hpke 0.1.0 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c0ff20003913867f648466cb8136e73218c7dd917087c98f7d86ef8fd2049a11
-  data.tar.gz: 47901efa463ad51eebe04bface377e9dda4c24497a4b12039c64bc966b98c2d9
+  metadata.gz: b2428f5f16865e10e78a4e67bcf58081715899957789e841454b066f4a86d955
+  data.tar.gz: 15b28f1c5bfdddb03a054fa65d6a0ccecc2d00af55bfdf49416f3db1459e51bf
 SHA512:
-  metadata.gz: 1bbd503dd86c43bcb19fc188338cc9119b35a2bc5e6812a1404c19f8e198b7c71c0a18d3e1ff81d9ee3658575044995dba5ac092229b61298c7e79ed2e679faf
-  data.tar.gz: ac0ac0b079d9a8b8c3d7e60d6d90e0109d31150ae44f433b815d1a62fce9b3bb70dc707112c7a7155f94f3e7df171a11fa3ef97ba4fccbf509a7d911866b170b
+  metadata.gz: b443a11d1fa8913b29bfb2b8fb26dc30d37162acbb5528e5ccdd361f59992d34bc4660cd581cbca4c009804b65d76dfdf9fbb0de2ed5f9b993a141256a34cfde
+  data.tar.gz: 0c40bccf4ba67f67f227ee4dab8b2adcc26ca1d08ef411e775684e0add0bc20395a635af80857378ea6854b26b59f819b077204df127772c496339f7f451504f

data/README.md

@@ -1,5 +1,7 @@
 # hpke-rb
 
+[![Gem Version](https://badge.fury.io/rb/hpke.svg)](https://badge.fury.io/rb/hpke)
+
 Hybrid Public Key Encryption (HPKE; [RFC 9180](https://datatracker.ietf.org/doc/html/rfc9180)) in Ruby
 
 ## Note
@@ -103,7 +105,7 @@ context_r.open('authentication_associated_data', ciphertext)
 - Hash names (parameter 2 and 3)
     - `:sha256`, `:sha384`, `:sha512`
 - AEAD function names (parameter 4)
-    - `:aes_128_gcm`, `:aes_256_gcm`, `:chacha20_poly1305`, `:`
+    - `:aes_128_gcm`, `:aes_256_gcm`, `:chacha20_poly1305`, `:export_only`
 
 ## Development
 

data/hpke.gemspec

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+require_relative "lib/hpke/version"
+
+Gem::Specification.new do |spec|
+  spec.name = "hpke"
+  spec.version = HPKE::VERSION
+  spec.authors = ["Ryo Kajiwara"]
+  spec.email = ["sylph01@s01.ninja"]
+
+  spec.summary = "Hybrid Public Key Encryption (HPKE; RFC 9180) on Ruby"
+  spec.description = "Hybrid Public Key Encryption (HPKE; RFC 9180) on Ruby"
+  spec.homepage = "https://github.com/sylph01/hpke-rb"
+  spec.license = "MIT"
+  spec.required_ruby_version = ">= 3.1.0"
+
+  spec.metadata["homepage_uri"] = spec.homepage
+  spec.metadata["source_code_uri"] = "https://github.com/sylph01/hpke-rb"
+
+  # Specify which files should be added to the gem when it is released.
+  # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
+  spec.files = Dir.chdir(__dir__) do
+    `git ls-files -z`.split("\x0").reject do |f|
+      (File.expand_path(f) == __FILE__) || f.start_with?(*%w[bin/ test/ spec/ features/ .git .circleci appveyor])
+    end
+  end
+  spec.bindir = "exe"
+  spec.executables = spec.files.grep(%r{\Aexe/}) { |f| File.basename(f) }
+  spec.require_paths = ["lib"]
+
+  # Uncomment to register a new dependency of your gem
+  spec.add_dependency "openssl", "~> 3.3.0"
+
+  # For more information and examples about making a new gem, check out our
+  # guide at: https://bundler.io/guides/creating_gem.html
+end

data/lib/hpke/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 class HPKE
-  VERSION = "0.1.0"
+  VERSION = "0.3.0"
 end

data/lib/hpke.rb

@@ -168,6 +168,30 @@ class HPKE
     @hkdf.labeled_expand(exporter_secret, 'sec', exporter_context, len, suite_id)
   end
 
