mirror of
https://github.com/rustfs/rustfs.git
synced 2026-08-04 12:27:43 +00:00
houseme
7e1a9e2ede
* fix * chore: upgrade cryptography libraries to RC versions - Upgrade aes-gcm to 0.11.0-rc.2 with rand_core support - Upgrade chacha20poly1305 to 0.11.0-rc.2 - Upgrade argon2 to 0.6.0-rc.2 with std features - Upgrade hmac to 0.13.0-rc.3 - Upgrade pbkdf2 to 0.13.0-rc.2 - Upgrade rsa to 0.10.0-rc.10 - Upgrade sha1 and sha2 to 0.11.0-rc.3 - Upgrade md-5 to 0.11.0-rc.3 These upgrades provide enhanced security features and performance improvements while maintaining backward compatibility with existing encryption workflows. * add * improve code * fix
59 lines
2.1 KiB
Rust
59 lines
2.1 KiB
Rust
// Copyright 2024 RustFS Team
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
#[cfg(any(test, feature = "crypto"))]
|
|
pub fn decrypt_data(password: &[u8], data: &[u8]) -> Result<Vec<u8>, crate::Error> {
|
|
use crate::encdec::id::ID;
|
|
use crate::error::Error;
|
|
use aes_gcm::{Aes256Gcm, KeyInit as _};
|
|
use chacha20poly1305::ChaCha20Poly1305;
|
|
|
|
const HEADER_LENGTH: usize = 45;
|
|
if data.len() < HEADER_LENGTH {
|
|
return Err(Error::ErrUnexpectedHeader);
|
|
}
|
|
|
|
let (salt, id, nonce_slice) = (&data[..32], ID::try_from(data[32])?, &data[33..45]);
|
|
let body = &data[HEADER_LENGTH..];
|
|
|
|
match id {
|
|
ID::Argon2idChaCHa20Poly1305 => {
|
|
let key = id.get_key(password, salt)?;
|
|
decrypt(ChaCha20Poly1305::new_from_slice(&key)?, nonce_slice, body)
|
|
}
|
|
_ => {
|
|
let key = id.get_key(password, salt)?;
|
|
decrypt(Aes256Gcm::new_from_slice(&key)?, nonce_slice, body)
|
|
}
|
|
}
|
|
}
|
|
|
|
#[cfg(any(test, feature = "crypto"))]
|
|
#[inline]
|
|
fn decrypt<T: aes_gcm::aead::Aead>(stream: T, nonce: &[u8], data: &[u8]) -> Result<Vec<u8>, crate::Error> {
|
|
use crate::error::Error;
|
|
use aes_gcm::AeadCore;
|
|
use aes_gcm::aead::array::Array;
|
|
use core::convert::TryFrom;
|
|
|
|
let nonce_arr: Array<u8, <T as AeadCore>::NonceSize> =
|
|
Array::try_from(nonce).map_err(|_| Error::ErrDecryptFailed(aes_gcm::aead::Error))?;
|
|
stream.decrypt(&nonce_arr, data).map_err(Error::ErrDecryptFailed)
|
|
}
|
|
|
|
#[cfg(not(any(test, feature = "crypto")))]
|
|
pub fn decrypt_data(_password: &[u8], data: &[u8]) -> Result<Vec<u8>, crate::Error> {
|
|
Ok(data.to_vec())
|
|
}
|