encryption

func CalcPadding ¶

func CalcPadding(sLen int) (l int)

CalcPadding creates padding for the message payload that is precisely a power of two in order to reduce the chances of plaintext attack. This is plainly retarded because it could blow out the message size a lot when just a random few dozen bytes and a length prefix would achieve the same result.

func Decrypt ¶

func Decrypt(b64ciphertextWrapped, conversationKey []byte) (
	plaintext []byte,
	err error,
)

Decrypt data that has been encoded using a provided symmetric conversation key using NIP-44 encryption (chacha20 cipher stream and sha256 HMAC).

func DecryptNip4 ¶

func DecryptNip4(content, key []byte) (msg []byte, err error)

DecryptNip4 decrypts a content string using the shared secret key. The inverse operation to message -> EncryptNip4(message, key).

func Encrypt ¶

func Encrypt(
	plaintext, conversationKey []byte, applyOptions ...func(opts *Opts),
) (
	cipherString []byte, err error,
)

Encrypt data using a provided symmetric conversation key using NIP-44 encryption (chacha20 cipher stream and sha256 HMAC).

func EncryptNip4 ¶

func EncryptNip4(msg, key []byte) (ct []byte, err error)

EncryptNip4 encrypts message with key using aes-256-cbc. key should be the shared secret generated by ComputeSharedSecret.

Returns: base64(encrypted_bytes) + "?iv=" + base64(initialization_vector).

func GenerateConversationKeyFromHex ¶ added in v0.4.15

func GenerateConversationKeyFromHex(pkh, skh string) (ck []byte, err error)

GenerateConversationKeyFromHex performs an ECDH key generation hashed with the nip-44-v2 using hkdf.

func GenerateConversationKeyWithSigner ¶ added in v0.4.15

func GenerateConversationKeyWithSigner(sign signer.I, pk []byte) (
	ck []byte, err error,
)

func WithCustomNonce ¶

func WithCustomNonce(salt []byte) func(opts *Opts)

WithCustomNonce enables using a custom nonce (salt) instead of using the system crypto/rand entropy source.