+  def aead_encrypt(key, nonce, aad, pt)
+    cipher = OpenSSL::Cipher.new(aead_name)
+    cipher.encrypt
+    cipher.key = key
+    cipher.iv = nonce
+    cipher.auth_data = aad
+    cipher.padding = 0
+    s = cipher.update(pt) << cipher.final
+    s + cipher.auth_tag
+  end
+
+  def aead_decrypt(key, nonce, aad, ct)
+    ct_body = ct[0, ct.length - n_t]
+    tag = ct[-n_t, n_t]
+    cipher = OpenSSL::Cipher.new(aead_name)
+    cipher.decrypt
+    cipher.key = key
+    cipher.iv = nonce
+    cipher.auth_tag = tag
+    cipher.auth_data = aad
+    cipher.padding = 0
+    cipher.update(ct_body) << cipher.final
+  end
+
   private
 
   def suite_id
@@ -254,47 +278,19 @@ class HPKE::ContextS < HPKE::Context
   def seal(aad, pt)
     raise Exception.new('AEAD is export only') if @hpke.aead_name == :export_only
 
-    ct = cipher_seal(@key, compute_nonce(@sequence_number), aad, pt)
+    ct = @hpke.aead_encrypt(@key, compute_nonce(@sequence_number), aad, pt)
     increment_seq
     ct
   end
-
-  private
-
-  def cipher_seal(key, nonce, aad, pt)
-    cipher = OpenSSL::Cipher.new(@hpke.aead_name)
-    cipher.encrypt
-    cipher.key = key
-    cipher.iv = nonce
-    cipher.auth_data = aad
-    cipher.padding = 0
-    s = cipher.update(pt) << cipher.final
-    s + cipher.auth_tag
-  end
 end
 
 class HPKE::ContextR < HPKE::Context
   def open(aad, ct)
     raise Exception.new('AEAD is export only') if @hpke.aead_name == :export_only
 
-    pt = cipher_open(@key, compute_nonce(@sequence_number), aad, ct)
+    pt = @hpke.aead_decrypt(@key, compute_nonce(@sequence_number), aad, ct)
     # TODO: catch openerror then send out own openerror
     increment_seq
     pt
   end
-
-  private
-
-  def cipher_open(key, nonce, aad, ct)
-    ct_body = ct[0, ct.length - @hpke.n_t]
-    tag = ct[-@hpke.n_t, @hpke.n_t]
-    cipher = OpenSSL::Cipher.new(@hpke.aead_name)
-    cipher.decrypt
-    cipher.key = key
-    cipher.iv = nonce
-    cipher.auth_tag = tag
-    cipher.auth_data = aad
-    cipher.padding = 0
-    cipher.update(ct_body) << cipher.final
-  end
-end
+end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: hpke
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.3.0
 platform: ruby
 authors:
 - Ryo Kajiwara
-autorequire:
 bindir: exe
 cert_chain: []
-date: 2023-07-15 00:00:00.000000000 Z
+date: 2025-04-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: openssl
@@ -16,14 +15,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.0.0
+        version: 3.3.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.0.0
+        version: 3.3.0
 description: Hybrid Public Key Encryption (HPKE; RFC 9180) on Ruby
 email:
 - sylph01@s01.ninja
@@ -37,6 +36,7 @@ files:
 - LICENSE.txt
 - README.md
 - Rakefile
+- hpke.gemspec
 - lib/hpke.rb
 - lib/hpke/dhkem.rb
 - lib/hpke/hkdf.rb
@@ -49,7 +49,6 @@ licenses:
 metadata:
   homepage_uri: https://github.com/sylph01/hpke-rb
   source_code_uri: https://github.com/sylph01/hpke-rb
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -64,8 +63,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
-signing_key:
+rubygems_version: 3.6.5
 specification_version: 4
 summary: Hybrid Public Key Encryption (HPKE; RFC 9180) on Ruby
 test_files: []