https://github.com/fingerling42/polkadot-ecies-cryptography
Python implementation for encryption/decryption with Polkadot keypairs based on ECIES
https://github.com/fingerling42/polkadot-ecies-cryptography
ecies ed25519 encryption-decryption polkadot schnorrkel
Last synced: 4 months ago
JSON representation
Python implementation for encryption/decryption with Polkadot keypairs based on ECIES
- Host: GitHub
- URL: https://github.com/fingerling42/polkadot-ecies-cryptography
- Owner: Fingerling42
- Created: 2024-06-27T14:04:07.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2024-06-28T12:32:37.000Z (about 1 year ago)
- Last Synced: 2025-02-03T14:48:10.380Z (5 months ago)
- Topics: ecies, ed25519, encryption-decryption, polkadot, schnorrkel
- Language: Python
- Homepage:
- Size: 4.88 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Python Encryption/Decryption for Polkadot Keypairs based on ECIES
This package provides simple encryption/decryption functions for Schnorrkel (SR25519) and Edwards (ED25519)
types keypairs, that used in Polkadot, following Elliptic Curve Integrated Encryption Scheme (ECIES).
This scheme allows you to encrypt and decrypt data knowing only the public address of recipient and its keypair type.
Credits to [SubMessage Dapp](https://github.com/Polkadot-DevCamp-2022/submessage-dapp) team for the base idea,
implemented on JS.
Scheme explanation available here:
https://cryptobook.nakov.com/asymmetric-key-ciphers/ecies-public-key-encryption
## Implementation Details
The encryption process consist following steps:
1. **Ephemeral key generation**
Generate new keypair using the `substrateinterface.Keypair.create_from_mnemonic()` with a random seed and type
of recipient address.
2. **Key agreement**
_For SR25519 keypair:_
Use `rbcl.crypto_scalarmult_ristretto255()` function to create shared secret for the message private key and
the recipient public key. Since keypairs are already in SR25519, they can be used as the scalar and the point for this
operation.
_For ED25519 keypair:_
First, convert an ED25519 the message private key and the recipient public key to a Curve25519 keys. Then,
use `nacl.Box` based on these keys to get `shared_key()`.
3. **Key derivation**
Use PBKDF2 (with random salt and 2048 rounds) to derive a new secret from the previous step output. The derived secret
is split into:
- MAC key (first 32 bytes)
- encryption key (last 32 bytes)
4. **Message encryption**
Use `nacl.secret.secretbox` symmetric encryption to encrypt the message with the encryption key generated at step 3.
A nonce (24 bytes) is randomly generated.
5. **MAC Generation**
Generate MAC data using HMAC SHA256 (using the MAC key from step 3) of the concatenation of the encryption nonce,
message public key and encrypted message.
The encrypted message is the concatenation of the following elements:
- `nonce` (24 bytes) : random generated nonce used for the symmetric encryption (step 4)
- `salt` (32 bytes) : random generated salt used for the key derivation (step 3)
- `msg_public_key` (32 bytes): public key of the message keypair (step 1)
- `mac_value` (32 bytes): mac value computed at step 5
- `encrypted_message` (remaining bytes): encrypted message (step 4)