pub struct Source { /* private fields */ }Expand description
A source and their long-term key material (step 4).
A source’s keys are fully determined by their passphrase: the fetch key,
APKE key, and PKE key are all derived from a master key via Argon2id and
a domain-separated KDF. Returning sources reconstruct the same keys by
calling Source::from_passphrase with the same passphrase.
Implementations§
Source§impl Source
impl Source
Sourcepub fn new<R: RngCore + CryptoRng>(rng: R) -> Self
pub fn new<R: RngCore + CryptoRng>(rng: R) -> Self
Create a new source with a randomly generated passphrase.
TODO / For testing only - in production the passphrase must be a mnemonic of sufficient entropy generated and displayed to the source.
Sourcepub fn passphrase(&self) -> &[u8] ⓘ
pub fn passphrase(&self) -> &[u8] ⓘ
Returns the source’s passphrase.
§Security
The passphrase is the root secret from which all source keys are derived. It MUST be stored and transmitted only over secure channels.
Sourcepub fn from_passphrase(passphrase: &[u8]) -> Self
pub fn from_passphrase(passphrase: &[u8]) -> Self
Reconstruct source keys from a passphrase (step 4).
Derives a master key via Source::derive_master_key, then derives
each private key from the master key using a domain-separated KDF.
Sourcepub fn public(&self) -> SourcePublicView
pub fn public(&self) -> SourcePublicView
Returns the public key material for this source.
Trait Implementations§
Source§impl Client for Source
impl Client for Source
Source§fn newsroom_verifying_key(&self) -> Option<&VerifyingKey>
fn newsroom_verifying_key(&self) -> Option<&VerifyingKey>
Source§fn set_newsroom_verifying_key(&mut self, key: VerifyingKey)
fn set_newsroom_verifying_key(&mut self, key: VerifyingKey)
Source§impl UserSecret for Source
Private, common to all users, implemented for sources
impl UserSecret for Source
Private, common to all users, implemented for sources
fn num_bundles(&self) -> usize
fn fetch_keypair(&self) -> (&DHPrivateKey, &DHPublicKey)
Source§fn message_auth_key(&self) -> &MessagePrivateKey
fn message_auth_key(&self) -> &MessagePrivateKey
sk^APKE.Source§fn message_auth_pk(&self) -> &MessagePublicKey
fn message_auth_pk(&self) -> &MessagePublicKey
pk^APKE.fn build_message(&self, message: Vec<u8>) -> Plaintext
fn keybundles(&self) -> Vec<&MessageKeyBundle>
Auto Trait Implementations§
impl Freeze for Source
impl RefUnwindSafe for Source
impl Send for Source
impl Sync for Source
impl Unpin for Source
impl UnsafeUnpin for Source
impl UnwindSafe for Source
Blanket Implementations§
Source§impl<T> Api for Twhere
T: Client,
impl<T> Api for Twhere
T: Client,
Source§fn fetch_newsroom_keys(&self) -> SourceNewsroomKeyRequest
fn fetch_newsroom_keys(&self) -> SourceNewsroomKeyRequest
Creates a request to fetch the newsroom’s public keys from the server.
This is the first part of step 5 in the protocol spec.
Source§fn fetch_journalist_keys(&self) -> SourceJournalistKeyRequest
fn fetch_journalist_keys(&self) -> SourceJournalistKeyRequest
Creates a request to fetch journalist public keys from the server.
This is the second part of step 5 in the protocol spec. The server responds with long-term keys and a one-time ephemeral key bundle for each available journalist.
Source§fn fetch_message_ids<R>(&self, _rng: &mut R) -> MessageChallengeFetchRequest
fn fetch_message_ids<R>(&self, _rng: &mut R) -> MessageChallengeFetchRequest
Creates a request to fetch encrypted message IDs from the server.
Corresponds to step 7 in the protocol spec. The server returns a
fixed-size set of challenges (encrypted message IDs) that the client
must solve using solve_fetch_challenges.
Source§fn solve_fetch_challenges(
&self,
challenges: &[FetchResponse],
) -> Result<Vec<Uuid>, Error>where
T: UserSecret,
fn solve_fetch_challenges(
&self,
challenges: &[FetchResponse],
) -> Result<Vec<Uuid>, Error>where
T: UserSecret,
Solves the encrypted message-ID challenges returned by the server.
Each FetchResponse contains an encrypted message ID and a
per-request DH share. The client uses its fetch keypair to recover
message IDs that were addressed to it, discarding the rest.
Returns the set of Uuids for messages belonging to this client.
Source§fn fetch_message(&self, message_id: Uuid) -> Option<MessageFetchRequest>
fn fetch_message(&self, message_id: Uuid) -> Option<MessageFetchRequest>
Creates a request to fetch a specific message by its ID.
Corresponds to steps 8 and 10 in the protocol spec. Returns None
if the request cannot be constructed (the default implementation
always returns Some).
Source§fn submit_message<R, S, P>(
&self,
rng: &mut R,
message: &[u8],
sender: &S,
recipient: &P,
) -> Result<Envelope, Error>
fn submit_message<R, S, P>( &self, rng: &mut R, message: &[u8], sender: &S, recipient: &P, ) -> Result<Envelope, Error>
Encrypts and submits a message from sender to recipient.
Handles padding, plaintext construction (including sender reply keys), and hybrid encryption. This covers step 6 (source submissions) and step 9 (journalist replies) in the protocol spec.
§Errors
Returns an error if encryption fails.
Source§fn handle_newsroom_key_response(
&mut self,
response: &SourceNewsroomKeyResponse,
fpf_verifying_key: &VerifyingKey,
) -> Result<(), Error>
fn handle_newsroom_key_response( &mut self, response: &SourceNewsroomKeyResponse, fpf_verifying_key: &VerifyingKey, ) -> Result<(), Error>
Verifies and stores the newsroom’s verifying key from a server response.
Checks the FPF signature over the newsroom verifying key, and if valid, stores it for subsequent journalist key verification.
§Errors
Returns an error if the FPF signature is invalid.
Source§fn handle_journalist_key_response(
&self,
response: &SourceJournalistKeyResponse,
newsroom_verifying_key: &VerifyingKey,
) -> Result<(), Error>
fn handle_journalist_key_response( &self, response: &SourceJournalistKeyResponse, newsroom_verifying_key: &VerifyingKey, ) -> Result<(), Error>
Verifies a journalist’s key response against the newsroom’s signature.
Performs three signature checks:
- The newsroom’s signature over the journalist’s verifying key.
- The journalist’s self-signature over their long-term key bundle.
- The journalist’s self-signature over their one-time keys.
§Errors
Returns an error if any signature check fails.