77 lines
2.6 KiB
Swift
77 lines
2.6 KiB
Swift
//
|
|
// GopenPgp.swift
|
|
// passKit
|
|
//
|
|
// Created by Danny Moesch on 08.09.19.
|
|
// Copyright © 2019 Bob Sun. All rights reserved.
|
|
//
|
|
|
|
import Crypto
|
|
|
|
struct GopenPgp: PgpInterface {
|
|
|
|
private static let errorMapping: [String: Error] = [
|
|
"openpgp: invalid data: private key checksum failure": AppError.WrongPassphrase,
|
|
"openpgp: incorrect key": AppError.KeyExpiredOrIncompatible,
|
|
]
|
|
|
|
private let publicKey: CryptoKeyRing
|
|
private let privateKey: CryptoKeyRing
|
|
|
|
init(publicArmoredKey: String, privateArmoredKey: String) throws {
|
|
var error: NSError?
|
|
guard let publicKey = CryptoBuildKeyRingArmored(publicArmoredKey, &error),
|
|
let privateKey = CryptoBuildKeyRingArmored(privateArmoredKey, &error) else {
|
|
throw AppError.KeyImport
|
|
}
|
|
guard error == nil else {
|
|
throw error!
|
|
}
|
|
self.publicKey = publicKey
|
|
self.privateKey = privateKey
|
|
}
|
|
|
|
func decrypt(encryptedData: Data, passphrase: String) throws -> Data? {
|
|
do {
|
|
try privateKey.unlock(withPassphrase: passphrase)
|
|
} catch {
|
|
throw Self.errorMapping[error.localizedDescription, default: error]
|
|
}
|
|
let message = createPgpMessage(from: encryptedData)
|
|
do {
|
|
return try privateKey.decrypt(message, verifyKey: nil, verifyTime: 0).data
|
|
} catch {
|
|
throw Self.errorMapping[error.localizedDescription, default: error]
|
|
}
|
|
}
|
|
|
|
func encrypt(plainData: Data) throws -> Data {
|
|
let encryptedData = try publicKey.encrypt(CryptoNewPlainMessage(plainData.mutable as Data), privateKey: nil)
|
|
if SharedDefaults[.encryptInArmored] {
|
|
var error: NSError?
|
|
let armor = encryptedData.getArmored(&error)
|
|
guard error == nil else {
|
|
throw error!
|
|
}
|
|
return armor.data(using: .ascii)!
|
|
}
|
|
return encryptedData.getBinary()!
|
|
}
|
|
|
|
var keyId: String {
|
|
var error: NSError?
|
|
let fingerprint = publicKey.getFingerprint(&error)
|
|
return error == nil ? String(fingerprint.suffix(8)).uppercased() : ""
|
|
}
|
|
|
|
private func createPgpMessage(from encryptedData: Data) -> CryptoPGPMessage? {
|
|
// Important note:
|
|
// Even if SharedDefaults[.encryptInArmored] is true now, it could be different during the encryption.
|
|
var error: NSError?
|
|
let message = CryptoNewPGPMessageFromArmored(String(data: encryptedData, encoding: .ascii), &error)
|
|
if error == nil {
|
|
return message
|
|
}
|
|
return CryptoNewPGPMessage(encryptedData.mutable as Data)
|
|
}
|
|
}
|