veilid/veilid-core/src/crypto/crypto_system.rs

use super::*;

pub trait CryptoSystem {
    // Accessors
    fn version(&self) -> CryptoVersion;
    fn crypto(&self) -> Crypto;

    // Cached Operations
    fn cached_dh(
        &self,
        key: &DHTKey,
        secret: &DHTKeySecret,
    ) -> Result<SharedSecret, VeilidAPIError>;

    // Generation
    fn random_nonce(&self) -> Nonce;
    fn random_shared_secret(&self) -> SharedSecret;
    fn compute_dh(
        &self,
        key: &DHTKey,
        secret: &DHTKeySecret,
    ) -> Result<SharedSecret, VeilidAPIError>;
    fn generate_keypair(&self) -> (DHTKey, DHTKeySecret);
    fn generate_hash(&self, data: &[u8]) -> DHTKey;
    fn generate_hash_reader(
        &self,
        reader: &mut dyn std::io::Read,
    ) -> Result<DHTKey, VeilidAPIError>;

    // Validation
    fn validate_keypair(&self, dht_key: &DHTKey, dht_key_secret: &DHTKeySecret) -> bool;
    fn validate_hash(&self, data: &[u8], dht_key: &DHTKey) -> bool;
    fn validate_hash_reader(
        &self,
        reader: &mut dyn std::io::Read,
        dht_key: &DHTKey,
    ) -> Result<bool, VeilidAPIError>;

    // Distance Metric
    fn distance(&self, key1: &DHTKey, key2: &DHTKey) -> DHTKeyDistance;

    // Authentication
    fn sign(
        &self,
        dht_key: &DHTKey,
        dht_key_secret: &DHTKeySecret,
        data: &[u8],
    ) -> Result<DHTSignature, VeilidAPIError>;
    fn verify(
        &self,
        dht_key: &DHTKey,
        data: &[u8],
        signature: &DHTSignature,
    ) -> Result<(), VeilidAPIError>;

    // AEAD Encrypt/Decrypt
    fn aead_overhead(&self) -> usize;
    fn decrypt_in_place_aead(
        &self,
        body: &mut Vec<u8>,
        nonce: &Nonce,
        shared_secret: &SharedSecret,
        associated_data: Option<&[u8]>,
    ) -> Result<(), VeilidAPIError>;
    fn decrypt_aead(
        &self,
        body: &[u8],
        nonce: &Nonce,
        shared_secret: &SharedSecret,
        associated_data: Option<&[u8]>,
    ) -> Result<Vec<u8>, VeilidAPIError>;
    fn encrypt_in_place_aead(
        &self,
        body: &mut Vec<u8>,
        nonce: &Nonce,
        shared_secret: &SharedSecret,
        associated_data: Option<&[u8]>,
    ) -> Result<(), VeilidAPIError>;
    fn encrypt_aead(
        &self,
        body: &[u8],
        nonce: &Nonce,
        shared_secret: &SharedSecret,
        associated_data: Option<&[u8]>,
    ) -> Result<Vec<u8>, VeilidAPIError>;

    // NoAuth Encrypt/Decrypt
    fn crypt_in_place_no_auth(
        &self,
        body: &mut Vec<u8>,
        nonce: &Nonce,
        shared_secret: &SharedSecret,
    );
    fn crypt_b2b_no_auth(
        &self,
        in_buf: &[u8],
        out_buf: &mut [u8],
        nonce: &Nonce,
        shared_secret: &SharedSecret,
    );
    fn crypt_no_auth_aligned_8(
        &self,
        body: &[u8],
        nonce: &Nonce,
        shared_secret: &SharedSecret,
    ) -> Vec<u8>;
    fn crypt_no_auth_unaligned(
        &self,
        body: &[u8],
        nonce: &Nonce,
        shared_secret: &SharedSecret,
    ) -> Vec<u8>;
}