@abrar71/lib-jitsi-meet 0.0.0

package/dist/esm/modules/e2ee/Context.js

@@ -0,0 +1,274 @@
+/* eslint-disable no-bitwise */
+import { deriveKeys, importKey, ratchet } from './crypto-utils';
+// We use a ringbuffer of keys so we can change them and still decode packets that were
+// encrypted with an old key. We use a size of 16 which corresponds to the four bits
+// in the frame trailer.
+const KEYRING_SIZE = 16;
+// We copy the first bytes of the VP8 payload unencrypted.
+// For keyframes this is 10 bytes, for non-keyframes (delta) 3. See
+//   https://tools.ietf.org/html/rfc6386#section-9.1
+// This allows the bridge to continue detecting keyframes (only one byte needed in the JVB)
+// and is also a bit easier for the VP8 decoder (i.e. it generates funny garbage pictures
+// instead of being unable to decode).
+// This is a bit for show and we might want to reduce to 1 unconditionally in the final version.
+//
+// For audio (where frame.type is not set) we do not encrypt the opus TOC byte:
+//   https://tools.ietf.org/html/rfc6716#section-3.1
+const UNENCRYPTED_BYTES = {
+    delta: 3,
+    key: 10,
+    undefined: 1 // frame.type is not set on audio
+};
+const ENCRYPTION_ALGORITHM = 'AES-GCM';
+/* We use a 96 bit IV for AES GCM. This is signalled in plain together with the
+ packet. See https://developer.mozilla.org/en-US/docs/Web/API/AesGcmParams */
+const IV_LENGTH = 12;
+const RATCHET_WINDOW_SIZE = 8;
+/**
+ * Per-participant context holding the cryptographic keys and
+ * encode/decode functions
+ */
+export class Context {
+    /**
+     * @param {Object} options
+     */
+    constructor({ sharedKey = false } = {}) {
+        // An array (ring) of keys that we use for sending and receiving.
+        this._cryptoKeyRing = new Array(KEYRING_SIZE);
+        // A pointer to the currently used key.
+        this._currentKeyIndex = -1;
+        this._sendCounts = new Map();
+        this._sharedKey = sharedKey;
+        this._enabled = false;
+    }
+    /**
+     * Function that will decrypt the given encoded frame. If the decryption fails, it will
+     * ratchet the key for up to RATCHET_WINDOW_SIZE times.
+     *
+     * @param {RTCEncodedVideoFrame|RTCEncodedAudioFrame} encodedFrame - Encoded video frame.
+     * @param {number} keyIndex - the index of the decryption data in _cryptoKeyRing array.
+     * @param {number} ratchetCount - the number of retries after ratcheting the key.
+     * @returns {Promise<RTCEncodedVideoFrame|RTCEncodedAudioFrame>} - The decrypted frame.
+     * @private
+     */
+    async _decryptFrame(encodedFrame, keyIndex, initialKey = undefined, ratchetCount = 0) {
+        const keyData = this._cryptoKeyRing[keyIndex];
+        const { encryptionKey } = keyData;
+        let { material } = keyData;
+        // Construct frame trailer. Similar to the frame header described in
+        // https://tools.ietf.org/html/draft-omara-sframe-00#section-4.2
+        // but we put it at the end.
+        //
+        // ---------+-------------------------+-+---------+----
+        // payload  |IV...(length = IV_LENGTH)|R|IV_LENGTH|KID |
+        // ---------+-------------------------+-+---------+----
+        try {
+            const frameHeader = new Uint8Array(encodedFrame.data, 0, UNENCRYPTED_BYTES[encodedFrame.type]);
+            const frameTrailer = new Uint8Array(encodedFrame.data, encodedFrame.data.byteLength - 2, 2);
+            const ivLength = frameTrailer[0];
+            const iv = new Uint8Array(encodedFrame.data, encodedFrame.data.byteLength - ivLength - frameTrailer.byteLength, ivLength);
+            const cipherTextStart = frameHeader.byteLength;
+            const cipherTextLength = encodedFrame.data.byteLength
+                - (frameHeader.byteLength + ivLength + frameTrailer.byteLength);
+            const plainText = await crypto.subtle.decrypt({
+                additionalData: new Uint8Array(encodedFrame.data, 0, frameHeader.byteLength),
+                iv,
+                name: 'AES-GCM'
+            }, encryptionKey, new Uint8Array(encodedFrame.data, cipherTextStart, cipherTextLength));
+            const newData = new ArrayBuffer(frameHeader.byteLength + plainText.byteLength);
+            const newUint8 = new Uint8Array(newData);
+            newUint8.set(new Uint8Array(encodedFrame.data, 0, frameHeader.byteLength));
+            newUint8.set(new Uint8Array(plainText), frameHeader.byteLength);
+            encodedFrame.data = newData;
+            return encodedFrame;
+        }
+        catch (error) {
+            if (this._sharedKey) {
+                return;
+            }
+            if (ratchetCount < RATCHET_WINDOW_SIZE) {
