sk_dkim 0.1.6

Deterministic DKIM key generation based on secret key / 基于密钥的确定性 DKIM 密钥生成
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67

#![cfg_attr(docsrs, feature(doc_cfg))]

use std::ops::Deref;

use rand_chacha::ChaCha20Rng;
use rsa::{RsaPrivateKey, rand_core::SeedableRng};

#[derive(Debug)]
pub struct Sk {
  hasher: blake3::Hasher,
}

#[derive(Debug)]
pub struct Dkim {
  pub sk: RsaPrivateKey,
}

impl Deref for Dkim {
  type Target = RsaPrivateKey;
  fn deref(&self) -> &Self::Target {
    &self.sk
  }
}

impl Dkim {
  #[cfg(feature = "pk")]
  pub fn txt(&self) -> String {
    use base64::{Engine as _, engine::general_purpose::STANDARD};
    use rsa::pkcs8::EncodePublicKey;

    let public_key = self.sk.to_public_key();
    // 使用 SPKI (SubjectPublicKeyInfo) 格式，这是 DKIM 标准要求的格式
    let der = public_key
      .to_public_key_der()
      .expect("Failed to encode RSA public key");
    let pk = STANDARD.encode(der.as_bytes());
    format!("v=DKIM1; k=rsa; p={}", pk)
  }
}

impl Sk {
  pub fn new(sk: impl AsRef<[u8]>) -> Self {
    let mut hasher = blake3::Hasher::new();
    hasher.update(sk.as_ref());
    Self { hasher }
  }

  pub fn dkim(&self, selector: impl AsRef<str>, domain: impl AsRef<str>) -> Dkim {
    let selector = selector.as_ref();
    let domain = domain.as_ref();

    let mut hasher = self.hasher.clone();
    hasher.update(selector.as_bytes());
    hasher.update(b".");
    hasher.update(domain.as_bytes());
    let hash = hasher.finalize();

    // 使用 blake3 哈希作为 RNG 种子生成确定性的 RSA 密钥

    let mut rng = ChaCha20Rng::from_seed(*hash.as_bytes());

    let bits = 2048;
    let sk = RsaPrivateKey::new(&mut rng, bits).expect("Failed to generate RSA key");

    Dkim { sk }
  }
}