@bitgo-beta/sdk-api 1.10.1-beta.205 → 1.10.1-beta.2051

package/dist/test/unit/decryptV1.browser.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=decryptV1.browser.d.ts.map

package/dist/test/unit/decryptV1.browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decryptV1.browser.d.ts","sourceRoot":"","sources":["../../../test/unit/decryptV1.browser.ts"],"names":[],"mappings":""}

package/dist/test/unit/decryptV1.browser.js

@@ -0,0 +1,133 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const sjcl = __importStar(require("@bitgo-beta/sjcl"));
+const assert_1 = __importDefault(require("assert"));
+const src_1 = require("../../src");
+const keycard_1 = require("./fixtures/keycard");
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const browserCrypto = require('crypto-browserify');
+/**
+ * sjcl.encrypt's typings require salt/iv, but the runtime picks them from
+ * sjcl.random when omitted. Feed real random words so the call type-checks
+ * without an `as` cast.
+ */
+function sjclEncrypt(password, plaintext, params) {
+    const salt = sjcl.random.randomWords(2);
+    const iv = sjcl.random.randomWords(4);
+    return sjcl.encrypt(password, plaintext, { ...params, salt, iv });
+}
+/**
+ * Exercises the real `decryptV1WithCrypto` code path with `crypto-browserify`
+ * injected as the crypto module. This is exactly what webpack bundles for the
+ * browser (its `crypto` shim), so a green test here proves the browser build
+ * stays byte-compatible with SJCL-produced envelopes and the Node path.
+ */
+function decryptV1Browser(password, ciphertext) {
+    return (0, src_1.decryptV1WithCrypto)(password, ciphertext, browserCrypto);
+}
+describe('decryptV1 browser path (crypto-browserify shim)', () => {
+    const password = 'myPassword';
+    const plaintext = 'Hello, Browser!';
+    it('produces the same plaintext as sjcl.decrypt', async () => {
+        const ciphertext = sjclEncrypt(password, plaintext, { iter: 10000, ks: 256, ts: 64, mode: 'ccm' });
+        assert_1.default.strictEqual(await decryptV1Browser(password, ciphertext), sjcl.decrypt(password, ciphertext));
+    });
+    it('handles adata (AAD)', async () => {
+        const ciphertext = sjclEncrypt(password, plaintext, {
+            iter: 10000,
+            ks: 256,
+            ts: 64,
+            mode: 'ccm',
+            adata: 'ctx-A',
+        });
+        assert_1.default.strictEqual(await decryptV1Browser(password, ciphertext), plaintext);
+    });
+    it('handles UTF-8 password + plaintext', async () => {
+        const utf8Password = 'pässwörd中文🔐';
+        const utf8Plaintext = 'passphrase: 秘密キー ☃🔑';
+        const ciphertext = sjclEncrypt(utf8Password, utf8Plaintext, { iter: 10000, ks: 256, ts: 64, mode: 'ccm' });
+        assert_1.default.strictEqual(await decryptV1Browser(utf8Password, ciphertext), utf8Plaintext);
+    });
+    it('handles large plaintext (>64 KiB, forces L=3 nonce framing)', async () => {
+        const large = 'x'.repeat(70000);
+        const ciphertext = sjclEncrypt(password, large, { iter: 1000, ks: 256, ts: 64, mode: 'ccm' });
+        assert_1.default.strictEqual(await decryptV1Browser(password, ciphertext), large);
+    });
+    it('handles aes-128 envelopes', async () => {
+        const ciphertext = sjclEncrypt(password, plaintext, { iter: 10000, ks: 128, ts: 64, mode: 'ccm' });
+        assert_1.default.strictEqual(await decryptV1Browser(password, ciphertext), plaintext);
+    });
+    it('handles 128-bit tag envelopes', async () => {
+        const ciphertext = sjclEncrypt(password, plaintext, { iter: 10000, ks: 256, ts: 128, mode: 'ccm' });
+        assert_1.default.strictEqual(await decryptV1Browser(password, ciphertext), plaintext);
+    });
+    it('rejects wrong password', async () => {
+        const ciphertext = sjclEncrypt(password, plaintext, { iter: 10000, ks: 256, ts: 64, mode: 'ccm' });
+        await assert_1.default.rejects(() => decryptV1Browser('wrongPassword', ciphertext));
+    });
+    it('rejects envelope with iter above cap before running PBKDF2', async () => {
+        const ciphertext = sjclEncrypt(password, plaintext, { iter: 10000, ks: 256, ts: 64, mode: 'ccm' });
+        const envelope = JSON.parse(ciphertext);
+        envelope.iter = src_1.V1_MAX_ITER + 1;
+        const start = Date.now();
+        await assert_1.default.rejects(() => decryptV1Browser(password, JSON.stringify(envelope)), /iter/);
+        assert_1.default.ok(Date.now() - start < 100, 'must reject before any KDF work');
+    });
+    it('parity across 50 randomised inputs', async () => {
+        const { randomBytes } = await Promise.resolve().then(() => __importStar(require('crypto')));
+        for (let i = 0; i < 50; i++) {
+            const pw = randomBytes(16).toString('hex');
+            const pt = randomBytes(1 + Math.floor(Math.random() * 500)).toString('base64');
+            const ciphertext = sjclEncrypt(pw, pt, { iter: 1000, ks: 256, ts: 64, mode: 'ccm' });
+            assert_1.default.strictEqual(await decryptV1Browser(pw, ciphertext), pt, `iteration ${i}`);
+        }
+    });
+    it('Box A + Box B: shim decrypt matches SJCL byte-for-byte', async () => {
+        for (const [label, ct] of [
+            ['A', keycard_1.KEYCARD_BOX_A],
+            ['B', keycard_1.KEYCARD_BOX_B],
+        ]) {
+            const sjclResult = sjcl.decrypt(keycard_1.KEYCARD_PASSWORD, ct);
+            const shimResult = await decryptV1Browser(keycard_1.KEYCARD_PASSWORD, ct);
+            assert_1.default.strictEqual(shimResult, sjclResult, `Box ${label} mismatch`);
+            assert_1.default.ok(shimResult.startsWith(keycard_1.KEYCARD_PLAINTEXT_PREFIX));
+        }
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/unit/decryptV1.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=decryptV1.d.ts.map

