69 lines
2.2 KiB
Go
69 lines
2.2 KiB
Go
// +build !ios
|
|
// +build !android
|
|
|
|
package helper
|
|
|
|
import (
|
|
"github.com/ProtonMail/gopenpgp/v2/crypto"
|
|
)
|
|
|
|
// EncryptSignAttachment encrypts an attachment using a detached signature, given a publicKey, a privateKey
|
|
// and its passphrase, the filename, and the unencrypted file data.
|
|
// Returns keypacket, dataPacket and unarmored (!) signature separate.
|
|
func EncryptSignAttachment(
|
|
publicKey, privateKey string, passphrase []byte, filename string, plainData []byte,
|
|
) (keyPacket, dataPacket, signature []byte, err error) {
|
|
var publicKeyObj, privateKeyObj, unlockedKeyObj *crypto.Key
|
|
var publicKeyRing, privateKeyRing *crypto.KeyRing
|
|
var packets *crypto.PGPSplitMessage
|
|
var signatureObj *crypto.PGPSignature
|
|
|
|
var binMessage = crypto.NewPlainMessageFromFile(plainData, filename, uint32(crypto.GetUnixTime()))
|
|
|
|
if publicKeyObj, err = crypto.NewKeyFromArmored(publicKey); err != nil {
|
|
return nil, nil, nil, err
|
|
}
|
|
if publicKeyObj.IsPrivate() {
|
|
publicKeyObj, err = publicKeyObj.ToPublic()
|
|
if err != nil {
|
|
return nil, nil, nil, err
|
|
}
|
|
}
|
|
|
|
if publicKeyRing, err = crypto.NewKeyRing(publicKeyObj); err != nil {
|
|
return nil, nil, nil, err
|
|
}
|
|
|
|
if privateKeyObj, err = crypto.NewKeyFromArmored(privateKey); err != nil {
|
|
return nil, nil, nil, err
|
|
}
|
|
|
|
if unlockedKeyObj, err = privateKeyObj.Unlock(passphrase); err != nil {
|
|
return nil, nil, nil, err
|
|
}
|
|
defer unlockedKeyObj.ClearPrivateParams()
|
|
|
|
if privateKeyRing, err = crypto.NewKeyRing(unlockedKeyObj); err != nil {
|
|
return nil, nil, nil, err
|
|
}
|
|
|
|
if packets, err = publicKeyRing.EncryptAttachment(binMessage, ""); err != nil {
|
|
return nil, nil, nil, err
|
|
}
|
|
|
|
if signatureObj, err = privateKeyRing.SignDetached(binMessage); err != nil {
|
|
return nil, nil, nil, err
|
|
}
|
|
|
|
return packets.GetBinaryKeyPacket(), packets.GetBinaryDataPacket(), signatureObj.GetBinary(), nil
|
|
}
|
|
|
|
// EncryptSignArmoredDetached takes a public key for encryption,
|
|
// a private key and its passphrase for signature, and the plaintext data
|
|
// Returns an armored ciphertext and a detached armored signature.
|
|
func EncryptSignArmoredDetached(
|
|
publicKey, privateKey string,
|
|
passphrase, plainData []byte,
|
|
) (ciphertext, encryptedSignature string, err error) {
|
|
return encryptSignArmoredDetached(publicKey, privateKey, passphrase, plainData)
|
|
}
|