Rooba
/
perkeep
mirror of https://github.com/perkeep/perkeep.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity

encrypt: actually write encrypted blob to backend 

Change-Id: I889088481af141e07a97cd1e4b89c459c5eaaedf
This commit is contained in:
Brad Fitzpatrick 2013-06-15 16:06:11 -07:00
parent 9f63df26a4
commit 4bf389bb81
1 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
pkg/blobserver/encrypt/encrypt.go
View File

@ -98,26 +98,35 @@ func (s *storage) StatBlobs(dest chan<- blobref.SizedBlobRef, blobs []*blobref.B
panic("TODO: implement")
}
func (s *storage) ReceiveBlob(b *blobref.BlobRef, source io.Reader) (sb blobref.SizedBlobRef, err error) {
func (s *storage) ReceiveBlob(plainBR *blobref.BlobRef, source io.Reader) (sb blobref.SizedBlobRef, err error) {
iv := s.randIV()
stream := cipher.NewCTR(s.block, iv)
hash := plainBR.Hash()
var buf bytes.Buffer
buf.Write(iv) // TODO: write more structured header w/ version & IV length? or does that weaken it?
sw := cipher.StreamWriter{S: stream, W: &buf}
n, err := io.Copy(sw, source)
n, err := io.Copy(io.MultiWriter(sw, hash), source)
if err != nil {
return sb, err
}
if err := sw.Close(); err != nil {
return sb, err
}
if !plainBR.HashMatches(hash) {
return sb, blobserver.ErrCorruptBlob
}
encBR := blobref.SHA1FromBytes(buf.Bytes())
_, err = s.blobs.ReceiveBlob(encBR, bytes.NewReader(buf.Bytes()))
if err != nil {
return sb, fmt.Errorf("encrypt: error writing encrypted %v (plaintext %v): %v", encBR, plainBR, err)
}
// TODO: upload buf.Bytes() to s.blobs
// TODO: upload meta blob with two blobrefs & IV to s.meta
// TODO: update index with mapping
return blobref.SizedBlobRef{b, n}, nil
return blobref.SizedBlobRef{plainBR, n}, nil
}
func (s *storage) FetchStreaming(b *blobref.BlobRef) (file io.ReadCloser, size int64, err error) {