package osscrypto import ( "io" ) const ( aesKeySize = 32 ivSize = 16 ) // aesCtrCipherBuilder for building ContentCipher type aesCtrCipherBuilder struct { MasterCipher MasterCipher } // aesCtrCipher will use aes ctr algorithm type aesCtrCipher struct { CipherData CipherData Cipher Cipher } // CreateAesCtrCipher creates ContentCipherBuilder func CreateAesCtrCipher(cipher MasterCipher) ContentCipherBuilder { return aesCtrCipherBuilder{MasterCipher: cipher} } // createCipherData create CipherData for encrypt object data func (builder aesCtrCipherBuilder) createCipherData() (CipherData, error) { var cd CipherData var err error err = cd.RandomKeyIv(aesKeySize, ivSize) if err != nil { return cd, err } cd.WrapAlgorithm = builder.MasterCipher.GetWrapAlgorithm() cd.CEKAlgorithm = AesCtrAlgorithm cd.MatDesc = builder.MasterCipher.GetMatDesc() // EncryptedKey cd.EncryptedKey, err = builder.MasterCipher.Encrypt(cd.Key) if err != nil { return cd, err } // EncryptedIV cd.EncryptedIV, err = builder.MasterCipher.Encrypt(cd.IV) if err != nil { return cd, err } return cd, nil } // contentCipherCD is used to create ContentCipher with CipherData func (builder aesCtrCipherBuilder) contentCipherCD(cd CipherData) (ContentCipher, error) { cipher, err := newAesCtr(cd) if err != nil { return nil, err } return &aesCtrCipher{ CipherData: cd, Cipher: cipher, }, nil } // ContentCipher is used to create ContentCipher interface func (builder aesCtrCipherBuilder) ContentCipher() (ContentCipher, error) { cd, err := builder.createCipherData() if err != nil { return nil, err } return builder.contentCipherCD(cd) } // ContentCipherEnv is used to create a decrption ContentCipher from Envelope func (builder aesCtrCipherBuilder) ContentCipherEnv(envelope Envelope) (ContentCipher, error) { var cd CipherData cd.EncryptedKey = make([]byte, len(envelope.CipherKey)) copy(cd.EncryptedKey, []byte(envelope.CipherKey)) plainKey, err := builder.MasterCipher.Decrypt([]byte(envelope.CipherKey)) if err != nil { return nil, err } cd.Key = make([]byte, len(plainKey)) copy(cd.Key, plainKey) cd.EncryptedIV = make([]byte, len(envelope.IV)) copy(cd.EncryptedIV, []byte(envelope.IV)) plainIV, err := builder.MasterCipher.Decrypt([]byte(envelope.IV)) if err != nil { return nil, err } cd.IV = make([]byte, len(plainIV)) copy(cd.IV, plainIV) cd.MatDesc = envelope.MatDesc cd.WrapAlgorithm = envelope.WrapAlg cd.CEKAlgorithm = envelope.CEKAlg return builder.contentCipherCD(cd) } // GetMatDesc is used to get MasterCipher's MatDesc func (builder aesCtrCipherBuilder) GetMatDesc() string { return builder.MasterCipher.GetMatDesc() } // EncryptContents will generate a random key and iv and encrypt the data using ctr func (cc *aesCtrCipher) EncryptContent(src io.Reader) (io.ReadCloser, error) { reader := cc.Cipher.Encrypt(src) return &CryptoEncrypter{Body: src, Encrypter: reader}, nil } // DecryptContent is used to decrypt object using ctr func (cc *aesCtrCipher) DecryptContent(src io.Reader) (io.ReadCloser, error) { reader := cc.Cipher.Decrypt(src) return &CryptoDecrypter{Body: src, Decrypter: reader}, nil } // GetCipherData is used to get cipher data information func (cc *aesCtrCipher) GetCipherData() *CipherData { return &(cc.CipherData) } // GetCipherData returns cipher data func (cc *aesCtrCipher) GetEncryptedLen(plainTextLen int64) int64 { // AES CTR encryption mode does not change content length return plainTextLen } // GetAlignLen is used to get align length func (cc *aesCtrCipher) GetAlignLen() int { return len(cc.CipherData.IV) } // Clone is used to create a new aesCtrCipher from itself func (cc *aesCtrCipher) Clone(cd CipherData) (ContentCipher, error) { cipher, err := newAesCtr(cd) if err != nil { return nil, err } return &aesCtrCipher{ CipherData: cd, Cipher: cipher, }, nil }