Esempi compatti per la cifratura. → Dettagli: Scenari cifratura

// Destinatario: Generare coppia di chiavi
using var mlKem = MlKem.Create(MlKemParameterSet.MlKem768);
byte[] publicKey = mlKem.ExportPublicKey();
 
// Mittente: Incapsulare Shared Secret
var encap = MlKem.Encapsulate(publicKey);
byte[] ciphertext = encap.Ciphertext;
byte[] senderSecret = encap.SharedSecret;
 
// Destinatario: Decapsulare Shared Secret
byte[] receiverSecret = mlKem.Decapsulate(ciphertext);
// senderSecret == receiverSecret

→ Dettagli: Key Encapsulation

// ECDH + ML-KEM combinati
using var hybrid = HybridKeyExchange.Create(
    ECCurve.NamedCurves.nistP384,
    MlKemParameterSet.MlKem768);
 
byte[] publicKey = hybrid.ExportPublicKey();
 
// Mittente
var encap = HybridKeyExchange.Encapsulate(publicKey);
byte[] sharedSecret = encap.SharedSecret; // 64 Bytes (32 ECDH + 32 ML-KEM)

→ Dettagli: Cifratura ibrida

// Derivare chiave da Shared Secret
byte[] aesKey = KeyDerivationExtensions.DeriveKey(
    sharedSecret, outputLength: 32,
    info: Encoding.UTF8.GetBytes("AES-256-GCM"));
 
// Cifrare
using var aes = new OpenSslAesGcm(aesKey);
byte[] nonce = RandomNumberGenerator.GetBytes(12);
byte[] ciphertext = new byte[plaintext.Length];
byte[] tag = new byte[16];
 
aes.Encrypt(nonce, plaintext, ciphertext, tag);
 
// Decifrare
byte[] decrypted = new byte[ciphertext.Length];
aes.Decrypt(nonce, ciphertext, tag, decrypted);

→ Dettagli: Cifratura file

// 1. Key Exchange
using var mlKem = MlKem.Create(MlKemParameterSet.MlKem768);
var encap = MlKem.Encapsulate(mlKem.ExportPublicKey());
 
// 2. Key Derivation
byte[] key = KeyDerivationExtensions.DeriveKey(
    encap.SharedSecret, 32, info: "encryption"u8.ToArray());
 
// 3. Encryption
using var aes = new OpenSslAesGcm(key);
// ... cifrare

« ← Riferimento rapido | → Scenari cifratura (Dettagli) »

Wolfgang van der Stille @ EMSR DATA d.o.o. - Post-Quantum Cryptography Professional