public static void EncryptionErasure(string filePath, BackgroundWorker bgwShredFiles)
{
try
{
string encryptedFilePath = AnonymousRename.GetAnonymousFileName(filePath);
using (var ciphertext = new FileStream(encryptedFilePath, FileMode.Create, FileAccess.ReadWrite, FileShare.Read))
using (var plaintext = new FileStream(filePath, FileMode.Open, FileAccess.ReadWrite, FileShare.Read))
{
byte[] fileBytes = FileHandling.GetBufferSize(plaintext);
byte[] key = SodiumCore.GetRandomBytes(Constants.EncryptionKeySize);
byte[] nonce = SodiumCore.GetRandomBytes(Constants.XChaChaNonceLength);
StreamCiphers.Encrypt(plaintext, ciphertext, 0, fileBytes, nonce, key, bgwShredFiles);
Utilities.ZeroArray(key);
Utilities.ZeroArray(nonce);
}
// Overwrite the original file
File.Copy(encryptedFilePath, filePath, true);
ShredFiles.EraseFileMetadata(encryptedFilePath);
File.Delete(encryptedFilePath);
}
catch (Exception ex) when(ex is CryptographicException || ExceptionFilters.FileAccessExceptions(ex))
{
Logging.LogException(ex.ToString(), Logging.Severity.High);
DisplayMessage.ErrorResultsText(filePath, ex.GetType().Name, "'Encryption' erasure failed.");
}
}
private static string GetEncryptedFilePath(string filePath)
{
if (Globals.AnonymousRename == true)
{
bool success = OriginalFileName.AppendOriginalFileName(filePath);
if (success == true)
{
return(AnonymousRename.GetAnonymousFileName(filePath) + Constants.EncryptedExtension);
}
}
return(filePath + Constants.EncryptedExtension);
}