64 lines
1.4 KiB
Go
Raw Normal View History

- Inter-node Protocol: Implemented a custom communication protocol based on Protobuf structures. - Bridge Node Support: Added functionality to manage mail (send/receive) on remote nodes via a bridge node. Full transparent management requires a private key on the bridge, while the remote node can operate with only a public key. - End-to-End Encryption (E2EE): Integrated E2EE using age. Encryption and decryption occur strictly at the bridge level; node administrators cannot access message content. - New Addressing Schema: Transitioned from nodepub@yggmail to userpub@nodepub. - Key Adaptation: Implemented ed25519 to x25519 coordinate adaptation, allowing signing keys to be used for encryption. Changed - Address Encoding: Switched from hex16 to base32 for the address space. - Memory Optimization: Replaced direct memory allocations with streaming for mail processing to reduce RAM overhead. - Code Refactoring: Performed decomposition of the original inherited codebase to improve maintainability. Fixed - Mail Updates: Fixed the mail retrieval mechanism to ensure near-instant updates for incoming messages. Changes to be committed: modified: .gitignore modified: README.md modified: cmd/yggmail/main.go modified: go.mod modified: go.sum new file: internal/account/manager.go new file: internal/account/session.go modified: internal/imapserver/backend.go modified: internal/imapserver/imap.go modified: internal/imapserver/mailbox.go modified: internal/imapserver/notify.go modified: internal/imapserver/user.go new file: internal/notify/notify.go new file: internal/notify/remote/remote.go new file: internal/remote/client.go new file: internal/remote/handlers.go new file: internal/remote/io.go new file: internal/remote/server.go new file: internal/remote/sign.go new file: internal/remote/types/request.pb.go new file: internal/remote/types/request.proto new file: internal/remote/types/response.pb.go new file: internal/remote/types/response.proto new file: internal/shell/shell.go modified: internal/smtpsender/sender.go modified: internal/smtpserver/backend.go modified: internal/smtpserver/session_local.go modified: internal/smtpserver/session_remote.go modified: internal/smtpserver/smtp.go new file: internal/storage/filestore/filestore.go new file: internal/storage/local/storage.go new file: internal/storage/remote/mail.go new file: internal/storage/remote/mailbox.go new file: internal/storage/remote/queue.go new file: internal/storage/remote/storage.go new file: internal/storage/remote/watch.go modified: internal/storage/sqlite3/sqlite3.go new file: internal/storage/sqlite3/table_accounts.go modified: internal/storage/sqlite3/table_mailboxes.go modified: internal/storage/sqlite3/table_mails.go modified: internal/storage/sqlite3/table_queue.go modified: internal/storage/storage.go modified: internal/storage/types/types.go modified: internal/utils/address.go new file: internal/utils/age/age.go new file: internal/utils/age/bech32/bech32.go new file: internal/utils/crypt.go new file: internal/utils/e2ee/crypt.go new file: internal/utils/e2ee/e2ee_test.go new file: internal/utils/e2ee/msg.go new file: internal/utils/x25519.go modified: internal/welcome/welcome.go
2026-02-14 02:34:09 +05:00
package age
import (
"crypto/ed25519"
"io"
"filippo.io/age"
"filippo.io/age/armor"
"github.com/neilalexander/yggmail/internal/utils"
"github.com/neilalexander/yggmail/internal/utils/age/bech32"
)
func Recipient(pub ...ed25519.PublicKey) (rcpt []age.Recipient, err error) {
for _, p := range pub {
x, _ := utils.PubEd25519ToX25519(p)
s, _ := bech32.Encode("age", x)
r, err := age.ParseX25519Recipient(s)
if err != nil {
return nil, err
}
rcpt = append(rcpt, r)
}
return rcpt, nil
}
func Identity(pub ed25519.PrivateKey) (age.Identity, error) {
p, _ := utils.PrivEd25519ToX25519(pub)
s, _ := bech32.Encode("AGE-SECRET-KEY-", p)
return age.ParseX25519Identity(s)
}
type armorCloseWrapper struct {
io.WriteCloser // age writer
armorWriter io.WriteCloser
}
func (w *armorCloseWrapper) Close() error {
if err := w.WriteCloser.Close(); err != nil {
return err
}
return w.armorWriter.Close()
}
func EncryptArmor(w io.Writer, i ...age.Recipient) (io.WriteCloser, error) {
aw := armor.NewWriter(w)
ew, err := age.Encrypt(aw, i...)
if err != nil {
aw.Close()
return nil, err
}
return &armorCloseWrapper{ew, aw}, nil
}
func DecryptArmor(r io.Reader, i ...age.Identity) (io.Reader, error) {
r = armor.NewReader(r)
return Decrypt(r, i...)
}
func Encrypt(w io.Writer, i ...age.Recipient) (io.WriteCloser, error) {
return age.Encrypt(w, i...)
}
func Decrypt(r io.Reader, i ...age.Identity) (io.Reader, error) {
return age.Decrypt(r, i...)
}