mithril-security / rsa-sgx

Port RSA to Teaclave Rust SGX SDK and Xargo (add custom feature sgx_std for std error without pkcs1 fs access)

RSA

A portable RSA implementation in pure Rust.

⚠️ WARNING: This crate has been audited by a 3rd party, but a full blog post with the results and the updates made since the audit has not been officially released yet. See #60 for more information.

Example

use rsa::{PublicKey, RSAPrivateKey, PaddingScheme};
use rand::rngs::OsRng;

let mut rng = OsRng;
let bits = 2048;
let priv_key = RSAPrivateKey::new(&mut rng, bits).expect("failed to generate a key");
let pub_key = RSAPublicKey::from(&priv_key);

// Encrypt
let data = b"hello world";
let enc_data = pub_key.encrypt(&mut rng, PaddingScheme::new_pkcs1v15(), &data[..]).expect("failed to encrypt");
assert_ne!(&data[..], &enc_data[..]);

// Decrypt
let dec_data = priv_key.decrypt(PaddingScheme::new_pkcs1v15(), &enc_data).expect("failed to decrypt");
assert_eq!(&data[..], &dec_data[..]);

Status

Currently at Phase 1 (v) 🚧.

There will be three phases before 1.0 🚢 can be released.

1. 🚧 Make it work
   • Prime generation ✅
   • Key generation ✅
   • PKCS1v1.5: Encryption & Decryption ✅
   • PKCS1v1.5: Sign & Verify ✅
   • PKCS1v1.5 (session key): Encryption & Decryption
   • OAEP: Encryption & Decryption
   • PSS: Sign & Verify
   • Key import & export
2. 🚀 Make it fast
   • Benchmarks ✅
   • compare to other implementations 🚧
   • optimize 🚧
3. 🔒 Make it secure
   • Fuzz testing
   • Security Audits

Minimum Supported Rust Version (MSRV)

All crates in this repository support Rust 1.44 or higher. In future minimally supported version of Rust can be changed, but it will be done with a minor version bump.

License

Licensed under either of

• Apache License, Version 2.0
• MIT license

at your option.

Contribution

Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in the work by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.