+                const currentKey = this._cryptoKeyRing[this._currentKeyIndex];
+                material = await importKey(await ratchet(material));
+                const newKey = await deriveKeys(material);
+                this._setKeys(newKey);
+                return await this._decryptFrame(encodedFrame, keyIndex, initialKey || currentKey, ratchetCount + 1);
+            }
+            /**
+             * Since the key it is first send and only afterwards actually used for encrypting, there were
+             * situations when the decrypting failed due to the fact that the received frame was not encrypted
+             * yet and ratcheting, of course, did not solve the problem. So if we fail RATCHET_WINDOW_SIZE times,
+             * we come back to the initial key.
+             */
+            this._setKeys(initialKey);
+            // TODO: notify the application about error status.
+        }
+    }
+    /**
+     * Construct the IV used for AES-GCM and sent (in plain) with the packet similar to
+     * https://tools.ietf.org/html/rfc7714#section-8.1
+     * It concatenates
+     * - the 32 bit synchronization source (SSRC) given on the encoded frame,
+     * - the 32 bit rtp timestamp given on the encoded frame,
+     * - a send counter that is specific to the SSRC. Starts at a random number.
+     * The send counter is essentially the pictureId but we currently have to implement this ourselves.
+     * There is no XOR with a salt. Note that this IV leaks the SSRC to the receiver but since this is
+     * randomly generated and SFUs may not rewrite this is considered acceptable.
+     * The SSRC is used to allow demultiplexing multiple streams with the same key, as described in
+     *   https://tools.ietf.org/html/rfc3711#section-4.1.1
+     * The RTP timestamp is 32 bits and advances by the codec clock rate (90khz for video, 48khz for
+     * opus audio) every second. For video it rolls over roughly every 13 hours.
+     * The send counter will advance at the frame rate (30fps for video, 50fps for 20ms opus audio)
+     * every second. It will take a long time to roll over.
+     *
+     * See also https://developer.mozilla.org/en-US/docs/Web/API/AesGcmParams
+     */
+    _makeIV(synchronizationSource, timestamp) {
+        const iv = new ArrayBuffer(IV_LENGTH);
+        const ivView = new DataView(iv);
+        // having to keep our own send count (similar to a picture id) is not ideal.
+        if (!this._sendCounts.has(synchronizationSource)) {
+            // Initialize with a random offset, similar to the RTP sequence number.
+            this._sendCounts.set(synchronizationSource, Math.floor(Math.random() * 0xFFFF));
+        }
+        const sendCount = this._sendCounts.get(synchronizationSource);
+        ivView.setUint32(0, synchronizationSource);
+        ivView.setUint32(4, timestamp);
+        ivView.setUint32(8, sendCount % 0xFFFF);
+        this._sendCounts.set(synchronizationSource, sendCount + 1);
+        return iv;
+    }
+    /**
+     * Sets a set of keys and resets the sendCount.
+     * decryption.
+     * @param {Object} keys set of keys.
+     * @param {Number} keyIndex optional
+     * @private
+     */
+    _setKeys(keys, keyIndex = -1) {
+        if (keyIndex >= 0) {
+            this._currentKeyIndex = keyIndex % this._cryptoKeyRing.length;
+        }
+        this._cryptoKeyRing[this._currentKeyIndex] = keys;
+    }
+    /**
+     * Enables or disables the E2EE context. When disabled packets are passed through.
+     * @param {boolean} enabled True if E2EE is enabled, false otherwise.
+     */
+    setEnabled(enabled) {
+        this._enabled = enabled;
+    }
+    /**
+     * Derives the different subkeys and starts using them for encryption or
+     * decryption.
+     * @param {Uint8Array|ArrayBuffer|false} key bytes. Pass false to disable.
+     * @param {Number} keyIndex
+     */
+    async setKey(key, keyIndex = -1) {
+        let newKey = false;
+        if (key) {
+            if (this._sharedKey) {
+                newKey = key;
+            }
+            else {
+                // Handle both Uint8Array and ArrayBuffer
+                let keyBuffer;
+                if (key instanceof ArrayBuffer) {
+                    keyBuffer = key;
+                }
+                else {
+                    // Convert Uint8Array to ArrayBuffer properly
+                    keyBuffer = new ArrayBuffer(key.length);
+                    new Uint8Array(keyBuffer).set(key);
+                }
+                const material = await importKey(keyBuffer);
+                newKey = await deriveKeys(material);
