Examples with Masterkey org.cryptomator.cryptolib.api.Masterkey used on opensource projects

Example 1 with Masterkey

use of org.cryptomator.cryptolib.api.Masterkey in project cryptomator by cryptomator.

the class RecoveryKeyFactory method resetPasswordWithRecoveryKey.

/**
 * Creates a completely new masterkey using a recovery key.
 *
 * @param vaultPath Path to the storage location of a vault
 * @param recoveryKey A recovery key for this vault
 * @param newPassword The new password used to encrypt the keys
 * @throws IOException If the masterkey file could not be written
 * @throws IllegalArgumentException If the recoveryKey is invalid
 * @apiNote This is a long-running operation and should be invoked in a background thread
 */
public void resetPasswordWithRecoveryKey(Path vaultPath, String recoveryKey, CharSequence newPassword) throws IOException, IllegalArgumentException {
    final byte[] rawKey = decodeRecoveryKey(recoveryKey);
    try (var masterkey = new Masterkey(rawKey)) {
        Path masterkeyPath = vaultPath.resolve(MASTERKEY_FILENAME);
        if (Files.exists(masterkeyPath)) {
            byte[] oldMasterkeyBytes = Files.readAllBytes(masterkeyPath);
            // TODO: deduplicate with ChangePasswordController:
            Path backupKeyPath = vaultPath.resolve(MASTERKEY_FILENAME + BackupHelper.generateFileIdSuffix(oldMasterkeyBytes) + MASTERKEY_BACKUP_SUFFIX);
            Files.move(masterkeyPath, backupKeyPath, StandardCopyOption.REPLACE_EXISTING, StandardCopyOption.ATOMIC_MOVE);
        }
        masterkeyFileAccess.persist(masterkey, masterkeyPath, newPassword);
    } finally {
        Arrays.fill(rawKey, (byte) 0x00);
    }
}

Example 2 with Masterkey

use of org.cryptomator.cryptolib.api.Masterkey in project cryptomator by cryptomator.

the class CreateNewVaultPasswordController method initializeVault.

private void initializeVault(Path path) throws IOException {
    // 1. write masterkey:
    Path masterkeyFilePath = path.resolve(MASTERKEY_FILENAME);
    try (Masterkey masterkey = Masterkey.generate(csprng)) {
        masterkeyFileAccess.persist(masterkey, masterkeyFilePath, newPasswordSceneController.passwordField.getCharacters());
        // 2. initialize vault:
        try {
            MasterkeyLoader loader = ignored -> masterkey.copy();
            CryptoFileSystemProperties fsProps = CryptoFileSystemProperties.cryptoFileSystemProperties().withCipherCombo(CryptorProvider.Scheme.SIV_CTRMAC).withKeyLoader(loader).build();
            CryptoFileSystemProvider.initialize(path, fsProps, DEFAULT_KEY_ID);
            // 3. write vault-internal readme file:
            String vaultReadmeFileName = resourceBundle.getString("addvault.new.readme.accessLocation.fileName");
            try (// 
            FileSystem fs = CryptoFileSystemProvider.newFileSystem(path, fsProps);
                WritableByteChannel ch = Files.newByteChannel(fs.getPath("/", vaultReadmeFileName), StandardOpenOption.CREATE_NEW, StandardOpenOption.WRITE)) {
                ch.write(US_ASCII.encode(readmeGenerator.createVaultAccessLocationReadmeRtf()));
            }
        } catch (CryptoException e) {
            throw new IOException("Failed initialize vault.", e);
        }
    }
    // 4. write vault-external readme file:
    String storagePathReadmeFileName = resourceBundle.getString("addvault.new.readme.storageLocation.fileName");
    try (WritableByteChannel ch = Files.newByteChannel(path.resolve(storagePathReadmeFileName), StandardOpenOption.CREATE_NEW, StandardOpenOption.WRITE)) {
        ch.write(US_ASCII.encode(readmeGenerator.createVaultStorageLocationReadmeRtf()));
    }
    LOG.info("Created vault at {}", path);
}