You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
99 lines
3.2 KiB
99 lines
3.2 KiB
const asmcrypto = require('asmcrypto.js')
|
|
const Unibabel = require('browserify-unibabel')
|
|
|
|
/**
|
|
* A Microsoft Edge-specific encryption class that exposes
|
|
* the interface expected by eth-keykeyring-controller
|
|
*/
|
|
class EdgeEncryptor {
|
|
/**
|
|
* Encrypts an arbitrary object to ciphertext
|
|
*
|
|
* @param {string} password Used to generate a key to encrypt the data
|
|
* @param {Object} dataObject Data to encrypt
|
|
* @returns {Promise<string>} Promise resolving to an object with ciphertext
|
|
*/
|
|
encrypt (password, dataObject) {
|
|
const salt = this._generateSalt()
|
|
return this._keyFromPassword(password, salt)
|
|
.then(function (key) {
|
|
const data = JSON.stringify(dataObject)
|
|
const dataBuffer = Unibabel.utf8ToBuffer(data)
|
|
const vector = global.crypto.getRandomValues(new Uint8Array(16))
|
|
const resultbuffer = asmcrypto.AES_GCM.encrypt(dataBuffer, key, vector)
|
|
|
|
const buffer = new Uint8Array(resultbuffer)
|
|
const vectorStr = Unibabel.bufferToBase64(vector)
|
|
const vaultStr = Unibabel.bufferToBase64(buffer)
|
|
return JSON.stringify({
|
|
data: vaultStr,
|
|
iv: vectorStr,
|
|
salt: salt,
|
|
})
|
|
})
|
|
}
|
|
|
|
/**
|
|
* Decrypts an arbitrary object from ciphertext
|
|
*
|
|
* @param {string} password Used to generate a key to decrypt the data
|
|
* @param {string} text Ciphertext of an encrypted object
|
|
* @returns {Promise<Object>} Promise resolving to copy of decrypted object
|
|
*/
|
|
decrypt (password, text) {
|
|
const payload = JSON.parse(text)
|
|
const salt = payload.salt
|
|
return this._keyFromPassword(password, salt)
|
|
.then(function (key) {
|
|
const encryptedData = Unibabel.base64ToBuffer(payload.data)
|
|
const vector = Unibabel.base64ToBuffer(payload.iv)
|
|
return new Promise((resolve, reject) => {
|
|
let result
|
|
try {
|
|
result = asmcrypto.AES_GCM.decrypt(encryptedData, key, vector)
|
|
} catch (err) {
|
|
return reject(new Error('Incorrect password'))
|
|
}
|
|
const decryptedData = new Uint8Array(result)
|
|
const decryptedStr = Unibabel.bufferToUtf8(decryptedData)
|
|
const decryptedObj = JSON.parse(decryptedStr)
|
|
resolve(decryptedObj)
|
|
})
|
|
})
|
|
}
|
|
|
|
/**
|
|
* Retrieves a cryptographic key using a password
|
|
*
|
|
* @private
|
|
* @param {string} password Password used to unlock a cryptographic key
|
|
* @param {string} salt Random base64 data
|
|
* @returns {Promise<Object>} Promise resolving to a derived key
|
|
*/
|
|
_keyFromPassword (password, salt) {
|
|
|
|
const passBuffer = Unibabel.utf8ToBuffer(password)
|
|
const saltBuffer = Unibabel.base64ToBuffer(salt)
|
|
const iterations = 10000
|
|
const length = 32 // SHA256 hash size
|
|
return new Promise((resolve) => {
|
|
const key = asmcrypto.Pbkdf2HmacSha256(passBuffer, saltBuffer, iterations, length)
|
|
resolve(key)
|
|
})
|
|
}
|
|
|
|
/**
|
|
* Generates random base64 encoded data
|
|
*
|
|
* @private
|
|
* @returns {string} Randomized base64 encoded data
|
|
*/
|
|
_generateSalt (byteCount = 32) {
|
|
const view = new Uint8Array(byteCount)
|
|
global.crypto.getRandomValues(view)
|
|
const b64encoded = btoa(String.fromCharCode.apply(null, view))
|
|
return b64encoded
|
|
}
|
|
}
|
|
|
|
module.exports = EdgeEncryptor
|
|
|