+            }
+        }
+        this._setKeys(newKey, keyIndex);
+    }
+    /**
+     * Function that will be injected in a stream and will encrypt the given encoded frames.
+     *
+     * @param {RTCEncodedVideoFrame|RTCEncodedAudioFrame} encodedFrame - Encoded video frame.
+     * @param {ITransformStreamDefaultController} controller - TransportStreamController.
+     *
+     * The VP8 payload descriptor described in
+     * https://tools.ietf.org/html/rfc7741#section-4.2
+     * is part of the RTP packet and not part of the frame and is not controllable by us.
+     * This is fine as the SFU keeps having access to it for routing.
+     *
+     * The encrypted frame is formed as follows:
+     * 1) Leave the first (10, 3, 1) bytes unencrypted, depending on the frame type and kind.
+     * 2) Form the GCM IV for the frame as described above.
+     * 3) Encrypt the rest of the frame using AES-GCM.
+     * 4) Allocate space for the encrypted frame.
+     * 5) Copy the unencrypted bytes to the start of the encrypted frame.
+     * 6) Append the ciphertext to the encrypted frame.
+     * 7) Append the IV.
+     * 8) Append a single byte for the key identifier.
+     * 9) Enqueue the encrypted frame for sending.
+     */
+    encodeFunction(encodedFrame, controller) {
+        if (!this._enabled) {
+            return controller.enqueue(encodedFrame);
+        }
+        const keyIndex = this._currentKeyIndex;
+        const currentKey = this._cryptoKeyRing[keyIndex];
+        if (currentKey) {
+            const iv = this._makeIV(encodedFrame.getMetadata().synchronizationSource, encodedFrame.timestamp);
+            // This is not encrypted and contains the VP8 payload descriptor or the Opus TOC byte.
+            const frameHeader = new Uint8Array(encodedFrame.data, 0, UNENCRYPTED_BYTES[encodedFrame.type]);
+            // Frame trailer contains the R|IV_LENGTH and key index
+            const frameTrailer = new Uint8Array(2);
+            frameTrailer[0] = IV_LENGTH;
+            frameTrailer[1] = keyIndex;
+            // Construct frame trailer. Similar to the frame header described in
+            // https://tools.ietf.org/html/draft-omara-sframe-00#section-4.2
+            // but we put it at the end.
+            //
+            // ---------+-------------------------+-+---------+----
+            // payload  |IV...(length = IV_LENGTH)|R|IV_LENGTH|KID |
+            // ---------+-------------------------+-+---------+----
+            return crypto.subtle.encrypt({
+                additionalData: new Uint8Array(encodedFrame.data, 0, frameHeader.byteLength),
+                iv,
+                name: ENCRYPTION_ALGORITHM
+            }, currentKey.encryptionKey, new Uint8Array(encodedFrame.data, UNENCRYPTED_BYTES[encodedFrame.type]))
+                .then(cipherText => {
+                const newData = new ArrayBuffer(frameHeader.byteLength + cipherText.byteLength
+                    + iv.byteLength + frameTrailer.byteLength);
+                const newUint8 = new Uint8Array(newData);
+                newUint8.set(frameHeader); // copy first bytes.
+                newUint8.set(new Uint8Array(cipherText), frameHeader.byteLength); // add ciphertext.
+                newUint8.set(new Uint8Array(iv), frameHeader.byteLength + cipherText.byteLength); // append IV.
+                newUint8.set(frameTrailer, frameHeader.byteLength + cipherText.byteLength + iv.byteLength); // append frame trailer.
+                encodedFrame.data = newData;
+                return controller.enqueue(encodedFrame);
+            }, e => {
+                // TODO: surface this to the app.
+                console.error(e);
+                // We are not enqueuing the frame here on purpose.
+            });
+        }
+    }
+    /**
+     * Function that will be injected in a stream and will decrypt the given encoded frames.
+     *
+     * @param {RTCEncodedVideoFrame|RTCEncodedAudioFrame} encodedFrame - Encoded video frame.
+     * @param {ITransformStreamDefaultController} controller - TransportStreamController.
+     */
+    async decodeFunction(encodedFrame, controller) {
+        if (!this._enabled) {
+            return controller.enqueue(encodedFrame);
+        }
+        const data = new Uint8Array(encodedFrame.data);
+        const keyIndex = data[encodedFrame.data.byteLength - 1];
+        if (this._cryptoKeyRing[keyIndex]) {
+            const decodedFrame = await this._decryptFrame(encodedFrame, keyIndex);
+            if (decodedFrame) {
+                controller.enqueue(decodedFrame);
+            }
+        }
+    }
+}
+//# sourceMappingURL=Context.js.map

