rsa.go

//Package ipin implements IPIN encryption as per EBS
package ipin

import (
	"crypto/rand"
	"crypto/rsa"
	"crypto/x509"
	"encoding/base64"
	"fmt"
)

// TODO #2 make this main program, a package

//Encrypt given a public key and pin and UUID, encrypt encrypts
// to EBS compatible RSA payload
func Encrypt(pubkey string, pin string, uuid string) (string, error) {
	block, err := base64.StdEncoding.DecodeString(pubkey)

	if err != nil {
		return "", err
	}

	pub, err := x509.ParsePKIXPublicKey(block)
	if err != nil {
		return "", err
	}

	rsaPub, _ := pub.(*rsa.PublicKey)
	//fmt.Printf("The key is: %v, its type is %T", rsaPub, rsaPub)

	// do the encryption
	msg := uuid + pin
	rsakey, err := rsa.EncryptPKCS1v15(rand.Reader, rsaPub, []byte(msg))
	if err != nil {
		return "", err
	}
	//fmt.Printf("the encryption is: %v", rsakey)
	encodedKey := base64.StdEncoding.EncodeToString(rsakey)
	fmt.Printf("the key is: %v\n", encodedKey)
	fmt.Printf("The uuid is: %v\n", uuid)
	return encodedKey, nil
}