hpke 0.2.0 → 0.3.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8cdd5f9381b5094a13de8e4058810ed27af3eb4eb483f75f6da7d629451829d0
-  data.tar.gz: 8a94c5f97f3e952bbb585382a7db296fa6a3cffcbfc7dd882b28963aafb88609
+  metadata.gz: 9172f40ce30fde1a8dc74e45379371d3dcb85ffc28502fe3ff3c3e845b169a94
+  data.tar.gz: 1caa20117210b78f224146272cad6b63c1a6abdbcf1315752063d44f20f7cdd8
 SHA512:
-  metadata.gz: 48f819ac22c7523699642b914cebd3974a1ec8c627778d7b3110dda43696e78b9210a8ae54d2b83775abf184a75aa4ce11d66c6ba0e4b21c108e74f2549bb2f6
-  data.tar.gz: c81a333843dc89149139e80f198ad915078ccc1ea41de1f8eddfccabee4e5a50ec739cd6e21a14de38e4f3dbc1ca7fc4788b3954d505c69faa6945270302c220
+  metadata.gz: a4bfef8659dbed463b0c4f6eead0881f20fd74bc05519ab73b1f8e4661a0bd054eb4a1224bbf1b1a91c4b2572b60d131e0861a14722cf39b20e259b57982ca62
+  data.tar.gz: '00398459076f9dbccbf85f530ae071835456c11b6de178f0fe7347f5ca9584cdc6cde4aadee28d9dbfb28b99d745d3dc9d5b2253485cd3237c17ec3831002aa9'

data/hpke.gemspec

@@ -29,7 +29,7 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
 
   # Uncomment to register a new dependency of your gem
-  spec.add_dependency "openssl", "~> 3.3.0"
+  spec.add_dependency "openssl", "~> 3.3.0", ">= 3.0"
 
   # For more information and examples about making a new gem, check out our
   # guide at: https://bundler.io/guides/creating_gem.html

data/lib/hpke/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 class HPKE
-  VERSION = "0.2.0"
+  VERSION = "0.3.1"
 end

data/lib/hpke.rb

@@ -168,6 +168,30 @@ class HPKE
     @hkdf.labeled_expand(exporter_secret, 'sec', exporter_context, len, suite_id)
   end
 
+  def aead_encrypt(key, nonce, aad, pt)
+    cipher = OpenSSL::Cipher.new(aead_name)
+    cipher.encrypt
+    cipher.key = key
+    cipher.iv = nonce
+    cipher.auth_data = aad
+    cipher.padding = 0
+    s = cipher.update(pt) << cipher.final
+    s + cipher.auth_tag
+  end
+
+  def aead_decrypt(key, nonce, aad, ct)
+    ct_body = ct[0, ct.length - n_t]
+    tag = ct[-n_t, n_t]
+    cipher = OpenSSL::Cipher.new(aead_name)
+    cipher.decrypt
+    cipher.key = key
+    cipher.iv = nonce
+    cipher.auth_tag = tag
+    cipher.auth_data = aad
+    cipher.padding = 0
+    cipher.update(ct_body) << cipher.final
+  end
+
   private
 
   def suite_id
@@ -254,47 +278,19 @@ class HPKE::ContextS < HPKE::Context
   def seal(aad, pt)
     raise Exception.new('AEAD is export only') if @hpke.aead_name == :export_only
 
-    ct = cipher_seal(@key, compute_nonce(@sequence_number), aad, pt)
+    ct = @hpke.aead_encrypt(@key, compute_nonce(@sequence_number), aad, pt)
     increment_seq
     ct
   end
-
-  private
-
-  def cipher_seal(key, nonce, aad, pt)
-    cipher = OpenSSL::Cipher.new(@hpke.aead_name)
-    cipher.encrypt
-    cipher.key = key
-    cipher.iv = nonce
-    cipher.auth_data = aad
-    cipher.padding = 0
-    s = cipher.update(pt) << cipher.final
-    s + cipher.auth_tag
-  end
 end
 
 class HPKE::ContextR < HPKE::Context
   def open(aad, ct)
     raise Exception.new('AEAD is export only') if @hpke.aead_name == :export_only
 
-    pt = cipher_open(@key, compute_nonce(@sequence_number), aad, ct)
+    pt = @hpke.aead_decrypt(@key, compute_nonce(@sequence_number), aad, ct)
     # TODO: catch openerror then send out own openerror
     increment_seq
     pt
   end
-
-  private
-
-  def cipher_open(key, nonce, aad, ct)
-    ct_body = ct[0, ct.length - @hpke.n_t]
-    tag = ct[-@hpke.n_t, @hpke.n_t]
-    cipher = OpenSSL::Cipher.new(@hpke.aead_name)
-    cipher.decrypt
-    cipher.key = key
-    cipher.iv = nonce
-    cipher.auth_tag = tag
-    cipher.auth_data = aad
-    cipher.padding = 0
-    cipher.update(ct_body) << cipher.final
-  end
-end
+end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: hpke
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.3.1
 platform: ruby
 authors:
 - Ryo Kajiwara
 bindir: exe
 cert_chain: []
-date: 2025-04-01 00:00:00.000000000 Z
+date: 2025-04-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: openssl
@@ -16,6 +16,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 3.3.0
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -23,6 +26,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 3.3.0
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '3.0'
 description: Hybrid Public Key Encryption (HPKE; RFC 9180) on Ruby
 email:
 - sylph01@s01.ninja