Rust 任務加密解密與跨平台編譯技術

// 金鑰交換
let mut shared_secret = x25519(conf.private_prekey, job.ephemeral_public_key);
// 金鑰派生
let mut kdf = blake2::VarBlake2b::new_keyed(&shared_secret, crypto::XCHACHA20_POLY1305_KEY_SIZE);
kdf.update(&job.nonce);
let mut key = kdf.finalize_boxed();
// 任務解密
let cipher = XChaCha20Poly1305::new(key.as_ref().into());
let decrypted_job_bytes = cipher.decrypt(&job.nonce.into(), job.encrypted_job.as_ref())?;
// 清除敏感資料
shared_secret.zeroize();
key.zeroize();
// 反序列化任務負載
let job_payload: api::JobPayload = serde_json::from_slice(&decrypted_job_bytes)?;

// 生成臨時金鑰對
let mut ephemeral_private_key = [0u8; crypto::X25519_PRIVATE_KEY_SIZE];
rand_generator.fill_bytes(&mut ephemeral_private_key);
let ephemeral_public_key = x25519(ephemeral_private_key.clone(), x25519_dalek::X25519_BASEPOINT_BYTES);
// 金鑰交換
let mut shared_secret = x25519(ephemeral_private_key, job_result_ephemeral_public_key);
// 生成隨機數
let mut nonce = [0u8; crypto::XCHACHA20_POLY1305_NONCE_SIZE];
rand_generator.fill_bytes(&mut nonce);
// 金鑰派生
let mut kdf = blake2::VarBlake2b::new_keyed(&shared_secret, crypto::XCHACHA20_POLY1305_KEY_SIZE);
kdf.update(&nonce);
let mut key = kdf.finalize_boxed();
// 結果序列化
let job_result_payload = api::JobResult { output };
let job_result_payload_json = serde_json::to_vec(&job_result_payload)?;
// 結果加密
let cipher = XChaCha20Poly1305::new(key.as_ref().into());
let encrypted_job_result = cipher.encrypt(&nonce.into(), job_result_payload_json.as_ref())?;
// 清除敏感資料
shared_secret.zeroize();
key.zeroize();

// 準備簽名資料
let mut buffer_to_sign = job_id.as_bytes().to_vec();
buffer_to_sign.append(&mut conf.agent_id.as_bytes().to_vec());
buffer_to_sign.append(&mut encrypted_job_result.clone());
buffer_to_sign.append(&mut ephemeral_public_key.to_vec());
buffer_to_sign.append(&mut nonce.to_vec());
// 簽名
let identity = ed25519_dalek::ExpandedSecretKey::from(&conf.identity_private_key);
let signature = identity.sign(&buffer_to_sign, &conf.identity_public_key);

// 驗證簽名
let mut buffer_to_verify = job.id.as_bytes().to_vec();
buffer_to_verify.append(&mut job.agent_id.as_bytes().to_vec());
buffer_to_verify.append(&mut encrypted_job_result.clone());
buffer_to_verify.append(&mut result_ephemeral_public_key.to_vec());
buffer_to_verify.append(&mut result_nonce.to_vec());
let signature = ed25519_dalek::Signature::try_from(&result_signature[0..64])?;
if agent_identity_public_key.verify(&buffer_to_verify, &signature).is_err() {
    return Err(Error::Internal("Agent's prekey Signature is not valid".to_string()));
}
// 金鑰交換與派生
let mut shared_secret = x25519(job_ephemeral_private_key, result_ephemeral_public_key);
let mut kdf = blake2::VarBlake2b::new_keyed(&shared_secret, crypto::XCHACHA20_POLY1305_KEY_SIZE);
kdf.update(&result_nonce);
let mut key = kdf.finalize_boxed();
// 結果解密
let cipher = XChaCha20Poly1305::new(key.as_ref().into());
let decrypted_job_bytes = cipher.decrypt(&result_nonce.into(), encrypted_job_result.as_ref())?;
// 清除敏感資料
shared_secret.zeroize();
key.zeroize();

#[cfg(target_os = "linux")]
mod linux;
#[cfg(target_os = "linux")]
pub use linux::install;

#[cfg(target_os = "macos")]
mod macos;
#[cfg(target_os = "macos")]
pub use macos::install;

#[cfg(target_os = "windows")]
mod windows;
#[cfg(target_os = "windows")]
pub use windows::install;

use install::install;
fn main() {
    install();
}

// 僅在 macOS 或 Linux 上編譯此函式
#[cfg(any(target_os = "linux", target_os = "macos"))]
fn platform_specific_function() {
    println!("This function is only compiled on Linux or macOS");
}

// 僅在 Linux 且指標大小為 64 位元時編譯
#[cfg(all(target_os = "linux", target_pointer_width = "64"))]
fn linux_64bit_function() {
    println!("This function is compiled on 64-bit Linux");
}

// 不在 Windows 上編譯此函式
#[cfg(not(target_os = "windows"))]
fn non_windows_function() {
    println!("This function is not compiled on Windows");
}

#### 內容解密：
1. `any` 宏允許在多個條件中選擇任一成立時編譯
2. `all` 宏要求所有列出的條件都必須成立
3. `not` 宏用於排除特定條件
4. 這些條件編譯屬性使程式碼能夠靈活適應不同平台

[target.'cfg(windows)'.dependencies]
winreg = "0.10"

$ cargo install -f cross

FROM rust:slim

# 安裝必要的工具
RUN apt-get update && apt-get install -y \
    binutils \
    && rm -rf /var/lib/apt/lists/*

# 設定工作目錄
WORKDIR /app

# 複製專案檔案
COPY . .

# 使用 cross 編譯
RUN cross build --target x86_64-unknown-linux-gnu