1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

use crate::error::Error;

use openssl::rsa::Padding;
use openssl::rsa::Rsa;

pub const DEBUG_KEY: &[u8] = include_bytes!("../debug/rsa2048-priv.der");

pub fn seal(plaintext: &[u8]) -> Result<Vec<u8>, Error> {
    let pri_key = Rsa::private_key_from_der(DEBUG_KEY).or(Err(Error::SealingKey))?;
    let padding = Padding::PKCS1;
    let len = core::cmp::max(plaintext.len(), pri_key.size() as usize);
    let mut sealed = vec![0 as u8; len];
    let len = pri_key
        .public_encrypt(plaintext, &mut sealed, padding)
        .or(Err(Error::Sealing))?;
    sealed.truncate(len);
    Ok(sealed)
}

pub fn unseal(sealed: &[u8]) -> Result<Vec<u8>, Error> {
    let pri_key = Rsa::private_key_from_der(DEBUG_KEY).or(Err(Error::SealingKey))?;
    let padding = Padding::PKCS1;
    let len = core::cmp::max(sealed.len(), pri_key.size() as usize);
    let mut unsealed = vec![0 as u8; len];
    let len = pri_key
        .private_decrypt(sealed, &mut unsealed, padding)
        .or(Err(Error::SealingKey))?;
    unsealed.truncate(len);
    Ok(unsealed)
}