rodolphe/coffio
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Allow to encrypt at a specific timestamp

Browse source
This commit is contained in:
Rodolphe Bréard 2024-04-07 12:22:04 +02:00
parent fd7dccddea
commit 224171c6d5
3 changed files with 63 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

25
src/coffio.rs
View file

@ -40,14 +40,35 @@ impl<'a> Coffio<'a> {
key_context: &KeyContext,
data_context: &DataContext,
data: impl AsRef<[u8]>,
) -> Result<String> {
self.process_encrypt_at(key_context, data_context, data, SystemTime::now())
}
#[cfg(feature = "encrypt-at")]
pub fn encrypt_at(
&self,
key_context: &KeyContext,
data_context: &DataContext,
data: impl AsRef<[u8]>,
encryption_time: SystemTime,
) -> Result<String> {
self.process_encrypt_at(key_context, data_context, data, encryption_time)
}
fn process_encrypt_at(
&self,
key_context: &KeyContext,
data_context: &DataContext,
data: impl AsRef<[u8]>,
encryption_time: SystemTime,
) -> Result<String> {
let tp = if key_context.is_periodic() {
let ts = SystemTime::now().duration_since(UNIX_EPOCH)?.as_secs();
let ts = encryption_time.duration_since(UNIX_EPOCH)?.as_secs();
key_context.get_time_period(ts)
} else {
None
};
let ikm = self.ikm_list.get_latest_ikm()?;
let ikm = self.ikm_list.get_latest_ikm(encryption_time)?;
let key = derive_key(ikm, key_context, tp);
let gen_nonce_function = ikm.scheme.get_gen_nonce();
let nonce = gen_nonce_function()?;