package/dist/esm/modules/e2ee/Context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Context.js","sourceRoot":"","sources":["../../../../modules/e2ee/Context.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAE/B,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEhE,uFAAuF;AACvF,oFAAoF;AACpF,wBAAwB;AACxB,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB,0DAA0D;AAC1D,mEAAmE;AACnE,oDAAoD;AACpD,2FAA2F;AAC3F,yFAAyF;AACzF,sCAAsC;AACtC,gGAAgG;AAChG,EAAE;AACF,+EAA+E;AAC/E,oDAAoD;AACpD,MAAM,iBAAiB,GAAG;IACtB,KAAK,EAAE,CAAC;IACR,GAAG,EAAE,EAAE;IACP,SAAS,EAAE,CAAC,CAAC,iCAAiC;CACjD,CAAC;AACF,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAEvC;6EAC6E;AAC7E,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAsB9B;;;GAGG;AACH,MAAM,OAAO,OAAO;IAOhB;;OAEG;IACH,YAAY,EAAE,SAAS,GAAG,KAAK,KAAsB,EAAE;QACnD,iEAAiE;QACjE,IAAI,CAAC,cAAc,GAAG,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QAC9C,uCAAuC;QACvC,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;IAC1B,CAAC;IAGD;;;;;;;;;OASG;IACK,KAAK,CAAC,aAAa,CACnB,YAA2B,EAC3B,QAAgB,EAChB,aAAuC,SAAS,EAChD,eAAuB,CAAC;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAmB,CAAC;QAChE,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;QAClC,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAE3B,oEAAoE;QACpE,gEAAgE;QAChE,4BAA4B;QAC5B,EAAE;QACF,uDAAuD;QACvD,wDAAwD;QACxD,uDAAuD;QAEvD,IAAI,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/F,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAE5F,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,EAAE,GAAG,IAAI,UAAU,CACrB,YAAY,CAAC,IAAI,EACjB,YAAY,CAAC,IAAI,CAAC,UAAU,GAAG,QAAQ,GAAG,YAAY,CAAC,UAAU,EACjE,QAAQ,CAAC,CAAC;YAEd,MAAM,eAAe,GAAG,WAAW,CAAC,UAAU,CAAC;YAC/C,MAAM,gBAAgB,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU;kBAC3C,CAAC,WAAW,CAAC,UAAU,GAAG,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YAExE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC1C,cAAc,EAAE,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC;gBAC5E,EAAE;gBACF,IAAI,EAAE,SAAS;aAClB,EACG,aAAa,EACb,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC;YAE1E,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;YAC/E,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;YAEzC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;YAC3E,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;YAEhE,YAAY,CAAC,IAAI,GAAG,OAAO,CAAC;YAE5B,OAAO,YAAY,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,OAAO;YACX,CAAC;YAED,IAAI,YAAY,GAAG,mBAAmB,EAAE,CAAC;gBACrC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAmB,CAAC;gBAEhF,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAEpD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAE1C,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAEtB,OAAO,MAAM,IAAI,CAAC,aAAa,CAC3B,YAAY,EACZ,QAAQ,EACR,UAAU,IAAI,UAAU,EACxB,YAAY,GAAG,CAAC,CAAC,CAAC;YAC1B,CAAC;YAED;;;;;eAKG;YACH,IAAI,CAAC,QAAQ,CAAC,UAA4B,CAAC,CAAC;YAE5C,mDAAmD;QACvD,CAAC;IACL,CAAC;IAGD;;;;;;;;;;;;;;;;;;OAkBG;IAEK,OAAO,CAAC,qBAA6B,EAAE,SAAiB;QAC5D,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC;QAEhC,4EAA4E;QAC5E,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAC/C,uEAAuE;YACvE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,qBAAqB,CAAW,CAAC;QAExE,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC/B,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC,CAAC;QAExC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,qBAAqB,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;QAE3D,OAAO,EAAE,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACK,QAAQ,CAAC,IAA4B,EAAE,WAAmB,CAAC,CAAC;QAChE,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC,gBAAgB,GAAG,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAClE,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC;IACtD,CAAC;IAED;;;OAGG;IACI,UAAU,CAAC,OAAgB;QAC9B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC5B,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,MAAM,CAAC,GAAqC,EAAE,WAAmB,CAAC,CAAC;QAC5E,IAAI,MAAM,GAA2B,KAAK,CAAC;QAE3C,IAAI,GAAG,EAAE,CAAC;YACN,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,MAA2C,GAAG,GAAG,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACJ,yCAAyC;gBACzC,IAAI,SAAsB,CAAC;gBAE3B,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;oBAC7B,SAAS,GAAG,GAAG,CAAC;gBACpB,CAAC;qBAAM,CAAC;oBACJ,6CAA6C;oBAC7C,SAAS,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACxC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACvC,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,CAAC;gBAE5C,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;YACxC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACI,cAAc,CAAC,YAA2B,EAAE,UAA6C;QAC5F,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjB,OAAO,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAA2B,CAAC;QAE3E,IAAI,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,qBAAqB,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YAElG,sFAAsF;YACtF,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;YAE/F,uDAAuD;YACvD,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;YAEvC,YAAY,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC;YAC5B,YAAY,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;YAE3B,oEAAoE;YACpE,gEAAgE;YAChE,4BAA4B;YAC5B,EAAE;YACF,uDAAuD;YACvD,wDAAwD;YACxD,uDAAuD;YAEvD,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;gBACzB,cAAc,EAAE,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC;gBAC5E,EAAE;gBACF,IAAI,EAAE,oBAAoB;aAC7B,EAAE,UAAU,CAAC,aAAa,EAAE,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,EACzD,iBAAiB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;iBACzC,IAAI,CAAC,UAAU,CAAC,EAAE;gBACf,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,WAAW,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU;sBACxE,EAAE,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;gBAC/C,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;gBAEzC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,oBAAoB;gBAC/C,QAAQ,CAAC,GAAG,CACR,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB;gBAC3E,QAAQ,CAAC,GAAG,CACR,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa;gBACtF,QAAQ,CAAC,GAAG,CACJ,YAAY,EACZ,WAAW,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,wBAAwB;gBAEjG,YAAY,CAAC,IAAI,GAAG,OAAO,CAAC;gBAE5B,OAAO,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC5C,CAAC,EAAE,CAAC,CAAC,EAAE;gBACH,iCAAiC;gBACjC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAEjB,kDAAkD;YACtD,CAAC,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,cAAc,CAAC,YAA2B,EAAE,UAA6C;QAClG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjB,OAAO,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;QAExD,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CACzC,YAAY,EACZ,QAAQ,CAAC,CAAC;YAEd,IAAI,YAAY,EAAE,CAAC;gBACf,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACrC,CAAC;QACL,CAAC;IACL,CAAC;CAEJ"}

