start work on envelope encryption for long-term seed

4 files changed, 34 insertions, 1 deletions

diff --git a/src/bin/kms.rs b/src/bin/kms.rs
index 311fbb5..724c4ad 100644
--- a/src/bin/kms.rs
+++ b/src/bin/kms.rs
@@ -50,7 +50,7 @@ pub fn main() {
     if cfg!(feature = "kms") {
         info!("KMS feature enabled");
         let client = AwsKms::from_uri(
-           // your key here
+            "arn:aws:kms:us-east-2:927891522318:key/1c96fb2c-d417-48f4-bf24-8e7173a587f5"
         ).unwrap();
 
         let ciphertext = client.encrypt("This is a test".as_ref()).unwrap();
diff --git a/src/key/envelope.rs b/src/key/envelope.rs
new file mode 100644
index 0000000..3e54255
--- /dev/null
+++ b/src/key/envelope.rs
@@ -0,0 +1,31 @@
+// Copyright 2017-2018 int08h LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+extern crate hex;
+
+use ring::rand;
+use ring::rand::SecureRandom;
+use ring::aead::AES_256_GCM;
+use key::awskms::AwsKms;
+
+pub struct EnvelopeEncryption;
+
+impl EnvelopeEncryption {
+    pub fn encrypt(kms: &AwsKms, plaintext: &[u8]) -> Vec<u8> {
+        let rng = rand::SystemRandom::new();
+        let mut dek = [0u8; 16];
+        rng.fill(&mut dek).unwrap();
+        
+    }
+}
diff --git a/src/key/mod.rs b/src/key/mod.rs
index a4af975..da18303 100644
--- a/src/key/mod.rs
+++ b/src/key/mod.rs
@@ -21,6 +21,7 @@ extern crate log;
 
 mod longterm;
 mod online;
+mod envelope;
 
 pub use self::longterm::LongTermKey;
 pub use self::online::OnlineKey;
diff --git a/src/lib.rs b/src/lib.rs
index 8a8a049..e2d8cbf 100644
--- a/src/lib.rs
+++ b/src/lib.rs
@@ -55,6 +55,7 @@ extern crate yaml_rust;
 
 #[macro_use]
 extern crate log;
+extern crate ring;
 
 mod error;
 mod message;