aes_gcm_stream.h

Go to the documentation of this file.

/*
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */
 
#pragma once
 
 
#include <array>
#include <cstdint>
#include <memory>
#include <span>
#include <vector>
 
#include "iceberg/file_io.h"
#include "iceberg/iceberg_bundle_export.h"
#include "iceberg/result.h"
 
namespace iceberg {
 
struct AesGcmStream {
  static constexpr int32_t kPlainBlockSize = 1024 * 1024;
  static constexpr int32_t kNonceLength = 12;
  static constexpr int32_t kGcmTagLength = 16;
  static constexpr int32_t kCipherBlockSize =
      kPlainBlockSize + kNonceLength + kGcmTagLength;
  static constexpr std::array<char, 4> kMagic = {'A', 'G', 'S', '1'};
  static constexpr int32_t kHeaderLength = 8;  // magic + plain block size (LE int32)
  static constexpr int64_t kMinStreamLength =
      kHeaderLength + kNonceLength + kGcmTagLength;
 
  ICEBERG_BUNDLE_EXPORT static Result<int64_t> PlaintextLength(int64_t encrypted_length);
};
 
class ICEBERG_BUNDLE_EXPORT AesGcmInputFile : public InputFile {
 public:
  AesGcmInputFile(std::unique_ptr<InputFile> source, std::vector<uint8_t> key,
                  std::vector<uint8_t> aad_prefix, int64_t encrypted_length);
 
  std::string_view location() const override { return source_->location(); }
  Result<int64_t> Size() const override;
  Result<std::unique_ptr<SeekableInputStream>> Open() override;
 
 private:
  std::unique_ptr<InputFile> source_;
  std::vector<uint8_t> key_;
  std::vector<uint8_t> aad_prefix_;
  int64_t encrypted_length_;
};
 
class ICEBERG_BUNDLE_EXPORT AesGcmOutputFile : public OutputFile {
 public:
  AesGcmOutputFile(std::unique_ptr<OutputFile> target, std::vector<uint8_t> key,
                   std::vector<uint8_t> aad_prefix);
 
  std::string_view location() const override { return target_->location(); }
  Result<std::unique_ptr<PositionOutputStream>> Create() override;
  Result<std::unique_ptr<PositionOutputStream>> CreateOrOverwrite() override;
 
 private:
  std::unique_ptr<OutputFile> target_;
  std::vector<uint8_t> key_;
  std::vector<uint8_t> aad_prefix_;
};
 
}  // namespace iceberg