fix: Get the code to compile
This commit is contained in:
parent
25f2ae6fa9
commit
809599d60c
@ -206,7 +206,7 @@ impl RedisClientWrapper {
|
|||||||
}
|
}
|
||||||
|
|
||||||
// Select the database
|
// Select the database
|
||||||
redis::cmd("SELECT").arg(self.db).execute(&mut conn);
|
let _ = redis::cmd("SELECT").arg(self.db).exec(&mut conn);
|
||||||
|
|
||||||
self.initialized.store(true, Ordering::Relaxed);
|
self.initialized.store(true, Ordering::Relaxed);
|
||||||
|
|
||||||
|
@ -1,14 +1,17 @@
|
|||||||
/// Implementation of keypair functionality.
|
|
||||||
|
|
||||||
use k256::ecdsa::{SigningKey, VerifyingKey, signature::{Signer, Verifier}, Signature};
|
|
||||||
use k256::ecdh::EphemeralSecret;
|
use k256::ecdh::EphemeralSecret;
|
||||||
|
/// Implementation of keypair functionality.
|
||||||
|
use k256::ecdsa::{
|
||||||
|
signature::{Signer, Verifier},
|
||||||
|
Signature, SigningKey, VerifyingKey,
|
||||||
|
};
|
||||||
use rand::rngs::OsRng;
|
use rand::rngs::OsRng;
|
||||||
use serde::{Serialize, Deserialize};
|
use serde::{Deserialize, Serialize};
|
||||||
|
use sha2::{Digest, Sha256};
|
||||||
use std::collections::HashMap;
|
use std::collections::HashMap;
|
||||||
use sha2::{Sha256, Digest};
|
|
||||||
|
|
||||||
use crate::vault::symmetric::implementation;
|
|
||||||
use crate::vault::error::CryptoError;
|
use crate::vault::error::CryptoError;
|
||||||
|
use crate::vault::symmetric::implementation;
|
||||||
|
use k256::elliptic_curve::PublicKey;
|
||||||
|
|
||||||
/// A keypair for signing and verifying messages.
|
/// A keypair for signing and verifying messages.
|
||||||
#[derive(Debug, Clone, Serialize, Deserialize)]
|
#[derive(Debug, Clone, Serialize, Deserialize)]
|
||||||
@ -23,8 +26,8 @@ pub struct KeyPair {
|
|||||||
// Serialization helpers for VerifyingKey
|
// Serialization helpers for VerifyingKey
|
||||||
mod verifying_key_serde {
|
mod verifying_key_serde {
|
||||||
use super::*;
|
use super::*;
|
||||||
use serde::{Serializer, Deserializer};
|
|
||||||
use serde::de::{self, Visitor};
|
use serde::de::{self, Visitor};
|
||||||
|
use serde::{Deserializer, Serializer};
|
||||||
use std::fmt;
|
use std::fmt;
|
||||||
|
|
||||||
pub fn serialize<S>(key: &VerifyingKey, serializer: S) -> Result<S::Ok, S::Error>
|
pub fn serialize<S>(key: &VerifyingKey, serializer: S) -> Result<S::Ok, S::Error>
|
||||||
@ -84,8 +87,8 @@ mod verifying_key_serde {
|
|||||||
// Serialization helpers for SigningKey
|
// Serialization helpers for SigningKey
|
||||||
mod signing_key_serde {
|
mod signing_key_serde {
|
||||||
use super::*;
|
use super::*;
|
||||||
use serde::{Serializer, Deserializer};
|
|
||||||
use serde::de::{self, Visitor};
|
use serde::de::{self, Visitor};
|
||||||
|
use serde::{Deserializer, Serializer};
|
||||||
use std::fmt;
|
use std::fmt;
|
||||||
|
|
||||||
pub fn serialize<S>(key: &SigningKey, serializer: S) -> Result<S::Ok, S::Error>
|
pub fn serialize<S>(key: &SigningKey, serializer: S) -> Result<S::Ok, S::Error>
|
||||||
@ -186,9 +189,13 @@ impl KeyPair {
|
|||||||
}
|
}
|
||||||
|
|
||||||
/// Verifies a message signature using only a public key.
|
/// Verifies a message signature using only a public key.
