trussed 0.2.0-rc.1

Modern Cryptographic Firmware
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62

use cipher::typenum::U44;
use trussed_core::{
    api::{reply, request},
    types::Mechanism,
    Error,
};

use crate::{service::MechanismImpl, store::Keystore};

type KeyNonceSize = U44;
type Aead = super::aead::Aead<chacha20poly1305::ChaCha8Poly1305, KeyNonceSize>;

// TODO: The non-detached versions seem better.
// This needs a bit of additional type gymnastics.
// Maybe start a discussion on the `aead` crate's GitHub about usability concerns...

impl MechanismImpl for super::Chacha8Poly1305 {
    #[inline(never)]
    fn generate_key(
        &self,
        keystore: &mut impl Keystore,
        request: &request::GenerateKey,
    ) -> Result<reply::GenerateKey, Error> {
        Aead::new(Mechanism::Chacha8Poly1305).generate_key(keystore, request)
    }

    #[inline(never)]
    fn decrypt(
        &self,
        keystore: &mut impl Keystore,
        request: &request::Decrypt,
    ) -> Result<reply::Decrypt, Error> {
        Aead::new(Mechanism::Chacha8Poly1305).decrypt(keystore, request)
    }

    #[inline(never)]
    fn encrypt(
        &self,
        keystore: &mut impl Keystore,
        request: &request::Encrypt,
    ) -> Result<reply::Encrypt, Error> {
        Aead::new(Mechanism::Chacha8Poly1305).encrypt(keystore, request)
    }

    #[inline(never)]
    fn wrap_key(
        &self,
        keystore: &mut impl Keystore,
        request: &request::WrapKey,
    ) -> Result<reply::WrapKey, Error> {
        Aead::new(Mechanism::Chacha8Poly1305).wrap_key(keystore, request)
    }

    #[inline(never)]
    fn unwrap_key(
        &self,
        keystore: &mut impl Keystore,
        request: &request::UnwrapKey,
    ) -> Result<reply::UnwrapKey, Error> {
        Aead::new(Mechanism::Chacha8Poly1305).unwrap_key(keystore, request)
    }
}