<?php
declare(strict_types=1);
namespace ParagonIE\Halite\Symmetric;
use \ParagonIE\Halite\{
Alerts as CryptoException,
Config as BaseConfig
};
final class Config extends BaseConfig
{
/**
* Get the configuration
*
* @param string $header
* @param string $mode
* @return \ParagonIE\Halite\Config
* @throws CryptoException\InvalidMessage
*/
public static function getConfig(
string $header,
string $mode = 'encrypt'
) {
if (\ord($header[0]) !== 49 || \ord($header[1]) !== 66) {
throw new CryptoException\InvalidMessage(
'Invalid version tag'
);
}
$major = \ord($header[2]);
$minor = \ord($header[3]);
if ($mode === 'encrypt') {
return new Config(
self::getConfigEncrypt($major, $minor)
);
} elseif ($mode === 'auth') {
return new Config(
self::getConfigAuth($major, $minor)
);
}
throw new CryptoException\InvalidMessage(
'Invalid configuration mode: '.$mode
);
}
/**
* Get the configuration for encrypt operations
*
* @param int $major
* @param int $minor
* @return array
* @throws CryptoException\InvalidMessage
*/
public static function getConfigEncrypt(int $major, int $minor): array
{
if ($major === 1) {
switch ($minor) {
case 0:
return [
'NONCE_BYTES' => \Sodium\CRYPTO_STREAM_NONCEBYTES,
'HKDF_SALT_LEN' => 32,
'MAC_SIZE' => 32,
'HKDF_SBOX' => 'Halite|EncryptionKey',
'HKDF_AUTH' => 'AuthenticationKeyFor_|Halite'
];
}
} elseif ($major === 2) {
switch ($minor) {
case 0:
return [
'NONCE_BYTES' => \Sodium\CRYPTO_STREAM_NONCEBYTES,
'HKDF_SALT_LEN' => 32,
'MAC_SIZE' => 32,
'HKDF_SBOX' => 'Halite|EncryptionKey',
'HKDF_AUTH' => 'AuthenticationKeyFor_|Halite'
];
}
}
throw new CryptoException\InvalidMessage(
'Invalid version tag'
);
}
/**
* Get the configuration for seal operations
*
* @param int $major
* @param int $minor
* @return array
* @throws CryptoException\InvalidMessage
*/
public static function getConfigAuth(int $major, int $minor): array
{
if ($major === 1) {
switch ($minor) {
case 0:
return [
'HKDF_SALT_LEN' => 32,
'MAC_SIZE' => 32,
'PUBLICKEY_BYTES' => \Sodium\CRYPTO_BOX_PUBLICKEYBYTES,
'HKDF_SBOX' => 'Halite|EncryptionKey',
'HKDF_AUTH' => 'AuthenticationKeyFor_|Halite'
];
}
} elseif ($major === 2) {
switch ($minor) {
case 0:
return [
'HKDF_SALT_LEN' => 32,
'MAC_SIZE' => 32,
'PUBLICKEY_BYTES' => \Sodium\CRYPTO_BOX_PUBLICKEYBYTES,
'HKDF_SBOX' => 'Halite|EncryptionKey',
'HKDF_AUTH' => 'AuthenticationKeyFor_|Halite'
];
}
}
throw new CryptoException\InvalidMessage(
'Invalid version tag'
);
}
}
|
Download
