|
|
|
@ -1,49 +1,67 @@ |
|
|
|
|
|
|
|
/// This module has wrappers for cryptography with RSA algorithms.
|
|
|
|
|
|
|
|
/// Its main structs - `PublicKey` and `Keys` implement all functions for key generation, signatures and asymmetric encryption
|
|
|
|
use alloc::vec::Vec; |
|
|
|
use alloc::vec::Vec; |
|
|
|
|
|
|
|
use alloc::vec; |
|
|
|
use serde::{Deserialize, Serialize}; |
|
|
|
use serde::{Deserialize, Serialize}; |
|
|
|
|
|
|
|
use rsa::{RsaPublicKey, RsaPrivateKey, PaddingScheme, PublicKey as RPK}; |
|
|
|
|
|
|
|
use rsa::errors::Result as RsaRes; |
|
|
|
|
|
|
|
use rand::rngs::OsRng; |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
static KEY_LENGTH: usize = 2048; |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/// Public key of a node
|
|
|
|
/// Public key of a node
|
|
|
|
#[derive(Debug, PartialEq, Serialize, Deserialize, Clone)] |
|
|
|
#[derive(Debug, PartialEq, Serialize, Deserialize, Clone)] |
|
|
|
pub struct PublicKey { |
|
|
|
pub struct PublicKey { |
|
|
|
pub key: [u8; 32], |
|
|
|
pub key: RsaPublicKey, |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
impl PublicKey { |
|
|
|
impl PublicKey { |
|
|
|
/// Check if the sign is valid for gived data and key
|
|
|
|
/// Check if the sign is valid for given data and key
|
|
|
|
pub fn verify_sign(&self, _data: &[u8], _sign: &[u8]) -> bool { |
|
|
|
pub fn verify_sign(&self, data: &[u8], sign: &[u8]) -> bool { |
|
|
|
todo!() |
|
|
|
self.key.verify(PaddingScheme::PKCS1v15Sign { hash: None }, data, sign).is_ok() |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
/// Encrypt some data for a user with this public key
|
|
|
|
/// Encrypt some data for a user with this public key
|
|
|
|
pub fn encrypt_data(&self, _data: &[u8]) -> Vec<u8> { |
|
|
|
pub fn encrypt_data(&self, data: &[u8]) -> RsaRes<Vec<u8>> { |
|
|
|
todo!() |
|
|
|
self.key.encrypt(&mut OsRng {}, PaddingScheme::PKCS1v15Encrypt, data) |
|
|
|
} |
|
|
|
} |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
/// Key pair (public and secret) for a node, should be stored locally
|
|
|
|
/// Key pair (public and secret) for a node, should be stored locally
|
|
|
|
#[derive(Debug, Serialize, Deserialize, Clone)] |
|
|
|
#[derive(Debug, Serialize, Deserialize, Clone)] |
|
|
|
pub struct Keys {} |
|
|
|
pub struct Keys { |
|
|
|
|
|
|
|
public_key: RsaPublicKey, |
|
|
|
|
|
|
|
private_key: RsaPrivateKey, |
|
|
|
|
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
impl Keys { |
|
|
|
impl Keys { |
|
|
|
/// Generate new random key
|
|
|
|
/// Generate new random key
|
|
|
|
pub fn generate() -> Keys { |
|
|
|
pub fn generate() -> Self { |
|
|
|
todo!() |
|
|
|
let mut rng = OsRng; |
|
|
|
|
|
|
|
let private_key = RsaPrivateKey::new(&mut rng, KEY_LENGTH).expect("failed to generate a key"); |
|
|
|
|
|
|
|
let public_key = RsaPublicKey::from(&private_key); |
|
|
|
|
|
|
|
Self { |
|
|
|
|
|
|
|
private_key, |
|
|
|
|
|
|
|
public_key, |
|
|
|
|
|
|
|
} |
|
|
|
} |
|
|
|
} |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
