crypto.hpp

#pragma once
#include <cstdint>
#include <cstddef>
#include <string>
#include <vector>
#include <array>

namespace sflk {
struct Meta {
    uint32_t iterations = 200000;
    std::vector<uint8_t> salt;   // 16B
    std::vector<uint8_t> iv;     // 12B
    std::string origName;        // UTF-8
    uint64_t origSize = 0;
    std::array<uint8_t,32> sha256{}; // plaintext checksum
};

std::vector<uint8_t> derive_key(const std::string& password,
                                const std::vector<uint8_t>& salt,
                                uint32_t iterations);

void encrypt_file(const std::string& inPath,
                  const std::string& outPath,
                  const std::string& password,
                  uint32_t iterations = 200000);

std::string decrypt_file(const std::string& inPath,
                         const std::string& outPath,
                         const std::string& password);

Meta read_header(const std::string& inPath);

void verify_file(const std::string& inPath, const std::string& password);
} // namespace sflk