swarmauri_mre_crypto_ecdh_es_kw 0.2.0.dev3

ECDH-ES+A128KW based multi-recipient encryption provider for Swarmauri

---

Swarmauri MRE Crypto ECDH-ES+A128KW

ECDH-ES+A128KW based multi-recipient encryption provider implementing the IMreCrypto contract.

• ECDH-ES key agreement per recipient
• AES-128 Key Wrap of a shared content-encryption key
• AES-128-GCM payload encryption with optional AAD

Installation

pip install swarmauri_mre_crypto_ecdh_es_kw

Usage

from cryptography.hazmat.primitives.asymmetric import ec
from swarmauri_mre_crypto_ecdh_es_kw import EcdhEsA128KwMreCrypto

crypto = EcdhEsA128KwMreCrypto()

sk = ec.generate_private_key(ec.SECP256R1())
pk = sk.public_key()
ref = {"kid": "1", "version": 1, "kind": "cryptography_obj", "obj": pk}

env = await crypto.encrypt_for_many([ref], b"secret")
pt = await crypto.open_for({"kind": "cryptography_obj", "obj": sk}, env)

Entry point

The provider is registered under the swarmauri.mre_cryptos entry-point as EcdhEsA128KwMreCrypto.