyright 2021 MaidSafe.net limited.
//
// This Autonomi Software is licensed under the MIT license <LICENSE-MIT or
// https://opensource.org/licenses/MIT> or the Apache License, Version 2.0
// <LICENSE-APACHE or https://www.apache.org/licenses/LICENSE-2.0>, at your
// option. This file may not be copied, modified, or distributed except
// according to those terms.

use crate::Error;
use bytes::Bytes;
use chacha20poly1305::aead::{Aead, KeyInit};
use chacha20poly1305::{ChaCha20Poly1305, Key as ChaKey, Nonce as ChaNonce};
use xor_name::XOR_NAME_LEN;

/// 32-byte key for ChaCha20-Poly1305
pub(crate) struct Key(pub(crate) [u8; KEY_SIZE]);
/// 12-byte nonce for ChaCha20-Poly1305
pub(crate) struct Nonce(pub(crate) [u8; NONCE_SIZE]);
/// XOR obfuscation pad
pub(crate) struct Pad(pub(crate) [u8; PAD_SIZE]);

impl AsRef<[u8]> for Key {
    fn as_ref(&self) -> &[u8] {
        &self.0
    }
}

impl AsRef<[u8]> for Nonce {
    fn as_ref(&self) -> &[u8] {
        &self.0
    }
}

pub(crate) const KEY_SIZE: usize = 32;
pub(crate) const NONCE_SIZE: usize = 12;
pub(crate) const HASH_SIZE: usize = XOR_NAME_LEN;
pub(crate) const PAD_SIZE: usize = (HASH_SIZE * 3) - KEY_SIZE - NONCE_SIZE;

pub(crate) fn encrypt(data: Bytes, key: &Key, nonce: &Nonce) -> Result<Bytes, Error> {
    let cha_key = ChaKey::from_slice(key.as_ref());
    let cipher = ChaCha20Poly1305::new(cha_key);
    let cha_nonce = ChaNonce::from_slice(nonce.as_ref());
    let encrypted = cipher
        .encrypt(cha_nonce, data.as_ref())
        .map_err(|_| Error::Encryption)?;
    Ok(Bytes::from(encrypted))
}

pub(crate) fn decrypt(encrypted_data: Bytes, key: &Key, nonce: &Nonce) -> Result<Bytes, Error> {
    let cha_key = ChaKey::from_slice(key.as_ref());
    let cipher = ChaCha20Poly1305::new(cha_key);
    let cha_nonce = ChaNonce::from_slice(nonce.as_ref());
    cipher
        .decrypt(cha_nonce, encrypted_data.as_ref())
        .map(Bytes::from)
        .map_err(|e| Error::Decryption(format!("Decrypt failed with {e}")))
}