Nucypher
/
nucypher
mirror of https://github.com/nucypher/nucypher.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Rekey

pull/66/head^2
Michael Egorov 2017-09-30 13:59:37 -07:00
parent 572442b8cb
commit 9c8746e370
1 changed files with 17 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
nkms/crypto/encrypting_keypair.py
View File

@ -23,9 +23,9 @@ class EncryptingKeypair(object):
self.pre = _tl.pre self.pre = _tl.pre
if not privkey: if not privkey:
self.priv_key = self.pre.gen_priv() self._priv_key = self.pre.gen_priv()
else: else:
self.priv_key = ec.deserialize( self._priv_key = ec.deserialize(
self.pre.ecgroup, b'\x00' + privkey) self.pre.ecgroup, b'\x00' + privkey)
# We don't always need a public key, so let's make it lazily # We don't always need a public key, so let's make it lazily
@ -37,7 +37,7 @@ class EncryptingKeypair(object):
Lazy generation of a public key Lazy generation of a public key
""" """
if self.__pub_key is None: if self.__pub_key is None:
self.__pub_key = self.pre.priv2pub(self.priv_key) self.__pub_key = self.pre.priv2pub(self._priv_key)
return self.__pub_key return self.__pub_key
@property @property
@ -80,12 +80,23 @@ class EncryptingKeypair(object):
ekey, edata = edata ekey, edata = edata
ekey = umbral.EncryptedKey( ekey = umbral.EncryptedKey(
ekey=ec.deserialize(self.pre.ecgroup, ekey), re_id=None) ekey=ec.deserialize(self.pre.ecgroup, ekey), re_id=None)
key = self.pre.decapsulate(self.priv_key, ekey) key = self.pre.decapsulate(self._priv_key, ekey)
cipher = SecretBox(key) cipher = SecretBox(key)
return cipher.decrypt(edata) return cipher.decrypt(edata)
def rekey(): def rekey(self,
pass pubkey: bytes) -> Tuple[bytes, Tuple[bytes, bytes]]:
"""
Create re-encryption key from private key which we have to public key
pubkey.
Internally, we create an ephemeral key priv_eph randomly and share data
with it, and also attach encrypted priv_eph as the second part of the
tuple
"""
priv_eph = self.pre.gen_priv()
rk = self.pre.rekey(self._priv_key, priv_eph)
encrypted_eph = self.encrypt(ec.serialize(priv_eph))
return (ec.serialize(rk), encrypted_eph)
def reencrypt(): def reencrypt():
pass pass