LeoVasanko
e01d84a560
Implement Python bindings for the libaegis 0.10.6 RAF API: - Thin per-variant wrappers (raf_create/open/read/write/truncate/size/ sync/close, merkle_rebuild/verify/commitment) generated from a template in tools/generate.py, with errno-mapped exceptions. - aeg.raf: high-level file-like API (Raf, create/open/probe, derive_master_key) with pluggable Storage backends (FileStorage, BytesIOStorage) and Merkle tree integrity via a MerkleHasher protocol (SHA256MerkleHasher default), adapted from pyaegis (MIT). - aeg.random: CSPRNG facility. Random produces AEGIS keystream seeded once from the OS, exposed per cipher module as cipher.random() and usable as the RAF RNG (as_raf_rng) or standalone RandomSource. - Tests: roundtrip/random-access/seek/truncate/Merkle coverage for all six variants, pyaegis-style API checks, and a Merkle fuzz test.
162 lines
4.3 KiB
Python
162 lines
4.3 KiB
Python
from typing import TYPE_CHECKING, Protocol
|
|
|
|
if TYPE_CHECKING:
|
|
from .random import Random
|
|
from .util import Buffer
|
|
|
|
__all__ = ["Cipher"]
|
|
|
|
|
|
class _Mac(Protocol):
|
|
def reset(self) -> None: ...
|
|
def clone(self) -> "_Mac": ...
|
|
def update(self, data: "Buffer") -> None: ...
|
|
def final(self, into: "Buffer | None" = None) -> bytearray | memoryview: ...
|
|
def digest(self) -> bytes: ...
|
|
def hexdigest(self) -> str: ...
|
|
def verify(self, mac: "Buffer") -> None: ...
|
|
|
|
|
|
class _Encryptor(Protocol):
|
|
def update(
|
|
self, message: "Buffer", into: "Buffer | None" = None
|
|
) -> bytearray | memoryview: ...
|
|
def final(self, into: "Buffer | None" = None) -> bytearray | memoryview: ...
|
|
|
|
|
|
class _Decryptor(Protocol):
|
|
def update(
|
|
self, ct: "Buffer", into: "Buffer | None" = None
|
|
) -> bytearray | memoryview: ...
|
|
def final(self, mac: "Buffer") -> None: ...
|
|
|
|
|
|
class Cipher(Protocol):
|
|
NAME: str
|
|
KEYBYTES: int
|
|
NONCEBYTES: int
|
|
MACBYTES: int
|
|
MACBYTES_LONG: int
|
|
ALIGNMENT: int
|
|
RATE: int
|
|
|
|
Mac: type[_Mac]
|
|
Encryptor: type[_Encryptor]
|
|
Decryptor: type[_Decryptor]
|
|
|
|
@staticmethod
|
|
def random() -> "Random": ...
|
|
@staticmethod
|
|
def random_key() -> bytearray: ...
|
|
@staticmethod
|
|
def random_nonce() -> bytearray: ...
|
|
@staticmethod
|
|
def encrypt_detached(
|
|
key: "Buffer",
|
|
nonce: "Buffer",
|
|
message: "Buffer",
|
|
ad: "Buffer | None" = None,
|
|
*,
|
|
maclen: int = ...,
|
|
ct_into: "Buffer | None" = None,
|
|
mac_into: "Buffer | None" = None,
|
|
) -> tuple[bytearray | memoryview, bytearray | memoryview]: ...
|
|
@staticmethod
|
|
def decrypt_detached(
|
|
key: "Buffer",
|
|
nonce: "Buffer",
|
|
ct: "Buffer",
|
|
mac: "Buffer",
|
|
ad: "Buffer | None" = None,
|
|
*,
|
|
into: "Buffer | None" = None,
|
|
) -> bytearray | memoryview: ...
|
|
@staticmethod
|
|
def encrypt(
|
|
key: "Buffer",
|
|
nonce: "Buffer",
|
|
message: "Buffer",
|
|
ad: "Buffer | None" = None,
|
|
*,
|
|
maclen: int = ...,
|
|
into: "Buffer | None" = None,
|
|
) -> bytearray | memoryview: ...
|
|
@staticmethod
|
|
def decrypt(
|
|
key: "Buffer",
|
|
nonce: "Buffer",
|
|
ct: "Buffer",
|
|
ad: "Buffer | None" = None,
|
|
*,
|
|
maclen: int = ...,
|
|
into: "Buffer | None" = None,
|
|
) -> bytearray | memoryview: ...
|
|
@staticmethod
|
|
def stream(
|
|
key: "Buffer",
|
|
nonce: "Buffer | None",
|
|
length: int | None = None,
|
|
*,
|
|
into: "Buffer | None" = None,
|
|
) -> "bytearray | Buffer": ...
|
|
@staticmethod
|
|
def encrypt_unauthenticated(
|
|
key: "Buffer",
|
|
nonce: "Buffer",
|
|
message: "Buffer",
|
|
*,
|
|
into: "Buffer | None" = None,
|
|
) -> bytearray | memoryview: ...
|
|
@staticmethod
|
|
def decrypt_unauthenticated(
|
|
key: "Buffer",
|
|
nonce: "Buffer",
|
|
ct: "Buffer",
|
|
*,
|
|
into: "Buffer | None" = None,
|
|
) -> bytearray | memoryview: ...
|
|
@staticmethod
|
|
def mac(
|
|
key: "Buffer",
|
|
nonce: "Buffer",
|
|
data: "Buffer",
|
|
maclen: int = ...,
|
|
into: "Buffer | None" = None,
|
|
) -> bytearray | memoryview: ...
|
|
@staticmethod
|
|
def nonce_increment(nonce: "Buffer") -> None: ...
|
|
@staticmethod
|
|
def wipe(buffer: "Buffer") -> None: ...
|
|
|
|
# random-access encrypted files (thin wrappers; see aeg.raf)
|
|
RAF_ALG_ID: int
|
|
|
|
@staticmethod
|
|
def new_raf_ctx(): ...
|
|
@staticmethod
|
|
def raf_scratch_size(chunk_size: int) -> int: ...
|
|
@staticmethod
|
|
def raf_create(key: "Buffer", ctx, io, rng, config) -> None: ...
|
|
@staticmethod
|
|
def raf_open(key: "Buffer", ctx, io, rng, config) -> None: ...
|
|
@staticmethod
|
|
def raf_read(
|
|
ctx, length: int, offset: int, *, into: "Buffer | None" = None
|
|
) -> bytearray | memoryview: ...
|
|
@staticmethod
|
|
def raf_write(ctx, data: "Buffer", offset: int) -> int: ...
|
|
@staticmethod
|
|
def raf_truncate(ctx, size: int) -> None: ...
|
|
@staticmethod
|
|
def raf_size(ctx) -> int: ...
|
|
@staticmethod
|
|
def raf_sync(ctx) -> None: ...
|
|
@staticmethod
|
|
def raf_close(ctx) -> None: ...
|
|
@staticmethod
|
|
def raf_merkle_rebuild(ctx) -> None: ...
|
|
@staticmethod
|
|
def raf_merkle_verify(ctx) -> "int | None": ...
|
|
@staticmethod
|
|
def raf_merkle_commitment(ctx, hash_len: int) -> bytes: ...
|