tiny-encrypt 1.9.20

A simple and tiny file encrypt tool
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47

use base64::engine::general_purpose::STANDARD;
use base64::Engine;
use rust_util::{simple_error, XResult};
use swift_secure_enclave_tool_rs::{ControlFlag, KeyMlKem, KeyPurpose};
use crate::spec::TinyEncryptEnvelopType;

pub fn is_support_se() -> bool {
    swift_secure_enclave_tool_rs::is_secure_enclave_supported().unwrap_or(false)
}

pub fn decrypt_data(
    envelop_type: TinyEncryptEnvelopType,
    private_key_base64: &str,
    ephemeral_public_key_bytes: &[u8],
) -> XResult<Vec<u8>> {
    let private_key_representation = STANDARD.decode(private_key_base64)?;
    let shared_secret = match envelop_type {
        TinyEncryptEnvelopType::KeyP256 => swift_secure_enclave_tool_rs::private_key_ecdh(
            &private_key_representation,
            ephemeral_public_key_bytes,
        )?,
        TinyEncryptEnvelopType::KeyMlKem768 => swift_secure_enclave_tool_rs::private_key_mlkem_ecdh(
            KeyMlKem::MlKem768,
            &private_key_representation,
            ephemeral_public_key_bytes,
        )?,
        TinyEncryptEnvelopType::KeyMlKem1024 => swift_secure_enclave_tool_rs::private_key_mlkem_ecdh(
            KeyMlKem::MlKem1024,
            &private_key_representation,
            ephemeral_public_key_bytes,
        )?,
        _ => return simple_error!("Invalid envelop type: {:?}", envelop_type),
    };
    Ok(shared_secret)
}

pub fn generate_se_p256_keypair(control_flag: ControlFlag) -> XResult<(String, String)> {
    if !is_support_se() {
        return simple_error!("Secure enclave is not supported.");
    }
    let key_material =
        swift_secure_enclave_tool_rs::generate_keypair(KeyPurpose::KeyAgreement, control_flag)?;
    Ok((
        hex::encode(&key_material.public_key_point),
        STANDARD.encode(&key_material.private_key_representation),
    ))
}