Crate dark_crystal_key_backup_rust

Source
Expand description

Provides encryption of secret shares to specific recipients using crypto_box

Internally uses dark-crystal-secret-sharing-rust, which uses sharks for Shamirs secret sharing and xsalsa20poly1305 for authenticated encryption.

This is part of a work-in-progress Rust implementation of the Dark Crystal Key Backup Protocol.

Structs§

Functions§

  • combine_authenticated
    Combine a set of shares and ciphertext produced by share_authenticated
  • decrypt
    Decrypt a given ciphertext using crypto_box
  • decrypt_with_given_nonce
    Decrypt a given ciphertext using crypto_box using a given nonce rather than attaching one to the ciphertext
  • default_threshold
    Give a recommended threshold value for a given number of shares
  • encrypt
    Encrypt a given message using crypto_box
  • encrypt_with_given_nonce
    Encrypt a given message using crypto_box using a given nonce rather than generating one
  • share_and_encrypt
    Create a set of shares and encrypt them to a given set of public keys
  • share_and_encrypt_detached_nonce
    Create a set of shares and encrypt them to a given set of public keys but make the shares shorted by using the nonce from the ciphertext when encrypting the shares
  • share_authenticated
    Encrypt a secret and create shares of its key. This gives authentication so we know whether recovery was successful It also reduces duplication with long (> 32 bytes) secrets, and improves security when using non-uniformly random secrets such as passwords.
  • thresold_sanity
    Gives a threshold ‘sanity’ factor, given a threshold and number of shares 0 is ideal. Positive values represent the level of danger of loosing access to the secret. Negative values represent the level of danger of an attacker gaining it.

Type Aliases§