Enc/decr metadata folder openSSL - Java about end_to_end_encryption

[rullzer]

Not yet. On the todo for next week

[rullzer]

@marinofaggiana

https://github.com/rullzer/e2e_c/blob/master/encrypt_meta_data.c
https://github.com/rullzer/e2e_c/blob/master/decrypt_meta_data.c

[rullzer]

@marinofaggiana do you have a metadata file and a private key for me so we check the same stuff?

[marinofaggiana]

yes

[marinofaggiana]

-----BEGIN PRIVATE KEY-----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\nG+U476dyGaKG+KfBHfUMOs+u6A==\n-----END PRIVATE KEY-----\n

Metadata : kyFWXpuA1qlb3fHLbZQSwmv3718oIe8qwE7spkqMVmYggWp5dzOcgDQbkicfnR/BzNQm28MtRKnQSk6UzNl8k5Ii/bxbu2Ki8zYMy5YUrF/WKxpV16icsqYafV56OAymtzWuwHhouO63oAGQF2B2uqGRPP1JbnhmKj8TA+72stmwgF01IpOUtKreieV2C9n815J9Nw==fA==r4bjBdLJvToP1cH+Bqivqw==

[tobiasKaminsky]

Metadata is not entirely encrypted (https://github.com/nextcloud/end_to_end_encryption_rfc/blob/master/RFC.md#create-metadata-file)

{
"files":{
"383e30f88b61406199d24df88d4b09a0":{
"authenticationTag":"9nLqyjFLpg4/Ol36umB0gQ\u003d\u003d","encrypted":"kyFWXpuA1qlb3fHLbZQSwmv3718oIe8qwE7spkqMVmYggWp5dzOcgDQbkicfnR/BzNQm28MtRKnQSk6UzNl8k5Ii/bxbu2Ki8zYMy5YUrF/WKxpV16icsqYafV56OAymtzWuwHhouO63oAGQF2B2uqGRPP1JbnhmKj8TA+72stmwgF01IpOUtKreieV2C9n815J9Nw\u003d\u003dfA\u003d\u003dr4bjBdLJvToP1cH+Bqivqw\u003d\u003d","initializationVector":"SZg75lqlvxpvULIc2mgJmg\u003d\u003d","metadataKey":0}
}
,"metadata":{
"metadataKeys":{
"0":"OYBZyAV3a6D6bLJNIBigHOLnRNbUq/kdC3ThCbLUVdgtN2lO6n7dOLnyrlegxRW76sA77722Pf8Ibke1t8xph3Ul/emoSWU7mJA3tgofQ4qkArf9TuV2RyHAz7k3RrZWyFJWenedgek71L/8POO2uv4flxbHhKwDa/mzPL9pksRDm+5HkaeT35KKyEpS0LnBcJe9G9AtFZOgZkYFS8pcbYWjCK5ygbH6UYBrzu5MqL1Zsqo2lJKPr1GMpsCIfcZXuKjUjss3bheyQxrG3vHR+smOjPlW5ZQkTkU2vJnN8ddFN8LoKmE2o/zHqZjMiKvgZTvf8RmgjA8r1XItW2c5MQ\u003d\u003d"}
,"version":0}
}

[marinofaggiana]

@rullzer ?

[marinofaggiana]

@rullzer I have aI issue (err -1) with my example (look up)

[rullzer]

Here they work.

However, -1 is weird as that basically states that you can't create the cipher context. That is very weird.

[marinofaggiana]

With this : ?

-----BEGIN PRIVATE KEY-----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\nG+U476dyGaKG+KfBHfUMOs+u6A==\n-----END PRIVATE KEY-----\n

Metadata : kyFWXpuA1qlb3fHLbZQSwmv3718oIe8qwE7spkqMVmYggWp5dzOcgDQbkicfnR/BzNQm28MtRKnQSk6UzNl8k5Ii/bxbu2Ki8zYMy5YUrF/WKxpV16icsqYafV56OAymtzWuwHhouO63oAGQF2B2uqGRPP1JbnhmKj8TA+72stmwgF01IpOUtKreieV2C9n815J9Nw==fA==r4bjBdLJvToP1cH+Bqivqw==

[rullzer]

No with the example data in the files.

Note that my example does RSA en/decryption of the metadata keys.

The actual meta data is encoded the same way as files. so use https://github.com/rullzer/e2e_c/blob/master/decrypt.c as a base for that

[marinofaggiana]

oh ! yes !! sorry argggghhhhh yes yes metadatakeys

[marinofaggiana]

@rullzer the encrypted metadata keys it's ok (i think), thanks .. but this key do not decrypt the encrypted record :

// Encryption algorithm: AES/GCM/NoPadding (128 bit key size) with metadata key from above (symmetric)
"encrypted": {
// Encryption key of the file
"key": "jtboLmgGR1OQf2uneqCVHpklQLlIwWL5TXAQ0keK",
// Unencrypted file name
"filename": "/foo/test.txt",
// Mimetype, if unknown use "application/octet-stream"
"mimetype": "plain/text",
// Which encryption method version was used? For updating in the future.
"version": 1

@tobiasKaminsky required debug :-) ... thanks boys