WIP on encryption with command-line utility

Cargo.toml

@@ -25,6 +25,7 @@ required-features = ["cli"]
 [dependencies]
 amplify = { version = "3.13.0", features = ["stringly_conversions", "std"] }
 strict_encoding = "2.0.0-alpha.2"
+secp256k1 = { version = "0.24.1", features = ["global-context"], optional = true }
 lnpbp_bech32 = { version = "0.9.0-alpha.1", path = "bech32" }
 lnpbp_chain = { version = "0.9.0-alpha.1", path = "chain" }
 lnpbp_elgamal = { version = "0.9.0", path = "elgamal", optional = true }
@@ -42,7 +43,7 @@ colorize = { version = "0.1.0", optional = true } # Used by cli only
 [features]
 default = ["zip"]
 all = ["serde", "elgamal", "identity", "zip", "cli"]
-cli = ["clap", "serde", "identity", "base64-compat", "base58", "serde_yaml", "serde_json", "amplify/hex", "colorize"]
+cli = ["clap", "serde", "identity", "base64-compat", "base58", "serde_yaml", "serde_json", "amplify/hex", "colorize", "secp256k1"]
 serde = ["serde_crate", "serde_with", "amplify/serde",
          "lnpbp_bech32/serde", "lnpbp_chain/serde"]
 identity = ["lnpbp_identity"]

bech32/src/lib.rs

@@ -107,7 +107,7 @@ impl From<Infallible> for Error {
     }
 }
 
-/// Type for wrapping Vec<u8> data in cases you need to do a convenient
+/// Type for wrapping `Vec<u8>` data in cases you need to do a convenient
 /// enum variant display derives with `#[display(inner)]`
 #[cfg_attr(
     feature = "serde",

src/bin/lnpbp.rs

@@ -34,6 +34,7 @@ use lnpbp::{bech32, id};
 use lnpbp_identity::{
     EcAlgo, IdentityCert, IdentitySigner, SigCert, VerifyError,
 };
+use secp256k1::SECP256K1;
 use serde::Serialize;
 use strict_encoding::{StrictDecode, StrictEncode};
 
@@ -427,7 +428,29 @@ fn main() -> Result<(), Error> {
             sig.verify(&cert, data)?;
             println!("{}", "Signature is valid".green());
         }
-        Command::Identity(_) => todo!("elgamal encryption support"),
+        Command::Identity(IdentityCommand::Encrypt {
+            armor,
+            identity_file,
+            cert,
+            message,
+            src_file,
+            dst_file,
+        }) => {
+            let fd = fs::File::open(identity_file)?;
+            let id = IdentitySigner::strict_decode(fd)?;
+            let mut input = file_str_or_stdin(src_file, message)?;
+            let mut data = vec![];
+            input.read_to_end(&mut data)?;
+            lnpbp_elgamal::encrypt(SECP256K1, &data, cert.pubkey())?;
+        }
+        Command::Identity(IdentityCommand::Decrypt {
+            armor,
+            identity_file,
+            cert,
+            message,
+            src_file,
+            dst_file,
+        }) => {}
         Command::Convert {
             data,
             from,