package/dist/test/unit/decryptV1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decryptV1.d.ts","sourceRoot":"","sources":["../../../test/unit/decryptV1.ts"],"names":[],"mappings":""}

package/dist/test/unit/decryptV1.js

@@ -0,0 +1,230 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const sjcl = __importStar(require("@bitgo-beta/sjcl"));
+const assert_1 = __importDefault(require("assert"));
+const crypto_1 = require("crypto");
+const src_1 = require("../../src");
+const keycard_1 = require("./fixtures/keycard");
+/**
+ * sjcl.encrypt's typings require salt/iv, but the runtime picks them from
+ * sjcl.random when omitted. Feed real random words so the call type-checks
+ * without an `as` cast.
+ */
+function sjclEncrypt(password, plaintext, params) {
+    const salt = sjcl.random.randomWords(2); // 8 bytes
+    const iv = sjcl.random.randomWords(4); // 16 bytes
+    return sjcl.encrypt(password, plaintext, { ...params, salt, iv });
+}
+describe('decryptV1 (native, SJCL-free)', () => {
+    const password = 'myPassword';
+    const plaintext = 'Hello, World!';
+    describe('parity with SJCL', () => {
+        it('matches sjcl.decrypt output for the same envelope', async () => {
+            const ciphertext = await (0, src_1.encrypt)(password, plaintext, { encryptionVersion: 1 });
+            assert_1.default.strictEqual(await (0, src_1.decryptV1)(password, ciphertext), sjcl.decrypt(password, ciphertext));
+        });
+        it('decrypts with adata (AAD)', async () => {
+            const ciphertext = sjclEncrypt(password, plaintext, {
+                iter: 10000,
+                ks: 256,
+                ts: 64,
+                mode: 'ccm',
+                adata: 'context-A',
+            });
+            assert_1.default.strictEqual(await (0, src_1.decryptV1)(password, ciphertext), plaintext);
+        });
+        it('decrypts UTF-8 password + plaintext', async () => {
+            const utf8Password = 'pässwörd中文🔐';
+            const utf8Plaintext = 'passphrase: 秘密キー ☃🔑';
+            const ciphertext = sjclEncrypt(utf8Password, utf8Plaintext, { iter: 10000, ks: 256, ts: 64, mode: 'ccm' });
+            assert_1.default.strictEqual(await (0, src_1.decryptV1)(utf8Password, ciphertext), utf8Plaintext);
+        });
+        it('decrypts large plaintext (>64 KiB, forces L=3 nonce framing)', async () => {
+            const large = 'x'.repeat(70000);
+            const ciphertext = sjclEncrypt(password, large, { iter: 1000, ks: 256, ts: 64, mode: 'ccm' });
+            assert_1.default.strictEqual(await (0, src_1.decryptV1)(password, ciphertext), large);
+        });
+        it('decrypts aes-128 envelopes', async () => {
+            const ciphertext = sjclEncrypt(password, plaintext, { iter: 10000, ks: 128, ts: 64, mode: 'ccm' });
+            assert_1.default.strictEqual(await (0, src_1.decryptV1)(password, ciphertext), plaintext);
+        });
+        it('decrypts envelopes with 128-bit tag size', async () => {
+            const ciphertext = sjclEncrypt(password, plaintext, { iter: 10000, ks: 256, ts: 128, mode: 'ccm' });
+            assert_1.default.strictEqual(await (0, src_1.decryptV1)(password, ciphertext), plaintext);
+        });
+        it('parity across 50 randomised inputs', async () => {
+            for (let i = 0; i < 50; i++) {
+                const pw = (0, crypto_1.randomBytes)(16).toString('hex');
