luciano/nippy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix :auto encryption unit tests

Browse source
This commit is contained in:
Peter Taoussanis 2015-12-01 15:20:29 +07:00
parent 5849320d3a
commit 643d762bbe
1 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
src/taoensso/nippy/encryption.clj
View file

@ -76,13 +76,14 @@
(defrecord AES128Encryptor [key-gen key-cache]
IEncryptor
(header-id [_] (if (= key-gen sha512-key) :aes128-sha512 :aes128-other))
(header-id [_] (if (identical? key-gen :sha512) :aes128-sha512 :aes128-other))
(encrypt [_ typed-pwd data-ba]
(let [[type pwd] (destructure-typed-pwd typed-pwd)
salt? (identical? type :salted)
iv-ba (rand-bytes aes128-block-size)
salt-ba (when salt? (rand-bytes salt-size))
prefix-ba (if-not salt? iv-ba (enc/ba-concat iv-ba salt-ba))
key-gen (if (identical? key-gen :sha512) sha512-key key-gen)
key (if salt?
(key-gen salt-ba pwd)
(enc/memoized key-cache key-gen salt-ba pwd))
@ -99,6 +100,7 @@
[prefix-ba data-ba] (enc/ba-split ba prefix-size)
[iv-ba salt-ba] (if-not salt? [prefix-ba nil]
(enc/ba-split prefix-ba aes128-block-size))
key-gen (if (identical? key-gen :sha512) sha512-key key-gen)
key (if salt?
(key-gen salt-ba pwd)
(enc/memoized key-cache key-gen salt-ba pwd))
@ -143,7 +145,7 @@
Faster than `aes128-salted`, and harder to attack any particular key - but
increased danger if a key is somehow compromised."
(->AES128Encryptor sha512-key (atom {})))
(->AES128Encryptor :sha512 (atom {})))
;;;; Default implementation