hatter/local-mini-kms
1
1
Fork 0
Code Issues 2 Pull Requests Projects Releases Wiki Activity

gis

Browse Source
This commit is contained in:
Hatter Jiang
2022-07-24 18:03:36 +08:00
parent ee0c59bbcf
commit 9c99f36eef
1 changed files with 17 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
src/jose.rs
View File

@@ -5,6 +5,9 @@ use josekit::jwe::JweHeader;
use josekit::jwk::alg::rsa::RsaKeyPair; use josekit::jwk::alg::rsa::RsaKeyPair;
use josekit::jwk::Jwk; use josekit::jwk::Jwk;
use rust_util::XResult; use rust_util::XResult;
use serde_json::Value;
const LOCAL_KMS_PREFIX: &'static str = "LOCAL_KMS:";
pub fn generate_rsa_key(bits: u32) -> XResult<RsaKeyPair> { pub fn generate_rsa_key(bits: u32) -> XResult<RsaKeyPair> {
Ok(RsaKeyPair::generate(bits)?) Ok(RsaKeyPair::generate(bits)?)
@@ -13,23 +16,33 @@ pub fn generate_rsa_key(bits: u32) -> XResult<RsaKeyPair> {
// pub fn serialize_jwe_rsa(payload: &[u8], jwk: &Jwk) -> XResult<String> { // pub fn serialize_jwe_rsa(payload: &[u8], jwk: &Jwk) -> XResult<String> {
// let mut header = JweHeader::new(); // let mut header = JweHeader::new();
// header.set_content_encryption("A256GCM"); // header.set_content_encryption("A256GCM");
// header.set_claim("vendor", Some(Value::String("local-mini-kms".to_string())))?;
// let encrypter = RsaesJweAlgorithm::RsaOaep.encrypter_from_jwk(&jwk)?; // let encrypter = RsaesJweAlgorithm::RsaOaep.encrypter_from_jwk(&jwk)?;
// Ok(jwe::serialize_compact(payload, &header, &encrypter)?) // Ok(format!("{}{}", LOCAL_KMS_PREFIX, jwe::serialize_compact(payload, &header, &encrypter)?))
// } // }
pub fn deserialize_jwe_rsa(jwe: &str, jwk: &Jwk) -> XResult<(Vec<u8>, JweHeader)> { pub fn deserialize_jwe_rsa(jwe: &str, jwk: &Jwk) -> XResult<(Vec<u8>, JweHeader)> {
let decrypter = RsaesJweAlgorithm::RsaOaep.decrypter_from_jwk(jwk)?; let decrypter = RsaesJweAlgorithm::RsaOaep.decrypter_from_jwk(jwk)?;
Ok(jwe::deserialize_json(jwe, &decrypter)?) Ok(jwe::deserialize_json(&get_jwe(jwe), &decrypter)?)
} }
pub fn serialize_jwe_aes(payload: &[u8], key: &[u8]) -> XResult<String> { pub fn serialize_jwe_aes(payload: &[u8], key: &[u8]) -> XResult<String> {
let mut header = JweHeader::new(); let mut header = JweHeader::new();
header.set_content_encryption("A256GCM"); header.set_content_encryption("A256GCM");
header.set_claim("vendor", Some(Value::String("local-mini-kms".to_string())))?;
let encrypter = AeskwJweAlgorithm::A256kw.encrypter_from_bytes(key)?; let encrypter = AeskwJweAlgorithm::A256kw.encrypter_from_bytes(key)?;
Ok(jwe::serialize_compact(payload, &header, &encrypter)?) Ok(format!("{}{}", LOCAL_KMS_PREFIX, jwe::serialize_compact(payload, &header, &encrypter)?))
} }
pub fn deserialize_jwe_aes(jwe: &str, key: &[u8]) -> XResult<(Vec<u8>, JweHeader)> { pub fn deserialize_jwe_aes(jwe: &str, key: &[u8]) -> XResult<(Vec<u8>, JweHeader)> {
let decrypter = AeskwJweAlgorithm::A256kw.decrypter_from_bytes(key)?; let decrypter = AeskwJweAlgorithm::A256kw.decrypter_from_bytes(key)?;
Ok(jwe::deserialize_compact(jwe, &decrypter)?) Ok(jwe::deserialize_compact(&get_jwe(jwe), &decrypter)?)
}
fn get_jwe(jwe: &str) -> String {
if jwe.starts_with(LOCAL_KMS_PREFIX) {
jwe.chars().skip(LOCAL_KMS_PREFIX.len()).collect()
} else {
jwe.to_string()
}
} }