Function encryptEnvWithKey

vmm/ui/src/composables/useVmManager.ts:930–958

(envs: EncryptedEnvEntry[], publicKeyBytes: Uint8Array)

  }

  async function encryptEnvWithKey(envs: EncryptedEnvEntry[], publicKeyBytes: Uint8Array) {
    const envsJson = JSON.stringify({ env: envs });
    const remotePubkey = publicKeyBytes && publicKeyBytes.length ? publicKeyBytes : new Uint8Array();

    const seed = crypto.getRandomValues(new Uint8Array(32));
    const keyPair = x25519.generateKeyPair(seed);
    const shared = x25519.sharedKey(keyPair.private, remotePubkey);

    const importedShared = await crypto.subtle.importKey(
      'raw',
      shared,
      { name: 'AES-GCM', length: 256 },
      true,
      ['encrypt'],
    );
    const iv = crypto.getRandomValues(new Uint8Array(12));
    const encrypted = await crypto.subtle.encrypt(
      { name: 'AES-GCM', iv },
      importedShared,
      new TextEncoder().encode(envsJson),
    );

    const result = new Uint8Array(iv.length + keyPair.public.byteLength + encrypted.byteLength);
    result.set(keyPair.public, 0);
    result.set(iv, keyPair.public.byteLength);
    result.set(new Uint8Array(encrypted), keyPair.public.byteLength + iv.length);

    return result;
  }

  async function createVm() {
    try {