impl Keys { |
|
|
|
impl Keys { |
|
|
|
/// Sign content using these keys
|
|
|
|
/// Sign content using these keys
|
|
|
|
pub fn sign(&self, _content: &[u8]) -> Vec<u8> { |
|
|
|
pub fn sign(&self, content: &[u8]) -> RsaRes<Vec<u8>> { |
|
|
|
todo!() |
|
|
|
self.private_key.sign(PaddingScheme::PKCS1v15Sign { hash: None }, content) |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
/// Decrypt data
|
|
|
|
/// Decrypt data
|
|
|
|
pub fn decrypt_data(&self, _data_encrypted: &[u8]) -> Option<Vec<u8>> { |
|
|
|
pub fn decrypt_data(&self, data_encrypted: &[u8]) -> RsaRes<Vec<u8>> { |
|
|
|
todo!() |
|
|
|
self.private_key.decrypt(PaddingScheme::PKCS1v15Encrypt, data_encrypted) |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
/// Get public key
|
|
|
|
/// Get public key
|
|
|
|
pub fn get_public(&self) -> PublicKey { |
|
|
|
pub fn get_public(&self) -> PublicKey { |
|
|
|
todo!() |
|
|
|
PublicKey { key: self.public_key.clone() } |
|
|
|
} |
|
|
|
} |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
@ -52,8 +70,8 @@ fn test_encrypt() { |
|
|
|
let data = vec![0, 5, 8, 135, 67]; |
|
|
|
let data = vec![0, 5, 8, 135, 67]; |
|
|
|
let keys = Keys::generate(); |
|
|
|
let keys = Keys::generate(); |
|
|
|
assert_eq!( |
|
|
|
assert_eq!( |
|
|
|
keys.decrypt_data(keys.get_public().encrypt_data(data)), |
|
|
|
keys.decrypt_data(&keys.get_public().encrypt_data(&data).unwrap()).unwrap(), |
|
|
|
Some(data) |
|
|
|
data |
|
|
|
); |
|
|
|
); |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
@ -62,14 +80,14 @@ fn test_invalid_encrypt() { |
|
|
|
let data = vec![0, 5, 8, 135, 67]; |
|
|
|
let data = vec![0, 5, 8, 135, 67]; |
|
|
|
let keys_1 = Keys::generate(); |
|
|
|
let keys_1 = Keys::generate(); |
|
|
|
let keys_2 = Keys::generate(); |
|
|
|
let keys_2 = Keys::generate(); |
|
|
|
assert!(keys_2.decrypt_data(keys_1.get_public().encrypt_data(data)) != Some(data)); |
|
|
|
assert!(keys_2.decrypt_data(&keys_1.get_public().encrypt_data(&data).unwrap()).is_err()); |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
#[test] |
|
|
|
#[test] |
|
|
|
fn test_signing() { |
|
|
|
fn test_signing() { |
|
|
|
let data = vec![0, 5, 8, 135, 67]; |
|
|
|
let data = vec![0, 5, 8, 135, 67]; |
|
|
|
let keys = Keys::generate(); |
|
|
|
let keys = Keys::generate(); |
|
|
|
assert!(keys.get_public().verify_sign(data, keys.sign(data))); |
|
|
|
assert!(keys.get_public().verify_sign(&data, &keys.sign(&data).unwrap())); |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
|
|
|
|
#[test] |
|
|
|
#[test] |
|
|
|
@ -77,5 +95,5 @@ fn test_invalid_signing() { |
|
|
|
let data = vec![0, 5, 8, 135, 67]; |
|
|
|
let data = vec![0, 5, 8, 135, 67]; |
|
|
|
let keys_1 = Keys::generate(); |
|
|
|
let keys_1 = Keys::generate(); |
|
|
|
let keys_2 = Keys::generate(); |
|
|
|
let keys_2 = Keys::generate(); |
|
|
|
assert!(keys_2.get_public().verify_sign(data, keys_1.sign(data))); |
|
|
|
assert!(!keys_2.get_public().verify_sign(&data, &keys_1.sign(&data).unwrap())); |
|
|
|
} |
|
|
|
} |
|
|
|
|