package/dist/esm/modules/e2ee/E2EEContext.js

@@ -0,0 +1,158 @@
+/* global RTCRtpScriptTransform */
+import { getLogger } from '@jitsi/logger';
+const logger = getLogger('e2ee:E2EEContext');
+// Flag to set on senders / receivers to avoid setting up the encryption transform
+// more than once.
+const kJitsiE2EE = Symbol('kJitsiE2EE');
+/**
+ * Context encapsulating the cryptography bits required for E2EE.
+ * This uses the WebRTC Insertable Streams API which is explained in
+ *   https://github.com/alvestrand/webrtc-media-streams/blob/master/explainer.md
+ * that provides access to the encoded frames and allows them to be transformed.
+ *
+ * The encoded frame format is explained below in the _encodeFunction method.
+ * High level design goals were:
+ * - do not require changes to existing SFUs and retain (VP8) metadata.
+ * - allow the SFU to rewrite SSRCs, timestamp, pictureId.
+ * - allow for the key to be rotated frequently.
+ */
+export default class E2EEcontext {
+    /**
+     * Build a new E2EE context instance, which will be used in a given conference.
+     * @param {boolean} [options.sharedKey] - whether there is a uniques key shared amoung all participants.
+     */
+    constructor({ sharedKey } = {}) {
+        // Determine the URL for the worker script. Relative URLs are relative to
+        // the entry point, not the script that launches the worker.
+        let baseUrl = '';
+        const ljm = document.querySelector('script[src*="lib-jitsi-meet"]');
+        if (ljm) {
+            const idx = ljm.src.lastIndexOf('/');
+            baseUrl = `${ljm.src.substring(0, idx)}/`;
+        }
+        let workerUrl = `${baseUrl}lib-jitsi-meet.e2ee-worker.js`;
+        // If there is no baseUrl then we create the worker in a normal way
+        // as you cant load scripts inside blobs from relative paths.
+        // See: https://www.html5rocks.com/en/tutorials/workers/basics/#toc-inlineworkers-loadingscripts
+        if (baseUrl && baseUrl !== '/') {
+            // Initialize the E2EE worker. In order to avoid CORS issues, start the worker and have it
+            // synchronously load the JS.
+            const workerBlob = new Blob([`importScripts("${workerUrl}");`], { type: 'application/javascript' });
+            workerUrl = window.URL.createObjectURL(workerBlob);
+        }
+        this._worker = new Worker(workerUrl, { name: 'E2EE Worker' });
+        this._worker.onerror = e => logger.error(e);
+        this._worker.postMessage({
+            operation: 'initialize',
+            sharedKey
+        });
+    }
+    /**
+     * Cleans up all state associated with the given participant. This is needed when a
+     * participant leaves the current conference.
+     *
+     * @param {string} participantId - The participant that just left.
+     */
+    cleanup(participantId) {
+        this._worker.postMessage({
+            operation: 'cleanup',
+            participantId
+        });
+    }
+    /**
+     * Cleans up all state associated with all participants in the conference. This is needed when disabling e2ee.
+     *
+     */
+    cleanupAll() {
+        this._worker.postMessage({
+            operation: 'cleanupAll'
+        });
+    }
+    /**
+     * Handles the given {@code RTCRtpReceiver} by creating a {@code TransformStream} which will inject
+     * a frame decoder.
+     *
+     * @param {RTCRtpReceiver} receiver - The receiver which will get the decoding function injected.
+     * @param {string} kind - The kind of track this receiver belongs to.
+     * @param {string} participantId - The participant id that this receiver belongs to.
+     */
+    handleReceiver(receiver, kind, participantId) {
+        if (receiver[kJitsiE2EE]) {
+            return;
+        }
+        receiver[kJitsiE2EE] = true;
+        if (window.RTCRtpScriptTransform) {
+            const options = {
+                operation: 'decode',
+                participantId
+            };
+            receiver.transform = new RTCRtpScriptTransform(this._worker, options);
+        }
+        else {
+            const receiverStreams = receiver.createEncodedStreams();
+            this._worker.postMessage({
+                operation: 'decode',
+                participantId,
+                readableStream: receiverStreams.readable,
+                writableStream: receiverStreams.writable
+            }, [receiverStreams.readable, receiverStreams.writable]);
+        }
+    }
+    /**
+     * Handles the given {@code RTCRtpSender} by creating a {@code TransformStream} which will inject
+     * a frame encoder.
+     *
+     * @param {RTCRtpSender} sender - The sender which will get the encoding function injected.
+     * @param {string} kind - The kind of track this sender belongs to.
+     * @param {string} participantId - The participant id that this sender belongs to.
+     */
+    handleSender(sender, kind, participantId) {
+        if (sender[kJitsiE2EE]) {
+            return;
+        }
+        sender[kJitsiE2EE] = true;
+        if (window.RTCRtpScriptTransform) {
+            const options = {
+                operation: 'encode',
+                participantId
+            };
+            sender.transform = new RTCRtpScriptTransform(this._worker, options);
+        }
+        else {
+            const senderStreams = sender.createEncodedStreams();
+            this._worker.postMessage({
+                operation: 'encode',
+                participantId,
+                readableStream: senderStreams.readable,
+                writableStream: senderStreams.writable
+            }, [senderStreams.readable, senderStreams.writable]);
+        }
+    }
+    /**
+     * Set the E2EE enabled state.
+     *
+     * @param {boolean} enabled - whether E2EE is enabled or not.
+     */
+    setEnabled(enabled) {
+        this._worker.postMessage({
+            enabled,
+            operation: 'setEnabled'
+        });
+    }
+    /**
+     * Set the E2EE key for the specified participant.
+     *
+     * @param {string} participantId - the ID of the participant who's key we are setting.
+     * @param {Uint8Array | boolean} key - they key for the given participant.
+     * @param {Number} keyIndex - the key index.
+     */
+    setKey(participantId, key, keyIndex) {
+        this._worker.postMessage({
+            key,
+            keyIndex,
+            operation: 'setKey',
+            participantId
+        });
+    }
+}
+//# sourceMappingURL=E2EEContext.js.map

