logo

Crate ige

source · []
Expand description

Infinite Garble Extension (IGE) block cipher mode of operation.

Mode functionality is accessed using traits from re-exported cipher crate.

⚠️ Security Warning: Hazmat!

This crate does not ensure ciphertexts are authentic! Thus ciphertext integrity is not verified, which can lead to serious vulnerabilities!

Example

use aes::cipher::{block_padding::Pkcs7, BlockDecryptMut, BlockEncryptMut, KeyIvInit};
use hex_literal::hex;

type Aes128IgeEnc = ige::Encryptor<aes::Aes128>;
type Aes128IgeDec = ige::Decryptor<aes::Aes128>;

let key = [0x42; 16];
let iv = [0x24; 32];
let plaintext = *b"hello world! this is my plaintext.";
let ciphertext = hex!(
    "e3da005add5f05d45899f64891f7629b"
    "6fcff7d21537fcd3569373d25701a5d1"
    "d9e586e4c5b8ac09f2190485a76873c2"
);

// encrypt/decrypt in-place
// buffer must be big enough for padded plaintext
let mut buf = [0u8; 48];
let pt_len = plaintext.len();
buf[..pt_len].copy_from_slice(&plaintext);
let ct = Aes128IgeEnc::new(&key.into(), &iv.into())
    .encrypt_padded_mut::<Pkcs7>(&mut buf, pt_len)
    .unwrap();
assert_eq!(ct, &ciphertext[..]);

let pt = Aes128IgeDec::new(&key.into(), &iv.into())
    .decrypt_padded_mut::<Pkcs7>(&mut buf)
    .unwrap();
assert_eq!(pt, &plaintext);

// encrypt/decrypt from buffer to buffer
let mut buf = [0u8; 48];
let ct = Aes128IgeEnc::new(&key.into(), &iv.into())
    .encrypt_padded_b2b_mut::<Pkcs7>(&plaintext, &mut buf)
    .unwrap();
assert_eq!(ct, &ciphertext[..]);

let mut buf = [0u8; 48];
let pt = Aes128IgeDec::new(&key.into(), &iv.into())
    .decrypt_padded_b2b_mut::<Pkcs7>(&ct, &mut buf)
    .unwrap();
assert_eq!(pt, &plaintext);

With enabled alloc (or std) feature you also can use allocating convinience methods:

let res = Aes128IgeEnc::new(&key.into(), &iv.into())
    .encrypt_padded_vec_mut::<Pkcs7>(&plaintext);
assert_eq!(res[..], ciphertext[..]);
let res = Aes128IgeDec::new(&key.into(), &iv.into())
    .decrypt_padded_vec_mut::<Pkcs7>(&res)
    .unwrap();
assert_eq!(res[..], plaintext[..]);

Re-exports

pub use cipher;

Structs

IGE mode decryptor.

IGE mode encryptor.