Add ability to use existing buffer for encrypt_easy.

master
Didactic Drunk 2019-05-29 00:59:32 -07:00
parent b69f55456b
commit 484847d57f
1 changed files with 21 additions and 6 deletions

View File

@ -5,6 +5,7 @@ module Cox
property bytes : Bytes property bytes : Bytes
KEY_LENGTH = LibSodium::SECRET_KEY_BYTES KEY_LENGTH = LibSodium::SECRET_KEY_BYTES
MAC_BYTES = LibSodium::MAC_BYTES
def initialize(@bytes : Bytes) def initialize(@bytes : Bytes)
if bytes.bytesize != KEY_LENGTH if bytes.bytesize != KEY_LENGTH
@ -31,21 +32,35 @@ module Cox
end end
def encrypt_easy(data : Bytes, nonce : Nonce) : Bytes def encrypt_easy(data : Bytes, nonce : Nonce) : Bytes
output = Bytes.new(data.bytesize + LibSodium::MAC_BYTES) output = Bytes.new(data.bytesize + MAC_BYTES)
if LibSodium.crypto_secretbox_easy(output, data, data.bytesize, nonce.pointer, @bytes) != 0 encrypt_easy(data, output, nonce)
end
def encrypt_easy(src : Bytes, dst : Bytes, nonce : Nonce) : Bytes
if dst.bytesize != (src.bytesize + MAC_BYTES)
raise ArgumentError.new("dst.bytesize must be src.bytesize + MAC_BYTES, got #{dst.bytesize}")
end
if LibSodium.crypto_secretbox_easy(dst, src, src.bytesize, nonce.pointer, @bytes) != 0
raise Cox::Error.new("crypto_secretbox_easy") raise Cox::Error.new("crypto_secretbox_easy")
end end
output dst
end end
def decrypt_easy(data : Bytes, nonce : Nonce) : Bytes def decrypt_easy(data : Bytes, nonce : Nonce) : Bytes
output_size = data.bytesize - LibSodium::MAC_BYTES output_size = data.bytesize - MAC_BYTES
raise Cox::DecryptionFailed.new("encrypted data too small #{data.bytesize}") if output_size <= 0 raise Cox::DecryptionFailed.new("encrypted data too small #{data.bytesize}") if output_size <= 0
output = Bytes.new output_size output = Bytes.new output_size
if LibSodium.crypto_secretbox_open_easy(output, data, data.bytesize, nonce.pointer, @bytes) != 0 decrypt_easy(data, output, nonce)
end
def decrypt_easy(src : Bytes, dst : Bytes, nonce : Nonce) : Bytes
if dst.bytesize != (src.bytesize - MAC_BYTES)
raise ArgumentError.new("dst.bytesize must be src.bytesize - MAC_BYTES, got #{dst.bytesize}")
end
if LibSodium.crypto_secretbox_open_easy(dst, src, src.bytesize, nonce.pointer, @bytes) != 0
raise Cox::DecryptionFailed.new("crypto_secretbox_easy") raise Cox::DecryptionFailed.new("crypto_secretbox_easy")
end end
output dst
end end
# TODO: encrypt_detached # TODO: encrypt_detached