package/dist/esm/modules/e2ee/E2EEContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"E2EEContext.js","sourceRoot":"","sources":["../../../../modules/e2ee/E2EEContext.js"],"names":[],"mappings":"AAAA,kCAAkC;AAElC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C,MAAM,MAAM,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAC;AAE7C,kFAAkF;AAClF,kBAAkB;AAClB,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;AAExC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,OAAO,OAAO,WAAW;IAC5B;;;OAGG;IACH,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE;QAC1B,yEAAyE;QACzE,4DAA4D;QAC5D,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,QAAQ,CAAC,aAAa,CAAC,+BAA+B,CAAC,CAAC;QAEpE,IAAI,GAAG,EAAE,CAAC;YACN,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAErC,OAAO,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;QAC9C,CAAC;QAED,IAAI,SAAS,GAAG,GAAG,OAAO,+BAA+B,CAAC;QAE1D,mEAAmE;QACnE,6DAA6D;QAC7D,gGAAgG;QAChG,IAAI,OAAO,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YAC7B,0FAA0F;YAC1F,6BAA6B;YAC7B,MAAM,UAAU,GACV,IAAI,IAAI,CAAC,CAAE,kBAAkB,SAAS,KAAK,CAAE,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,CAAC;YAEzF,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QAE9D,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE5C,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACrB,SAAS,EAAE,YAAY;YACvB,SAAS;SACZ,CAAC,CAAC;IACP,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,aAAa;QACjB,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACrB,SAAS,EAAE,SAAS;YACpB,aAAa;SAChB,CAAC,CAAC;IACP,CAAC;IAED;;;OAGG;IACH,UAAU;QACN,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACrB,SAAS,EAAE,YAAY;SAC1B,CAAC,CAAC;IACP,CAAC;IAED;;;;;;;OAOG;IACH,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,aAAa;QACxC,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACvB,OAAO;QACX,CAAC;QACD,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QAE5B,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG;gBACZ,SAAS,EAAE,QAAQ;gBACnB,aAAa;aAChB,CAAC;YAEF,QAAQ,CAAC,SAAS,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACJ,MAAM,eAAe,GAAG,QAAQ,CAAC,oBAAoB,EAAE,CAAC;YAExD,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBACrB,SAAS,EAAE,QAAQ;gBACnB,aAAa;gBACb,cAAc,EAAE,eAAe,CAAC,QAAQ;gBACxC,cAAc,EAAE,eAAe,CAAC,QAAQ;aAC3C,EAAE,CAAE,eAAe,CAAC,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAE,CAAC,CAAC;QAC/D,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa;QACpC,IAAI,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACrB,OAAO;QACX,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;QAE1B,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG;gBACZ,SAAS,EAAE,QAAQ;gBACnB,aAAa;aAChB,CAAC;YAEF,MAAM,CAAC,SAAS,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACJ,MAAM,aAAa,GAAG,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAEpD,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;gBACrB,SAAS,EAAE,QAAQ;gBACnB,aAAa;gBACb,cAAc,EAAE,aAAa,CAAC,QAAQ;gBACtC,cAAc,EAAE,aAAa,CAAC,QAAQ;aACzC,EAAE,CAAE,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,QAAQ,CAAE,CAAC,CAAC;QAC3D,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,OAAO;QACd,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACrB,OAAO;YACP,SAAS,EAAE,YAAY;SAC1B,CAAC,CAAC;IACP,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,aAAa,EAAE,GAAG,EAAE,QAAQ;QAC/B,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YACrB,GAAG;YACH,QAAQ;YACR,SAAS,EAAE,QAAQ;YACnB,aAAa;SAChB,CAAC,CAAC;IACP,CAAC;CACJ"}

