1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
# Copyright (C) 2015 Custodia Project Contributors - see LICENSE file
from custodia.store.sqlite import SqliteStore
from jwcrypto.common import json_decode, json_encode
from jwcrypto import jwk, jwe
class EncryptedStore(SqliteStore):
def __init__(self, config):
super(EncryptedStore, self).__init__(config)
if 'master_key' not in config:
raise ValueError('Missing "master_key" for Encrypted Store')
with open(config['master_key']) as f:
data = f.read()
key = json_decode(data)
self.mkey = jwk.JWK(**key)
if 'master_enctype' in config:
self.enc = config['master_enctype']
else:
self.enc = 'A256CBC_HS512'
def get(self, key):
value = super(EncryptedStore, self).get(key)
E = jwe.JWE()
E.deserialize(value, self.mkey)
return E.payload.decode('utf-8')
def set(self, key, value, replace=False):
E = jwe.JWE(value, json_encode({'alg': 'dir', 'enc': self.enc}))
E.add_recipient(self.mkey)
cvalue = E.serialize(compact=True)
return super(EncryptedStore, self).set(key, cvalue, replace)
|
