1 files changed, 37 insertions, 0 deletions
diff --git a/custodia/store/enclite.py b/custodia/store/enclite.py
new file mode 100644
index 0000000..3641b9d
--- /dev/null
+++ b/custodia/store/enclite.py
@@ -0,0 +1,37 @@
+# Copyright (C) 2015  Custodia Project Contributors - see LICENSE file
+
+from custodia.store.sqlite import SqliteStore
+from jwcrypto.common import json_decode, json_encode
+from jwcrypto import jwk, jwe
+
+
+class EncryptedStore(SqliteStore):
+
+    def __init__(self, config):
+
+        super(EncryptedStore, self).__init__(config)
+
+        if 'master_key' not in config:
+            raise ValueError('Missing "master_key" for Encrypted Store')
+
+        with open(config['master_key']) as f:
+            data = f.read()
+            key = json_decode(data)
+            self.mkey = jwk.JWK(**key)  # pylint: disable=star-args
+
+        if 'master_enctype' in config:
+            self.enc = config['master_enctype']
+        else:
+            self.enc = 'A256CBC_HS512'
+
+    def get(self, key):
+        value = super(EncryptedStore, self).get(key)
+        E = jwe.JWE()
+        E.deserialize(value, self.mkey)
+        return E.payload.decode('utf-8')
+
+    def set(self, key, value, replace=False):
+        E = jwe.JWE(value, json_encode({'alg': 'dir', 'enc': self.enc}))
+        E.add_recipient(self.mkey)
+        cvalue = E.serialize(compact=True)
+        return super(EncryptedStore, self).set(key, cvalue, replace)