aes.go

// Encryption - AES-GCM 端到端加密
// Copyright (c) 2021-present, b3log.org
//
// Encryption is licensed under Mulan PSL v2.
// You can use this software according to the terms and conditions of the Mulan PSL v2.
// You may obtain a copy of Mulan PSL v2 at:
//         http://license.coscl.org.cn/MulanPSL2
// THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT, MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
// See the Mulan PSL v2 for more details.

package encryption

import (
	"crypto/aes"
	"crypto/cipher"
)

func AesEncrypt(data, key []byte) (ret []byte, err error) {
	block, err := aes.NewCipher(key)
	if nil != err {
		return
	}

	aesgcm, err := cipher.NewGCM(block)
	if nil != err {
		return
	}

	nonce, err := getRandomData(12)
	if nil != err {
		return
	}

	data = aesgcm.Seal(nil, nonce, data, nil)
	ret = append(nonce, data...)
	return
}

func AesDecrypt(cryptData, key []byte) (ret []byte, err error) {
	block, err := aes.NewCipher(key)
	if nil != err {
		return
	}

	aesgcm, err := cipher.NewGCM(block)
	if nil != err {
		return
	}

	nonce := cryptData[:12]
	ret = cryptData[12:]
	ret, err = aesgcm.Open(nil, nonce, ret, nil)
	return
}