134 lines
4.0 KiB
Rust
134 lines
4.0 KiB
Rust
use crate::server::HistorySegment;
|
|
use std::convert::TryFrom;
|
|
use std::io::Read;
|
|
use tindercrypt::cryptors::RingCryptor;
|
|
use uuid::Uuid;
|
|
|
|
pub(super) struct Secret(pub(super) Vec<u8>);
|
|
|
|
impl From<Vec<u8>> for Secret {
|
|
fn from(bytes: Vec<u8>) -> Self {
|
|
Self(bytes)
|
|
}
|
|
}
|
|
|
|
impl AsRef<[u8]> for Secret {
|
|
fn as_ref(&self) -> &[u8] {
|
|
&self.0
|
|
}
|
|
}
|
|
|
|
/// A cleartext payload containing a history segment.
|
|
pub(super) struct HistoryCleartext {
|
|
pub(super) parent_version_id: Uuid,
|
|
pub(super) history_segment: HistorySegment,
|
|
}
|
|
|
|
impl HistoryCleartext {
|
|
/// Seal the payload into its ciphertext
|
|
pub(super) fn seal(self, secret: &Secret) -> anyhow::Result<HistoryCiphertext> {
|
|
let cryptor = RingCryptor::new().with_aad(self.parent_version_id.as_bytes());
|
|
let ciphertext = cryptor.seal_with_passphrase(secret.as_ref(), &self.history_segment)?;
|
|
Ok(HistoryCiphertext(ciphertext))
|
|
}
|
|
}
|
|
|
|
/// An ecrypted payload containing a history segment
|
|
pub(super) struct HistoryCiphertext(pub(super) Vec<u8>);
|
|
|
|
impl HistoryCiphertext {
|
|
pub(super) fn open(
|
|
self,
|
|
secret: &Secret,
|
|
parent_version_id: Uuid,
|
|
) -> anyhow::Result<HistoryCleartext> {
|
|
let cryptor = RingCryptor::new().with_aad(parent_version_id.as_bytes());
|
|
let plaintext = cryptor.open(secret.as_ref(), &self.0)?;
|
|
|
|
Ok(HistoryCleartext {
|
|
parent_version_id,
|
|
history_segment: plaintext,
|
|
})
|
|
}
|
|
}
|
|
|
|
impl TryFrom<ureq::Response> for HistoryCiphertext {
|
|
type Error = anyhow::Error;
|
|
|
|
fn try_from(resp: ureq::Response) -> Result<HistoryCiphertext, anyhow::Error> {
|
|
if let Some("application/vnd.taskchampion.history-segment") = resp.header("Content-Type") {
|
|
let mut reader = resp.into_reader();
|
|
let mut bytes = vec![];
|
|
reader.read_to_end(&mut bytes)?;
|
|
Ok(Self(bytes))
|
|
} else {
|
|
Err(anyhow::anyhow!(
|
|
"Response did not have expected content-type"
|
|
))
|
|
}
|
|
}
|
|
}
|
|
|
|
impl AsRef<[u8]> for HistoryCiphertext {
|
|
fn as_ref(&self) -> &[u8] {
|
|
self.0.as_ref()
|
|
}
|
|
}
|
|
|
|
#[cfg(test)]
|
|
mod test {
|
|
use super::*;
|
|
use pretty_assertions::assert_eq;
|
|
|
|
#[test]
|
|
fn round_trip() {
|
|
let parent_version_id = Uuid::new_v4();
|
|
let history_segment = b"HISTORY REPEATS ITSELF".to_vec();
|
|
let secret = Secret(b"SEKRIT".to_vec());
|
|
|
|
let history_cleartext = HistoryCleartext {
|
|
parent_version_id,
|
|
history_segment: history_segment.clone(),
|
|
};
|
|
let history_ciphertext = history_cleartext.seal(&secret).unwrap();
|
|
let history_cleartext = history_ciphertext.open(&secret, parent_version_id).unwrap();
|
|
|
|
assert_eq!(history_cleartext.history_segment, history_segment);
|
|
assert_eq!(history_cleartext.parent_version_id, parent_version_id);
|
|
}
|
|
|
|
#[test]
|
|
fn round_trip_bad_key() {
|
|
let parent_version_id = Uuid::new_v4();
|
|
let history_segment = b"HISTORY REPEATS ITSELF".to_vec();
|
|
let secret = Secret(b"SEKRIT".to_vec());
|
|
|
|
let history_cleartext = HistoryCleartext {
|
|
parent_version_id,
|
|
history_segment: history_segment.clone(),
|
|
};
|
|
let history_ciphertext = history_cleartext.seal(&secret).unwrap();
|
|
|
|
let secret = Secret(b"BADSEKRIT".to_vec());
|
|
assert!(history_ciphertext.open(&secret, parent_version_id).is_err());
|
|
}
|
|
|
|
#[test]
|
|
fn round_trip_bad_pvid() {
|
|
let parent_version_id = Uuid::new_v4();
|
|
let history_segment = b"HISTORY REPEATS ITSELF".to_vec();
|
|
let secret = Secret(b"SEKRIT".to_vec());
|
|
|
|
let history_cleartext = HistoryCleartext {
|
|
parent_version_id,
|
|
history_segment: history_segment.clone(),
|
|
};
|
|
let history_ciphertext = history_cleartext.seal(&secret).unwrap();
|
|
|
|
let bad_parent_version_id = Uuid::new_v4();
|
|
assert!(history_ciphertext
|
|
.open(&secret, bad_parent_version_id)
|
|
.is_err());
|
|
}
|
|
}
|