Initial QSfera import

Server/vendor/github.com/libregraph/lico/identity/managers/encryption.go

@@ -0,0 +1,113 @@
+/*
+ * Copyright 2017-2019 Kopano and its licensors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ */
+
+package managers
+
+import (
+	"encoding/hex"
+	"fmt"
+
+	"github.com/libregraph/lico/encryption"
+)
+
+// EncryptionManager implements string encryption functions with a key.
+type EncryptionManager struct {
+	key *[encryption.KeySize]byte
+}
+
+// NewEncryptionManager creates a new EncryptionManager with the provided key.
+func NewEncryptionManager(key *[encryption.KeySize]byte) (*EncryptionManager, error) {
+	em := &EncryptionManager{
+		key: key,
+	}
+
+	return em, nil
+}
+
+// SetKey sets the provided key for the accociated manager.
+func (em *EncryptionManager) SetKey(key []byte) error {
+	switch len(key) {
+	case encryption.KeySize:
+		// all good, breaks
+	case hex.EncodedLen(encryption.KeySize):
+		// try to decode with hex
+		dst := make([]byte, encryption.KeySize)
+		if _, err := hex.Decode(dst, key); err == nil {
+			key = dst
+		}
+	}
+	if len(key) != encryption.KeySize {
+		return fmt.Errorf("encryption key size error, is %d, want %d", len(key), encryption.KeySize)
+	}
+
+	em.key = new([encryption.KeySize]byte)
+	copy(em.key[:], key[:encryption.KeySize])
+	return nil
+}
+
+// GetKeySize returns the size of the accociated manager's key.
+func (em *EncryptionManager) GetKeySize() int {
+	return len(em.key)
+}
+
+// EncryptStringToHexString encrypts a plaintext string with the accociated
+// key and returns the hex encoded ciphertext as string.
+func (em *EncryptionManager) EncryptStringToHexString(plaintext string) (string, error) {
+	ciphertext, err := em.Encrypt([]byte(plaintext))
+	if err != nil {
+		return "", err
+	}
+
+	return hex.EncodeToString(ciphertext), nil
+}
+
+// Encrypt encrypts plaintext []byte with the accociated key and returns
+// ciphertext []byte.
+func (em *EncryptionManager) Encrypt(plaintext []byte) ([]byte, error) {
+	ciphertext, err := encryption.Encrypt(plaintext, em.key)
+	if err != nil {
+		return nil, err
+	}
+
+	return ciphertext, nil
+}
+
+// DecryptHexToString decrypts a hex encoded string with the accociated key
+// and returns the plain text as string.
+func (em *EncryptionManager) DecryptHexToString(ciphertextHex string) (string, error) {
+	ciphertext, err := hex.DecodeString(ciphertextHex)
+	if err != nil {
+		return "", err
+	}
+	plaintext, err := em.Decrypt(ciphertext)
+	if err != nil {
+		return "", err
+	}
+
+	return string(plaintext), nil
+}
+
+// Decrypt decrypts ciphertext []byte with the accociated key and returns
+// plaintext []byte.
+func (em *EncryptionManager) Decrypt(ciphertext []byte) ([]byte, error) {
+	plaintext, err := encryption.Decrypt(ciphertext, em.key)
+	if err != nil {
+		return nil, err
+	}
+
+	return plaintext, nil
+}