Files
opencloud/vendor/github.com/libregraph/lico/identity/managers/encryption.go
2023-04-19 20:24:34 +02:00

114 lines
3.1 KiB
Go

/*
* Copyright 2017-2019 Kopano and its licensors
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*
*/
package managers
import (
"encoding/hex"
"fmt"
"github.com/libregraph/lico/encryption"
)
// EncryptionManager implements string encryption functions with a key.
type EncryptionManager struct {
key *[encryption.KeySize]byte
}
// NewEncryptionManager creates a new EncryptionManager with the provided key.
func NewEncryptionManager(key *[encryption.KeySize]byte) (*EncryptionManager, error) {
em := &EncryptionManager{
key: key,
}
return em, nil
}
// SetKey sets the provided key for the accociated manager.
func (em *EncryptionManager) SetKey(key []byte) error {
switch len(key) {
case encryption.KeySize:
// all good, breaks
case hex.EncodedLen(encryption.KeySize):
// try to decode with hex
dst := make([]byte, encryption.KeySize)
if _, err := hex.Decode(dst, key); err == nil {
key = dst
}
}
if len(key) != encryption.KeySize {
return fmt.Errorf("encryption key size error, is %d, want %d", len(key), encryption.KeySize)
}
em.key = new([encryption.KeySize]byte)
copy(em.key[:], key[:encryption.KeySize])
return nil
}
// GetKeySize returns the size of the accociated manager's key.
func (em *EncryptionManager) GetKeySize() int {
return len(em.key)
}
// EncryptStringToHexString encrypts a plaintext string with the accociated
// key and returns the hex encoded ciphertext as string.
func (em *EncryptionManager) EncryptStringToHexString(plaintext string) (string, error) {
ciphertext, err := em.Encrypt([]byte(plaintext))
if err != nil {
return "", err
}
return hex.EncodeToString(ciphertext), nil
}
// Encrypt encrypts plaintext []byte with the accociated key and returns
// ciphertext []byte.
func (em *EncryptionManager) Encrypt(plaintext []byte) ([]byte, error) {
ciphertext, err := encryption.Encrypt(plaintext, em.key)
if err != nil {
return nil, err
}
return ciphertext, nil
}
// DecryptHexToString decrypts a hex encoded string with the accociated key
// and returns the plain text as string.
func (em *EncryptionManager) DecryptHexToString(ciphertextHex string) (string, error) {
ciphertext, err := hex.DecodeString(ciphertextHex)
if err != nil {
return "", err
}
plaintext, err := em.Decrypt(ciphertext)
if err != nil {
return "", err
}
return string(plaintext), nil
}
// Decrypt decrypts ciphertext []byte with the accociated key and returns
// plaintext []byte.
func (em *EncryptionManager) Decrypt(ciphertext []byte) ([]byte, error) {
plaintext, err := encryption.Decrypt(ciphertext, em.key)
if err != nil {
return nil, err
}
return plaintext, nil
}