package/dist/esm/modules/e2ee/E2EEErrors.js

@@ -0,0 +1,10 @@
+export var E2EEErrors;
+(function (E2EEErrors) {
+    E2EEErrors["E2EE_SAS_CHANNEL_VERIFICATION_FAILED"] = "e2ee.sas.channel-verification-failed";
+    E2EEErrors["E2EE_SAS_COMMITMENT_MISMATCHED"] = "e2ee.sas.commitment-mismatched";
+    E2EEErrors["E2EE_SAS_INVALID_SAS_VERIFICATION"] = "e2ee.sas.invalid-sas-verification";
+    E2EEErrors["E2EE_SAS_KEYS_MAC_MISMATCH"] = "e2ee.sas.keys-mac-mismatch";
+    E2EEErrors["E2EE_SAS_MAC_MISMATCH"] = "e2ee.sas.mac-mismatch";
+    E2EEErrors["E2EE_SAS_MISSING_KEY"] = "e2ee.sas.missing-key";
+})(E2EEErrors || (E2EEErrors = {}));
+//# sourceMappingURL=E2EEErrors.js.map

package/dist/esm/modules/e2ee/E2EEErrors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"E2EEErrors.js","sourceRoot":"","sources":["../../../../modules/e2ee/E2EEErrors.ts"],"names":[],"mappings":"AAAA,MAAM,CAAN,IAAY,UAOX;AAPD,WAAY,UAAU;IAClB,2FAA6E,CAAA;IAC7E,+EAAiE,CAAA;IACjE,qFAAuE,CAAA;IACvE,uEAAyD,CAAA;IACzD,6DAA+C,CAAA;IAC/C,2DAA6C,CAAA;AACjD,CAAC,EAPW,UAAU,KAAV,UAAU,QAOrB"}

