add encryption option

index.js

@@ -30,6 +30,8 @@ module.exports = class Hyperdrive extends ReadyResource {
     this._batching = !!(opts._checkout === null && opts._db)
     this._checkout = opts._checkout || null
 
+    this._encryptionKey = opts.encryptionKey
+
     this.ready().catch(safetyCatch)
   }
 
@@ -128,7 +130,8 @@ module.exports = class Hyperdrive extends ReadyResource {
     const blobsCore = this.corestore.get({
       key: blobsKey,
       cache: false,
-      onwait: this._onwait
+      onwait: this._onwait,
+      encryptionKey: this._encryptionKey
     })
     await blobsCore.ready()
 
@@ -158,7 +161,8 @@ module.exports = class Hyperdrive extends ReadyResource {
       const blobsCore = this.corestore.get({
         name: 'blobs',
         cache: false,
-        onwait: this._onwait
+        onwait: this._onwait,
+        encryptionKey: this._encryptionKey
       })
       await blobsCore.ready()
 
@@ -545,7 +549,7 @@ function shallowReadStream (files, folder, keys) {
 
 function makeBee (key, corestore, opts) {
   const name = key ? undefined : 'db'
-  const core = corestore.get({ key, name, cache: true, exclusive: true, onwait: opts.onwait })
+  const core = corestore.get({ key, name, cache: true, exclusive: true, onwait: opts.onwait, encryptionKey: opts.encryptionKey })
 
   return new Hyperbee(core, {
     keyEncoding: 'utf-8',

test.js

@@ -1217,6 +1217,35 @@ test('non-existing follow entry', async function (t) {
   await drive.close()
 })
 
+test('encryptionKey', async function (t) {
+  const encryptionKey = Buffer.alloc(32).fill(0)
+
+  const storage = createTmpDir(t)
+
+  const store = new Corestore(storage)
+  const writer = new Hyperdrive(store, { encryptionKey })
+
+  await writer.ready()
+  t.alike(writer.core.encryptionKey, encryptionKey)
+  t.alike(writer.blobs.core.encryptionKey, encryptionKey)
+
+  await writer.close()
+
+  {
+    const store = new Corestore(storage)
+
+    const reader = new Hyperdrive(store, writer.key, { encryptionKey })
+
+    await reader.ready()
+    t.alike(reader.core.encryptionKey, encryptionKey)
+
+    await reader.getBlobs()
+    t.alike(reader.blobs.core.encryptionKey, encryptionKey)
+
+    await reader.close()
+  }
+})
+
 async function testenv (teardown) {
   const corestore = new Corestore(RAM)
   await corestore.ready()