File Coverage

blib/lib/Crypt/Age.pm

Criterion	Covered	Total	%
statement	71	71	100.0
branch	9	16	56.2
condition	13	30	43.3
subroutine	11	11	100.0
pod	5	5	100.0
total	109	133	81.9

package Crypt::Age;
our $AUTHORITY = 'cpan:GETTY';
# ABSTRACT: Perl implementation of age encryption (age-encryption.org)

use Moo;
use Carp qw(croak);
use Crypt::Age::Keys;
use Crypt::Age::Primitives;
use Crypt::Age::Header;
use namespace::clean;


our $VERSION = '0.001';

sub generate_keypair {
    my ($class) = @_;
    return Crypt::Age::Keys->generate_keypair;
}


sub encrypt {
    my ($class, %args) = @_;
    my $plaintext  = $args{plaintext}  // croak "plaintext required";
    my $recipients = $args{recipients} // croak "recipients required";

    croak "recipients must be an array ref" unless ref($recipients) eq 'ARRAY';
    croak "at least one recipient required" unless @$recipients;

    # Generate random file key
    my $file_key = Crypt::Age::Primitives->generate_file_key;

    # Create header with wrapped file key for each recipient
    my $header = Crypt::Age::Header->create($file_key, $recipients);

    # Generate payload nonce and derive payload key
    my $nonce = Crypt::Age::Primitives->generate_payload_nonce;
    my $payload_key = Crypt::Age::Primitives->derive_payload_key($file_key, $nonce);
    my $encrypted_payload = Crypt::Age::Primitives->encrypt_payload($payload_key, $plaintext);

    # Output: header + nonce + encrypted_payload
    return $header->to_string . $nonce . $encrypted_payload;
}


sub decrypt {
    my ($class, %args) = @_;
    my $ciphertext = $args{ciphertext} // croak "ciphertext required";
    my $identities = $args{identities} // croak "identities required";

    croak "identities must be an array ref" unless ref($identities) eq 'ARRAY';
    croak "at least one identity required" unless @$identities;

    # Parse header
    my $offset = 0;
    my $header = Crypt::Age::Header->parse(\$ciphertext, \$offset);

    # Unwrap file key using identities
    my $file_key = $header->unwrap_file_key($identities);

    # Extract nonce (first 16 bytes after header) and encrypted payload
    my $nonce = substr($ciphertext, $offset, 16);
    my $encrypted_payload = substr($ciphertext, $offset + 16);

    # Derive payload key using nonce
    my $payload_key = Crypt::Age::Primitives->derive_payload_key($file_key, $nonce);

    return Crypt::Age::Primitives->decrypt_payload($payload_key, $encrypted_payload);
}


sub encrypt_file {
    my ($class, %args) = @_;
    my $input      = $args{input}      // croak "input required";
    my $output     = $args{output}     // croak "output required";
    my $recipients = $args{recipients} // croak "recipients required";

    open my $in_fh, '<:raw', $input
        or croak "Cannot open input file '$input': $!";
    my $plaintext = do { local $/; <$in_fh> };
    close $in_fh;

    my $ciphertext = $class->encrypt(
        plaintext  => $plaintext,
        recipients => $recipients,
    );

    open my $out_fh, '>:raw', $output
        or croak "Cannot open output file '$output': $!";
    print $out_fh $ciphertext;
    close $out_fh;

    return 1;
}


sub decrypt_file {
    my ($class, %args) = @_;
    my $input      = $args{input}      // croak "input required";
    my $output     = $args{output}     // croak "output required";
    my $identities = $args{identities} // croak "identities required";

    open my $in_fh, '<:raw', $input
        or croak "Cannot open input file '$input': $!";
    my $ciphertext = do { local $/; <$in_fh> };
    close $in_fh;

    my $plaintext = $class->decrypt(
        ciphertext => $ciphertext,
        identities => $identities,
    );

    open my $out_fh, '>:raw', $output
        or croak "Cannot open output file '$output': $!";
    print $out_fh $plaintext;
    close $out_fh;

    return 1;
}



1;

__END__