package/dist/esm/modules/e2ee/E2EEncryption.js

@@ -0,0 +1,87 @@
+import browser from '../browser';
+import { ExternallyManagedKeyHandler } from './ExternallyManagedKeyHandler';
+import { ManagedKeyHandler } from './ManagedKeyHandler';
+import { OlmAdapter } from './OlmAdapter';
+/**
+ * This module integrates {@link KeyHandler} with {@link JitsiConference} in order to enable E2E encryption.
+ */
+export class E2EEncryption {
+    /**
+     * A constructor.
+     * @param {JitsiConference} conference - The conference instance for which E2E encryption is to be enabled.
+     */
+    constructor(conference) {
+        const { e2ee = {} } = conference.options.config;
+        this._externallyManaged = e2ee.externallyManagedKey;
+        if (this._externallyManaged) {
+            this._keyHandler = new ExternallyManagedKeyHandler(conference);
+        }
+        else {
+            this._keyHandler = new ManagedKeyHandler(conference);
+        }
+    }
+    /**
+     * Indicates if E2EE is supported in the current platform.
+     *
+     * @param {object} config - Global configuration.
+     * @returns {boolean}
+     */
+    static isSupported(config) {
+        const { e2ee = {} } = config;
+        if (!e2ee.externallyManagedKey && !OlmAdapter.isSupported()) {
+            return false;
+        }
+        if (e2ee.disabled || config.testing?.disableE2EE) {
+            return false;
+        }
+        return browser.supportsInsertableStreams()
+            || (config.enableEncodedTransformSupport && browser.supportsEncodedTransform());
+    }
+    /**
+     * Indicates whether E2EE is currently enabled or not.
+     *
+     * @returns {boolean}
+     */
+    isEnabled() {
+        return this._keyHandler.isEnabled();
+    }
+    /**
+     * Enables / disables End-To-End encryption.
+     *
+     * @param {boolean} enabled - whether E2EE should be enabled or not.
+     * @returns {void}
+     */
+    async setEnabled(enabled) {
+        await this._keyHandler.setEnabled(enabled);
+    }
+    /**
+     * Sets the key and index for End-to-End encryption.
+     *
+     * @param {CryptoKey} [keyInfo.encryptionKey] - encryption key.
+     * @param {Number} [keyInfo.index] - the index of the encryption key.
+     * @returns {void}
+     */
+    setEncryptionKey(keyInfo) {
+        this._keyHandler.setKey(keyInfo);
+    }
+    /**
+     * Starts the verification process of the participant
+     *
+     * @param {Participant} - participant to be verified.
+     * @returns {void}
+     */
+    startVerification(participant) {
+        this._keyHandler.sasVerification?.startVerification(participant);
+    }
+    /**
+     * Marks the channel as verified
+     *
+     * @param {Participant} - participant to be verified.
+     * @param {boolean} isVerified - whether the verification was succesfull.
+     * @returns {void}
+     */
+    markParticipantVerified(participant, isVerified) {
+        this._keyHandler.sasVerification?.markParticipantVerified(participant, isVerified);
+    }
+}
+//# sourceMappingURL=E2EEncryption.js.map

package/dist/esm/modules/e2ee/E2EEncryption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"E2EEncryption.js","sourceRoot":"","sources":["../../../../modules/e2ee/E2EEncryption.js"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,YAAY,CAAC;AAEjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C;;GAEG;AACH,MAAM,OAAO,aAAa;IACtB;;;OAGG;IACH,YAAY,UAAU;QAClB,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;QAEhD,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,oBAAoB,CAAC;QAEpD,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1B,IAAI,CAAC,WAAW,GAAG,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC;QACnE,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,WAAW,GAAG,IAAI,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACzD,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,WAAW,CAAC,MAAM;QACrB,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;QAE7B,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;YAC/C,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,OAAO,OAAO,CAAC,yBAAyB,EAAE;eAC/B,CAAC,MAAM,CAAC,6BAA6B,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED;;;;OAIG;IACH,SAAS;QACL,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU,CAAC,OAAO;QACpB,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,OAAO;QACpB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,WAAW;QACzB,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,iBAAiB,CAAC,WAAW,CAAC,CAAC;IACrE,CAAC;IAED;;;;;;OAMG;IACH,uBAAuB,CAAC,WAAW,EAAE,UAAU;QAC3C,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,uBAAuB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACvF,CAAC;CACJ"}

package/dist/esm/modules/e2ee/ExternallyManagedKeyHandler.js

@@ -0,0 +1,24 @@
+import { KeyHandler } from './KeyHandler';
+/**
+ * This module integrates {@link E2EEContext} with {external} in order to set the keys for encryption.
+ */
+export class ExternallyManagedKeyHandler extends KeyHandler {
+    /**
+     * Build a new ExternallyManagedKeyHandler instance, which will be used in a given conference.
+     * @param conference - the current conference.
+     */
+    constructor(conference) {
+        super(conference, { sharedKey: true });
+    }
+    /**
+     * Sets the key and index for End-to-End encryption.
+     *
+     * @param {CryptoKey} [keyInfo.encryptionKey] - encryption key.
+     * @param {Number} [keyInfo.index] - the index of the encryption key.
+     * @returns {void}
+     */
+    setKey(keyInfo) {
+        this.e2eeCtx.setKey(undefined, { encryptionKey: keyInfo.encryptionKey }, keyInfo.index);
+    }
+}
+//# sourceMappingURL=ExternallyManagedKeyHandler.js.map

package/dist/esm/modules/e2ee/ExternallyManagedKeyHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExternallyManagedKeyHandler.js","sourceRoot":"","sources":["../../../../modules/e2ee/ExternallyManagedKeyHandler.js"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C;;GAEG;AACH,MAAM,OAAO,2BAA4B,SAAQ,UAAU;IACvD;;;OAGG;IACH,YAAY,UAAU;QAClB,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,OAAO;QACV,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5F,CAAC;CACJ"}