mirror of
https://github.com/simplex-chat/simplexmq.git
synced 2026-10-06 14:17:20 +00:00
EvgenyandEvgeny @ SimpleX Chat
f3408d9bb6
* explicit exports * more empty exports * add exports * reorder * use correct ControlProtocol type for xftp router --------- Co-authored-by: Evgeny @ SimpleX Chat <259188159+evgeny-simplex@users.noreply.github.com>
37 lines
1.4 KiB
Haskell
37 lines
1.4 KiB
Haskell
{-# LANGUAGE DataKinds #-}
|
|
{-# LANGUAGE GADTs #-}
|
|
{-# LANGUAGE LambdaCase #-}
|
|
|
|
module Simplex.Messaging.Crypto.SNTRUP761
|
|
( KEMHybridSecret (..),
|
|
kcbDecrypt,
|
|
kcbEncrypt,
|
|
kemHybridSecret,
|
|
) where
|
|
|
|
import Crypto.Hash (Digest, SHA3_256, hash)
|
|
import Data.ByteArray (ScrubbedBytes)
|
|
import qualified Data.ByteArray as BA
|
|
import Data.ByteString (ByteString)
|
|
import Simplex.Messaging.Crypto
|
|
import qualified Simplex.Messaging.Crypto as C
|
|
import Simplex.Messaging.Crypto.SNTRUP761.Bindings
|
|
|
|
-- Hybrid shared secret for crypto_box is defined as SHA256(DHSecret || KEMSharedKey),
|
|
-- similar to https://datatracker.ietf.org/doc/draft-josefsson-ntruprime-hybrid/
|
|
|
|
newtype KEMHybridSecret = KEMHybridSecret ScrubbedBytes
|
|
|
|
-- | NaCl @crypto_box@ decrypt with a shared hybrid DH + KEM secret and 192-bit nonce.
|
|
kcbDecrypt :: KEMHybridSecret -> CbNonce -> ByteString -> Either CryptoError ByteString
|
|
kcbDecrypt (KEMHybridSecret k) = sbDecrypt_ k
|
|
|
|
-- | NaCl @crypto_box@ encrypt with a shared hybrid DH + KEM secret and 192-bit nonce.
|
|
kcbEncrypt :: KEMHybridSecret -> CbNonce -> ByteString -> Int -> Either CryptoError ByteString
|
|
kcbEncrypt (KEMHybridSecret k) = sbEncrypt_ k
|
|
|
|
kemHybridSecret :: PublicKeyX25519 -> PrivateKeyX25519 -> KEMSharedKey -> KEMHybridSecret
|
|
kemHybridSecret k pk (KEMSharedKey kem) =
|
|
let DhSecretX25519 dh = C.dh' k pk
|
|
in KEMHybridSecret $ BA.convert (hash $ BA.convert dh <> kem :: Digest SHA3_256)
|