|
||||||
pub fn verify_with_public_key(public_key: &[u8], message: &[u8], signature_bytes: &[u8]) -> Result<bool, CryptoError> {
|
pub fn verify_with_public_key(
|
||||||
let verifying_key = VerifyingKey::from_sec1_bytes(public_key)
|
public_key: &[u8],
|
||||||
.map_err(|_| CryptoError::InvalidKeyLength)?;
|
message: &[u8],
|
||||||
|
signature_bytes: &[u8],
|
||||||
|
) -> Result<bool, CryptoError> {
|
||||||
|
let verifying_key =
|
||||||
|
VerifyingKey::from_sec1_bytes(public_key).map_err(|_| CryptoError::InvalidKeyLength)?;
|
||||||
|
|
||||||
let signature = Signature::from_bytes(signature_bytes.into())
|
let signature = Signature::from_bytes(signature_bytes.into())
|
||||||
.map_err(|e| CryptoError::SignatureFormatError(e.to_string()))?;
|
.map_err(|e| CryptoError::SignatureFormatError(e.to_string()))?;
|
||||||
@ -206,21 +213,29 @@ impl KeyPair {
|
|||||||
/// 3. Derive encryption key from the shared secret
|
/// 3. Derive encryption key from the shared secret
|
||||||
/// 4. Encrypt the message using symmetric encryption
|
/// 4. Encrypt the message using symmetric encryption
|
||||||
/// 5. Return the ephemeral public key and the ciphertext
|
/// 5. Return the ephemeral public key and the ciphertext
|
||||||
pub fn encrypt_asymmetric(&self, recipient_public_key: &[u8], message: &[u8]) -> Result<Vec<u8>, CryptoError> {
|
pub fn encrypt_asymmetric(
|
||||||
|
&self,
|
||||||
|
recipient_public_key: &[u8],
|
||||||
|
message: &[u8],
|
||||||
|
) -> Result<Vec<u8>, CryptoError> {
|
||||||
// Parse recipient's public key
|
// Parse recipient's public key
|
||||||
let recipient_key = VerifyingKey::from_sec1_bytes(recipient_public_key)
|
let recipient_key = VerifyingKey::from_sec1_bytes(recipient_public_key)
|
||||||
.map_err(|_| CryptoError::InvalidKeyLength)?;
|
.map_err(|_| CryptoError::InvalidKeyLength)?;
|
||||||
|
|
||||||
|
// Convert ecdsa VerifyingKey to k256 PublicKey
|
||||||
|
let recipient_public_key_k256 =
|
||||||
|
PublicKey::from_sec1_bytes(&recipient_key.to_encoded_point(false).as_bytes())
|
||||||
|
.map_err(|_| CryptoError::InvalidKeyLength)?;
|
||||||
|
|
||||||
// Generate ephemeral keypair
|
// Generate ephemeral keypair
|
||||||
let ephemeral_signing_key = SigningKey::random(&mut OsRng);
|
let ephemeral_signing_key = SigningKey::random(&mut OsRng);
|
||||||
let ephemeral_public_key = VerifyingKey::from(&ephemeral_signing_key);
|
let ephemeral_public_key = VerifyingKey::from(&ephemeral_signing_key);
|
||||||
|
|
||||||
// Derive shared secret using ECDH
|
// Derive shared secret using ECDH
|
||||||
let ephemeral_secret = EphemeralSecret::random(&mut OsRng);
|
let ephemeral_secret = EphemeralSecret::random(&mut OsRng);
|
||||||
let shared_secret = ephemeral_secret.diffie_hellman(&recipient_key.to_public_key());
|
let shared_secret = ephemeral_secret.diffie_hellman(&recipient_public_key_k256);
|
||||||
|
|
||||||
// Derive encryption key from the shared secret (e.g., using HKDF or hashing)
|
// Derive encryption key from the shared secret (e.g., using HKDF or hashing)
|
||||||
// For simplicity, we'll hash the shared secret here
|
|
||||||
let encryption_key = {
|
let encryption_key = {
|
||||||
let mut hasher = Sha256::default();
|
let mut hasher = Sha256::default();
|
||||||
hasher.update(shared_secret.raw_secret_bytes());
|
hasher.update(shared_secret.raw_secret_bytes());
|
||||||
