Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add hpke backend #25

Merged
merged 2 commits into from
Oct 17, 2024
Merged

Add hpke backend #25

merged 2 commits into from
Oct 17, 2024

Commits on Oct 17, 2024

  1. Add HPKE extension

    This will be useful for PIV encryption, working together with
    trussed-dev/trussed-auth#41
    
    This implements the standard HPKE from
    [RFC 9180](https://www.rfc-editor.org/rfc/rfc9180.html). This uses a
    custom implmentation instead of the `hpke` crate because this crate
    seals the trait to implement custom ciphers, and we want to use
    `ChaCha8` and not `ChaCha20`.
    
    The implementation is tested against the RFC test vectors for
    `ChaCha20`, and is made generic so that the same code can be used for
    `ChaCha8` in the backend.
    
    For ChaCha8Poly1305 AEAD ID, I used a custom `0xFFFE`, which is probably
    unused. I need to look if there is somewhere someone already using
    ChaCha8Poly1305 for HPKE and if there is a specified ID.
    sosthene-nitrokey authored and robin-nitrokey committed Oct 17, 2024
    Configuration menu
    Copy the full SHA
    e27ad91 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    7c99973 View commit details
    Browse the repository at this point in the history