Skip to content
Juvix imports

module arch.node.engines.decryption;

import prelude open;
import arch.node.types.engine open;
import arch.node.engines.decryption_config open public;
import arch.node.engines.decryption_messages open public;
import arch.node.engines.decryption_environment open public;
import arch.node.engines.decryption_behaviour open public;
import arch.node.types.anoma as Anoma open;

open decryption_config_example;
open decryption_environment_example;

Decryption Engine

The Decryption Engine serves as a secure decryption service for a specific identity within Anoma. It functions like a secure lockbox that can decrypt messages (ciphertext to plaintext) intended for its associated identity, while keeping the decryption keys secure and unexposed. This enables secure communication where only the intended recipient can read encrypted messages.

When users submit encrypted data to the engine (via a MsgDecryptionRequest message), it validates their authorisation and returns the decrypted content (via a MsgDecryptionResponse message) if the decryption is successful.

In Anoma, Decryption Engines are only spawned by Identity Management Engines during identity creation or connection. Only users with the engine reference can request decryption. This ensures that encrypted data can only be decrypted by authorised parties while maintaining the security of the private decryption keys.

Components

The type for a decryption engine

DecryptionEngine : Type :=
Engine
DecryptionCfg
DecryptionLocalState
DecryptionMailboxState
DecryptionTimerHandle
DecryptionActionArguments
Anoma.Msg
Anoma.Cfg
Anoma.Env;

Example of a decryption engine

exampleDecryptionEngine : DecryptionEngine :=
mkEngine@{
cfg := decryptionCfg;
env := decryptionEnv;
behaviour := decryptionBehaviour;
};

where decryptionCfg is defined as follows:

decryptionCfg : EngineCfg DecryptionCfg :=
mkEngineCfg@{
node := Curve25519PubKey "0xabcd1234";
name := "decryption";
cfg :=
mkDecryptionCfg@{
decryptor :=
mkDecryptor@{
decrypt := \{_ x := some x};
};
backend := BackendLocalMemory;
};
};

decryptionEnv is defined as follows:

decryptionEnv : DecryptionEnv :=
mkEngineEnv@{
localState := unit;
mailboxCluster := Map.empty;
acquaintances := Set.empty;
timers := [];
};

and decryptionBehaviour is defined as follows:

decryptionBehaviour : DecryptionBehaviour :=
mkEngineBehaviour@{
guards := First [decryptGuard];
};