@ -232,7 +247,10 @@ impl KeyPair {
|
|||||||
.map_err(|e| CryptoError::EncryptionFailed(e.to_string()))?;
|
.map_err(|e| CryptoError::EncryptionFailed(e.to_string()))?;
|
||||||
|
|
||||||
// Format: ephemeral_public_key || ciphertext
|
// Format: ephemeral_public_key || ciphertext
|
||||||
let mut result = ephemeral_public_key.to_encoded_point(false).as_bytes().to_vec();
|
let mut result = ephemeral_public_key
|
||||||
|
.to_encoded_point(false)
|
||||||
|
.as_bytes()
|
||||||
|
.to_vec();
|
||||||
result.extend_from_slice(&ciphertext);
|
result.extend_from_slice(&ciphertext);
|
||||||
|
|
||||||
Ok(result)
|
Ok(result)
|
||||||
@ -244,7 +262,9 @@ impl KeyPair {
|
|||||||
// The first 33 or 65 bytes (depending on compression) are the ephemeral public key
|
// The first 33 or 65 bytes (depending on compression) are the ephemeral public key
|
||||||
// For simplicity, we'll assume uncompressed keys (65 bytes)
|
// For simplicity, we'll assume uncompressed keys (65 bytes)
|
||||||
if ciphertext.len() <= 65 {
|
if ciphertext.len() <= 65 {
|
||||||
return Err(CryptoError::DecryptionFailed("Ciphertext too short".to_string()));
|
return Err(CryptoError::DecryptionFailed(
|
||||||
|
"Ciphertext too short".to_string(),
|
||||||
|
));
|
||||||
}
|
}
|
||||||
|
|
||||||
// Extract ephemeral public key and actual ciphertext
|
// Extract ephemeral public key and actual ciphertext
|
||||||
@ -255,9 +275,14 @@ impl KeyPair {
|
|||||||
let sender_key = VerifyingKey::from_sec1_bytes(ephemeral_public_key)
|
let sender_key = VerifyingKey::from_sec1_bytes(ephemeral_public_key)
|
||||||
.map_err(|_| CryptoError::InvalidKeyLength)?;
|
.map_err(|_| CryptoError::InvalidKeyLength)?;
|
||||||
|
|
||||||
|
// Convert ecdsa VerifyingKey to k256 PublicKey
|
||||||
|
let sender_public_key_k256 =
|
||||||
|
PublicKey::from_sec1_bytes(&sender_key.to_encoded_point(false).as_bytes())
|
||||||
|
.map_err(|_| CryptoError::InvalidKeyLength)?;
|
||||||
|
|
||||||
// Derive shared secret using ECDH
|
// Derive shared secret using ECDH
|
||||||
let recipient_secret = EphemeralSecret::random(&mut OsRng);
|
let recipient_secret = EphemeralSecret::random(&mut OsRng);
|
||||||
let shared_secret = recipient_secret.diffie_hellman(&sender_key.to_public_key());
|
let shared_secret = recipient_secret.diffie_hellman(&sender_public_key_k256);
|
||||||
|
|
||||||
// Derive decryption key from the shared secret (using the same method as encryption)
|
// Derive decryption key from the shared secret (using the same method as encryption)
|
||||||
let decryption_key = {
|
let decryption_key = {
|
||||||
@ -301,7 +326,9 @@ impl KeySpace {
|
|||||||
|
|
||||||
/// Gets a keypair by name.
|
/// Gets a keypair by name.
|
||||||
pub fn get_keypair(&self, name: &str) -> Result<&KeyPair, CryptoError> {
|
pub fn get_keypair(&self, name: &str) -> Result<&KeyPair, CryptoError> {
|
||||||
self.keypairs.get(name).ok_or(CryptoError::KeypairNotFound(name.to_string()))
|
self.keypairs
|
||||||
|
.get(name)
|
||||||
|
.ok_or(CryptoError::KeypairNotFound(name.to_string()))
|
||||||
}
|
}
|
||||||
|
|
||||||
/// Lists all keypair names in the space.
|
/// Lists all keypair names in the space.
|
||||||
@ -309,4 +336,3 @@ impl KeySpace {
|
|||||||
self.keypairs.keys().cloned().collect()
|
self.keypairs.keys().cloned().collect()
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user