Make backwards compatible with nacl 1.0.x

[securemail.git] / cryptonize.py

diff --git a/cryptonize.py b/cryptonize.py
index 9cc463120804f83d6a7295b4565107d609748d3b..7a598d32cfd77cb672415d30d908d76b31b84814 100644 (file)
--- a/cryptonize.py
+++ b/cryptonize.py
@@ -17,9 +17,10 @@
 # You should have received a copy of the GNU General Public License
 # along with SecureMail.  If not, see <https://www.gnu.org/licenses/>.
 
 # You should have received a copy of the GNU General Public License
 # along with SecureMail.  If not, see <https://www.gnu.org/licenses/>.
 

+from nacl import __version__ as NACL_VERSION

 from nacl.secret import SecretBox
 from nacl.public import PrivateKey, Box
 from nacl.secret import SecretBox
 from nacl.public import PrivateKey, Box

-from nacl.utils import random
+from nacl.utils import random, EncryptedMessage

 from nacl.encoding import HexEncoder
 import nacl.hash
 
 from nacl.encoding import HexEncoder
 import nacl.hash
 


@@ -31,8 +32,12 @@ class Cryptonize:
     def symmetric_encrypt(self, key, plain):
         skey = self.sanitize_key(key)
         box = SecretBox(skey)
     def symmetric_encrypt(self, key, plain):
         skey = self.sanitize_key(key)
         box = SecretBox(skey)

-        cipher = box.encrypt(plain)
-        box = None
+        if NACL_VERSION < "1.1.0":
+            nonce = random(SecretBox.NONCE_SIZE)
+            cipher = box.encrypt(plain, nonce)
+        else:
+            cipher = box.encrypt(plain)
+        box = skey = None

         
         return cipher
         
         
         return cipher
         


@@ -40,18 +45,26 @@ class Cryptonize:
         skey = self.sanitize_key(key)
         box = SecretBox(skey)
         plain = box.decrypt(cipher)
         skey = self.sanitize_key(key)
         box = SecretBox(skey)
         plain = box.decrypt(cipher)

-        box = None
+        box = skey = None

         
         return plain
         
     def asymmetric_encrypt(self, privkey, pubkey, plain):
         
         return plain
         
     def asymmetric_encrypt(self, privkey, pubkey, plain):

+        if not isinstance(plain, bytes):
+            plain = plain.encode('utf-8')

         box = Box(privkey, pubkey)
         box = Box(privkey, pubkey)

-        cipher = box.encrypt(plain)
+        if NACL_VERSION < "1.1.0":
+            nonce = random(Box.NONCE_SIZE)
+            cipher = box.encrypt(plain, nonce)
+        else:
+            cipher = box.encrypt(plain)

         box = None
         
         return cipher
         
     def asymmetric_decrypt(self, privkey, pubkey, cipher):
         box = None
         
         return cipher
         
     def asymmetric_decrypt(self, privkey, pubkey, cipher):

+        if not isinstance(cipher, bytes):
+            cipher = cipher.encode('utf-8')

         box = Box(privkey, pubkey)
         plain = box.decrypt(cipher)
         box = None
         box = Box(privkey, pubkey)
         plain = box.decrypt(cipher)
         box = None


@@ -66,14 +79,10 @@ class Cryptonize:
             key = key.encode('utf-8')
         size = len(key)
         if size < SecretBox.KEY_SIZE:
             key = key.encode('utf-8')
         size = len(key)
         if size < SecretBox.KEY_SIZE:

-            """We must pad"""
-            pad = None
-            for i in range(SecretBox.KEY_SIZE - size):
-                if pad is None:
-                    pad = b'\0'
-                else:
-                    pad += b'\0'
-            newkey = key + pad
+            """ We must pad """
+            newkey = key + bytes(SecretBox.KEY_SIZE - size)
+        elif size > SecretBox.KEY_SIZE:
+            newkey = key[:SecretBox.KEY_SIZE]

         else:
             newkey = key
         
         else:
             newkey = key
         


@@ -94,4 +103,9 @@ class Cryptonize:
 
         return digest.decode()
 
 
         return digest.decode()
 

+    def create_EncryptedMessage(self, payload):
+        nonce = payload[:SecretBox.NONCE_SIZE]
+        ciphertext = payload[SecretBox.NONCE_SIZE:]

         
         

+        return EncryptedMessage._from_parts(
+            nonce, ciphertext,  nonce + ciphertext)