@peter/encryption (#49)

* add encryption/decryption

* add encryption/decryption

* format code

* use sdk git repo

* add test cases

Author: 0g-peterzhb

Cargo.lock

@@ -37,9 +37,15 @@ impl ZgsKVConfig {
             error!("{}", format!("stream ids is empty"))
         }
         let stream_set = HashSet::from_iter(stream_ids.iter().cloned());
+        let encryption_key = if self.encryption_key.is_empty() {
+            None
+        } else {
+            Some(parse_encryption_key(&self.encryption_key)?)
+        };
         Ok(StreamConfig {
             stream_ids,
             stream_set,
+            encryption_key,
         })
     }
 
@@ -109,6 +115,22 @@ impl ZgsKVConfig {
     }
 }
 
+fn parse_encryption_key(hex_str: &str) -> Result<[u8; 32], String> {
+    let hex_str = hex_str.strip_prefix("0x").unwrap_or(hex_str);
+    if hex_str.len() != 64 {
+        return Err(format!(
+            "encryption_key must be 64 hex chars (32 bytes), got {} chars",
+            hex_str.len()
+        ));
+    }
+    let mut key = [0u8; 32];
+    for i in 0..32 {
+        key[i] = u8::from_str_radix(&hex_str[i * 2..i * 2 + 2], 16)
+            .map_err(|e| format!("Invalid hex in encryption_key at position {}: {}", i * 2, e))?;
+    }
+    Ok(key)
+}
+
 // zgs_node_urls can be used as a static node list; otherwise indexer_url is used.
 pub fn to_zgs_nodes(zgs_node_urls: String) -> Result<Vec<String>, String> {
     if zgs_node_urls.is_empty() {

node/src/config/convert.rs

@@ -40,6 +40,9 @@ build_config! {
     (max_response_body_in_bytes, (u32), 1024 * 1024 * 30) // 30MB
     (zgs_rpc_timeout, (u64), 5) // 5 seconds
 
+    // encryption
+    (encryption_key, (String), "".to_string())
+
     // db
     (db_dir, (String), "db".to_string())
     (merkle_node_cache_capacity, (usize), 32 * 1024 * 1024)

node/src/config/mod.rs

@@ -11,20 +11,20 @@ append_merkle = { workspace = true }
 async-trait = "0.1.56"
 ethereum-types = "0.14"
 futures = "0.3.21"
-jsonrpsee = { version = "0.14.0", features = ["full"] }
 shared_types = { workspace = true }
 kv_types = { path = "../kv_types" }
 task_executor = { workspace = true }
 tokio = "1.19.2"
 ethers = { version = "^2", features = ["ws"] }
-serde_json = "1.0.127"
 storage_with_stream = { path = "../storage_with_stream" }
 rpc = {path = "../rpc"}
-zgs_rpc = { git = "https://github.com/0gfoundation/0g-storage-node.git", branch = "main", package = "rpc" }
-zgs_storage = { git = "https://github.com/0gfoundation/0g-storage-node.git", branch = "main", package = "storage" }
+zg-storage-client = { git = "https://github.com/0gfoundation/0g-storage-sdk-rust.git", rev = "6101dc7714c0cfc71c9e902e351068e189fa9e15" }
 contract-interface = { workspace = true }
 rusqlite = { version = "0.28.0", features = ["bundled"] }
 tracing = "0.1.35"
 eth2_ssz = "0.4.0"
 eth2_ssz_derive = "0.3.0"
 thiserror = "1.0.37"
+
+[dev-dependencies]
+tokio = { version = "1.19.2", features = ["rt", "macros"] }

node/stream/Cargo.toml

@@ -6,4 +6,5 @@ use ethereum_types::H256;
 pub struct Config {
     pub stream_ids: Vec<H256>,
     pub stream_set: HashSet<H256>,
+    pub encryption_key: Option<[u8; 32]>,
 }