50 lines
1.8 KiB
Rust
50 lines
1.8 KiB
Rust
use crate::error::CryptoError;
|
|
use crate::keypair::{KemPrivateKey, KemPublicKey};
|
|
use zeroize::Zeroizing;
|
|
|
|
pub struct Encapsulated {
|
|
pub ciphertext: Vec<u8>,
|
|
pub shared_secret: Zeroizing<Vec<u8>>,
|
|
}
|
|
|
|
#[cfg(feature = "mlkem-tls")]
|
|
pub struct HybridKem;
|
|
|
|
#[cfg(feature = "mlkem-tls")]
|
|
impl HybridKem {
|
|
pub fn generate_keypair() -> (KemPrivateKey, KemPublicKey) {
|
|
/* Obviously: cannot find module or crate rand_core06 in this scope
|
|
use of unresolved module or unlinked crate rand_core06 (rustc E0433) */
|
|
let (ek, dk) =
|
|
mlkem_tls::X25519MlKem768::keygen(&mut chacha20poly1305::aead::rand_core::OsRng);
|
|
(
|
|
KemPrivateKey::new(dk.as_bytes().to_vec()),
|
|
KemPublicKey::new(ek.as_bytes().to_vec()),
|
|
)
|
|
}
|
|
|
|
pub fn encapsulate(recipient_pk: &KemPublicKey) -> Result<Encapsulated, CryptoError> {
|
|
let ek = mlkem_tls::EncapsKey768::try_from(recipient_pk.as_bytes())
|
|
.map_err(|_| CryptoError::KemEncapsulationFailed)?;
|
|
let (ct, ss) = mlkem_tls::X25519MlKem768::encapsulate(
|
|
&ek,
|
|
&mut chacha20poly1305::aead::rand_core::OsRng,
|
|
);
|
|
Ok(Encapsulated {
|
|
ciphertext: ct.as_bytes().to_vec(),
|
|
shared_secret: Zeroizing::new(ss.as_bytes().to_vec()),
|
|
})
|
|
}
|
|
|
|
pub fn decapsulate(
|
|
recipient_sk: &KemPrivateKey,
|
|
ciphertext: &[u8],
|
|
) -> Result<Zeroizing<Vec<u8>>, CryptoError> {
|
|
let dk = mlkem_tls::DecapsKey768::try_from(recipient_sk.as_bytes())
|
|
.map_err(|_| CryptoError::KemDecapsulationFailed)?;
|
|
let ct = mlkem_tls::Ciphertext768Hybrid::try_from(ciphertext)
|
|
.map_err(|_| CryptoError::KemDecapsulationFailed)?;
|
|
let ss = mlkem_tls::X25519MlKem768::decapsulate(&dk, &ct);
|
|
Ok(Zeroizing::new(ss.as_bytes().to_vec()))
|
|
}
|
|
}
|