swarmauri_mre_crypto_ecdh_es_kw 0.11.0.dev1

Swarmauri MRE Crypto ECDH-ES+A128KW

ECDH-ES+A128KW based multi-recipient encryption provider implementing the IMreCrypto contract.

Capabilities

• Per-recipient ECDH-ES key agreement over secp256r1
• AES-128 Key Wrap (KW) of the derived content-encryption key
• AES-128-GCM payload encryption with optional additional authenticated data (AAD)
• Supported payload algorithm: A128GCM
• Supported recipient algorithm: ECDH-ES+A128KW
• Supported MRE mode: MreMode.ENC_ONCE_HEADERS
• Re-wrapping existing envelopes is not supported

Installation

pip

pip install swarmauri_mre_crypto_ecdh_es_kw

Poetry

poetry add swarmauri_mre_crypto_ecdh_es_kw

uv

1. Install uv if it is not already available:

   curl -LsSf https://astral.sh/uv/install.sh | sh
   

2. Add the package to your environment:

   uv pip install swarmauri_mre_crypto_ecdh_es_kw
   

Usage

The provider operates asynchronously. The example below demonstrates encrypting and decrypting a payload for a single recipient whose key is provided as a cryptography object reference. The same aad (if provided) must be used for both encryption and decryption.

import asyncio

from cryptography.hazmat.primitives.asymmetric import ec

from swarmauri_mre_crypto_ecdh_es_kw import EcdhEsA128KwMreCrypto


async def main() -> None:
    crypto = EcdhEsA128KwMreCrypto()

    sk = ec.generate_private_key(ec.SECP256R1())
    pk = sk.public_key()
    recipient = {"kid": "1", "version": 1, "kind": "cryptography_obj", "obj": pk}

    envelope = await crypto.encrypt_for_many([recipient], b"secret", aad=b"metadata")
    plaintext = await crypto.open_for(
        {"kind": "cryptography_obj", "obj": sk}, envelope, aad=b"metadata"
    )

    assert plaintext == b"secret"


if __name__ == "__main__":
    asyncio.run(main())

Entry point

The provider is registered under the swarmauri.mre_cryptos entry point as EcdhEsA128KwMreCrypto.

Want to help?

If you want to contribute to swarmauri-sdk, read up on our guidelines for contributing that will help you get started.