class

Matter::Crypto::StandardCrypto

Inherits Matter::Crypto::CryptoBase < Reference < Object

Standard OpenSSL-based implementation

Instance methods

build_ec_private_key_der(priv : Bytes, pub : Bytes) : Bytes

Build SEC1 DER format for EC private key

Source
build_ec_public_key_der(pub : Bytes) : Bytes

Build SPKI DER format for EC public key

Source
compute_sha256(data : Bytes | Array(Bytes)) : Bytes
Source
create_hkdf_key(secret : Bytes, salt : Bytes, info : Bytes, length : Int32 = 32) : Bytes

Derive key using HKDF with SHA-256 @param secret Input key material @param salt Salt value @param info Context/application specific info @param length Desired output length (default 32 bytes) @return Derived key

Source
create_key_pair

Generate an EC P-256 key pair @return New private key (includes public key)

Source
create_pbkdf2_key(secret : Bytes, salt : Bytes, iterations : Int32, key_length : Int32) : Bytes

Derive key using PBKDF2 with SHA-256 @param secret Secret/password @param salt Salt value @param iterations Iteration count @param key_length Desired key length @return Derived key

Source
decrypt(key : Bytes, data : Bytes, nonce : Bytes, aad : Bytes | Nil = nil) : Bytes

Decrypt using AES-128-CCM with Matter-specific parameters @param key 16-byte AES key @param data Ciphertext with authentication tag @param nonce 13-byte nonce @param aad Additional authenticated data (optional) @return Plaintext @raise Exception if authentication fails

Source
der_to_pem(der : Bytes, label : String) : String

Convert DER to PEM format

Source
encrypt(key : Bytes, data : Bytes, nonce : Bytes, aad : Bytes | Nil = nil) : Bytes

Encrypt using AES-128-CCM with Matter-specific parameters @param key 16-byte AES key @param data Plaintext to encrypt @param nonce 13-byte nonce @param aad Additional authenticated data (optional) @return Ciphertext with 16-byte authentication tag appended

Source
generate_dh_secret(private_key : Key, peer_public_key : Key) : Bytes

Compute shared secret using ECDH @param private_key Local private key @param peer_public_key Peer's public key @return Shared secret (32 bytes for P-256)

Source
implementation_name

The implementation name for logging

Source
random_bytes(length : Int32) : Bytes

Generate cryptographically secure random bytes @param length Number of bytes to generate @return Random bytes

Source
sign_ecdsa(private_key : Key, data : Bytes | Array(Bytes), dsa_encoding : String = "ieee-p1363") : Bytes
Source
sign_hmac(key : Bytes, data : Bytes) : Bytes

Create HMAC-SHA256 signature @param key HMAC key @param data Data to sign @return HMAC signature

Source
verify_ecdsa(public_key : Key, data : Bytes, signature : Bytes, dsa_encoding : String = "ieee-p1363") : Nil

Verify ECDSA signature using P-256 @param public_key EC public key @param data Data that was signed @param signature Signature to verify @param dsa_encoding Signature encoding format @raise Exception if verification fails

Source