Baguette/sodium.cr
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

SecureBuffer inherit from Crypto::Secret

Browse Source
This commit is contained in:
Didactic Drunk 2022-05-17 16:56:05 -07:00
parent e58c7e43e2
commit 527ffe9c06
1 changed files with 9 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
src/sodium/secure_buffer.cr
View File

@ -7,19 +7,20 @@ module Sodium
# #
# #initialize returns readonly or readwrite for thread safety # #initialize returns readonly or readwrite for thread safety
# When state changes are required (such as using #noaccess) and the buffer is accessed from multiple threads wrap each #readonly/#readwrite block in a lock. # When state changes are required (such as using #noaccess) and the buffer is accessed from multiple threads wrap each #readonly/#readwrite block in a lock.
class SecureBuffer class SecureBuffer < Crypto::Secret
include Crypto::Secret::Stateful include Crypto::Secret::Stateful
getter bytesize : Int32 getter buffer_bytesize : Int32
def initialize(@bytesize : Int32) def initialize(@buffer_bytesize : Int32)
@ptr = LibSodium.sodium_malloc @bytesize @ptr = LibSodium.sodium_malloc @buffer_bytesize
raise Error::OutOfMemory.new if @ptr.null? raise Error::OutOfMemory.new("allocating #{@buffer_bytesize}") if @ptr.null?
end end
# Copies bytes to a **readonly** SecureBuffer. # Copies bytes to a **readonly** SecureBuffer.
# Optionally erases bytes after copying if erase is set # Optionally erases bytes after copying if erase is set
# Returns a **readonly** SecureBuffer. # Returns a **readonly** SecureBuffer.
@[Deprecated("Use .copy_from or .move_from")]
def initialize(bytes : Bytes, erase = false) def initialize(bytes : Bytes, erase = false)
initialize bytes.bytesize initialize bytes.bytesize
readwrite do |slice| readwrite do |slice|
@ -32,7 +33,7 @@ module Sodium
# :nodoc: # :nodoc:
# For .dup # For .dup
def initialize(sbuf : Crypto::Secret) def initialize(sbuf : Crypto::Secret)
initialize sbuf.bytesize initialize sbuf.buffer_bytesize
# Maybe not thread safe # Maybe not thread safe
sbuf.readonly do |sslice| sbuf.readonly do |sslice|
@ -56,18 +57,12 @@ module Sodium
# #
@[Deprecated("Use the Slice provided within a `readonly` or `readwrite` block")] @[Deprecated("Use the Slice provided within a `readonly` or `readwrite` block")]
def to_slice : Bytes def to_slice : Bytes
case @state raise NotImplementedError.new
when State::Noaccess, State::Wiped
readonly
else
# Ok
end
Slice(UInt8).new @ptr, @bytesize
end end
protected def to_slice(& : Bytes -> Nil) protected def to_slice(& : Bytes -> Nil)
ro = @state < State::Readonly ro = @state < State::Readonly
yield Bytes.new(@ptr, @bytesize, read_only: ro) yield Bytes.new(@ptr, @buffer_bytesize, read_only: ro)
end end
# :nodoc: # :nodoc: