tentacle-secio 0.6.8

Secio encryption protocol for p2p
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99

#[cfg(unix)]
mod openssl_impl;
#[cfg(not(target_family = "wasm"))]
#[cfg(any(test, not(unix), not(ossl110)))]
mod ring_impl;
#[cfg(any(target_family = "wasm", test))]
mod wasm_compat;

#[cfg(target_family = "wasm")]
pub use wasm_compat::*;

/// Possible key agreement algorithms.
#[derive(Copy, Clone, Debug, PartialEq, Eq)]
pub enum KeyAgreement {
    EcdhP256,
    EcdhP384,
    X25519,
}

#[cfg(all(ossl110, unix))]
pub use openssl_impl::*;
#[cfg(not(target_family = "wasm"))]
#[cfg(not(unix))]
pub use ring_impl::*;
#[cfg(all(not(ossl110), unix))]
pub use ring_openssl_unix::*;

#[cfg(all(not(ossl110), unix))]
mod ring_openssl_unix {
    use super::KeyAgreement;
    use super::{openssl_impl, ring_impl};
    use crate::error::SecioError;

    pub enum EphemeralPrivateKey {
        Openssl(openssl_impl::EphemeralPrivateKey),
        Ring(ring_impl::EphemeralPrivateKey),
    }

    pub fn generate_agreement(
        algorithm: KeyAgreement,
    ) -> Result<(EphemeralPrivateKey, Vec<u8>), SecioError> {
        match algorithm {
            KeyAgreement::EcdhP256 | KeyAgreement::EcdhP384 => {
                openssl_impl::generate_agreement(algorithm)
                    .map(|(private, pubkey)| (EphemeralPrivateKey::Openssl(private), pubkey))
            }
            KeyAgreement::X25519 => ring_impl::generate_agreement(algorithm)
                .map(|(private, pubkey)| (EphemeralPrivateKey::Ring(private), pubkey)),
        }
    }

    pub fn agree(
        algorithm: KeyAgreement,
        my_private_key: EphemeralPrivateKey,
        other_public_key: &[u8],
    ) -> Result<Vec<u8>, SecioError> {
        match my_private_key {
            EphemeralPrivateKey::Openssl(private_key) => {
                openssl_impl::agree(algorithm, private_key, other_public_key)
            }
            EphemeralPrivateKey::Ring(private_key) => {
                ring_impl::agree(algorithm, private_key, other_public_key)
            }
        }
    }
}

#[cfg(test)]
mod test {
    use crate::error::SecioError;

    use super::*;

    #[test]
    fn test_hd() {
        let (pk_native, sk_native) = generate_agreement(KeyAgreement::X25519).unwrap();
        let (pk_wasm, sk_wasm) = wasm_compat::generate_agreement(KeyAgreement::X25519).unwrap();

        let secret_native = agree(KeyAgreement::X25519, pk_native, &sk_wasm).unwrap();
        let secret_wasm = wasm_compat::agree(KeyAgreement::X25519, pk_wasm, &sk_native).unwrap();

        assert_eq!(secret_native, secret_wasm)
    }

    #[test]
    fn test_wasm_agree_rejects_invalid_public_key_lengths() {
        let (short_private_key, _) = wasm_compat::generate_agreement(KeyAgreement::X25519).unwrap();
        let (long_private_key, _) = wasm_compat::generate_agreement(KeyAgreement::X25519).unwrap();

        assert_eq!(
            wasm_compat::agree(KeyAgreement::X25519, short_private_key, &[0; 31]).unwrap_err(),
            SecioError::SecretGenerationFailed
        );
        assert_eq!(
            wasm_compat::agree(KeyAgreement::X25519, long_private_key, &[0; 33]).unwrap_err(),
            SecioError::SecretGenerationFailed
        );
    }
}