+                const pt = (0, crypto_1.randomBytes)(1 + Math.floor(Math.random() * 500)).toString('base64');
+                const ciphertext = sjclEncrypt(pw, pt, { iter: 1000, ks: 256, ts: 64, mode: 'ccm' });
+                assert_1.default.strictEqual(await (0, src_1.decryptV1)(pw, ciphertext), pt, `iteration ${i}`);
+            }
+        });
+    });
+    describe('failure modes', () => {
+        it('throws on wrong password', async () => {
+            const ciphertext = await (0, src_1.encrypt)(password, plaintext, { encryptionVersion: 1 });
+            await assert_1.default.rejects(() => (0, src_1.decryptV1)('wrongPassword', ciphertext));
+        });
+        it('throws on invalid JSON', async () => {
+            await assert_1.default.rejects(() => (0, src_1.decryptV1)(password, 'not-json'), /invalid JSON envelope/);
+        });
+        it('rejects malformed envelope (representative codec check)', async () => {
+            const envelope = JSON.parse(await (0, src_1.encrypt)(password, plaintext, { encryptionVersion: 1 }));
+            envelope.mode = 'gcm';
+            await assert_1.default.rejects(() => (0, src_1.decryptV1)(password, JSON.stringify(envelope)), /invalid envelope/);
+        });
+        it('rejects tampered ciphertext (auth-tag mismatch)', async () => {
+            const ciphertext = await (0, src_1.encrypt)(password, plaintext, { encryptionVersion: 1 });
+            const envelope = JSON.parse(ciphertext);
+            const tampered = Buffer.from(envelope.ct, 'base64');
+            tampered[0] ^= 0x01;
+            envelope.ct = tampered.toString('base64');
+            await assert_1.default.rejects(() => (0, src_1.decryptV1)(password, JSON.stringify(envelope)));
+        });
+    });
+    describe('iter cap enforcement', () => {
+        it('rejects an envelope with iter above V1_MAX_ITER before running PBKDF2', async () => {
+            const envelope = JSON.parse(await (0, src_1.encrypt)(password, plaintext, { encryptionVersion: 1 }));
+            envelope.iter = src_1.V1_MAX_ITER + 1;
+            const start = Date.now();
+            await assert_1.default.rejects(() => (0, src_1.decryptV1)(password, JSON.stringify(envelope)), /iter/);
+            assert_1.default.ok(Date.now() - start < 100, 'must reject before any KDF work');
+        });
+    });
+    describe('real BitGo keycard parity', () => {
+        it('Box A: native decrypt matches SJCL byte-for-byte', async () => {
+            const sjclResult = sjcl.decrypt(keycard_1.KEYCARD_PASSWORD, keycard_1.KEYCARD_BOX_A);
+            const nativeResult = await (0, src_1.decryptV1)(keycard_1.KEYCARD_PASSWORD, keycard_1.KEYCARD_BOX_A);
+            assert_1.default.strictEqual(nativeResult, sjclResult);
+            assert_1.default.strictEqual(nativeResult.length, keycard_1.KEYCARD_BOX_A_LENGTH);
+            assert_1.default.ok(nativeResult.startsWith(keycard_1.KEYCARD_PLAINTEXT_PREFIX));
+        });
+        it('Box B: native decrypt matches SJCL byte-for-byte', async () => {
+            const sjclResult = sjcl.decrypt(keycard_1.KEYCARD_PASSWORD, keycard_1.KEYCARD_BOX_B);
+            const nativeResult = await (0, src_1.decryptV1)(keycard_1.KEYCARD_PASSWORD, keycard_1.KEYCARD_BOX_B);
+            assert_1.default.strictEqual(nativeResult, sjclResult);
+            assert_1.default.strictEqual(nativeResult.length, keycard_1.KEYCARD_BOX_B_LENGTH);
+            assert_1.default.ok(nativeResult.startsWith(keycard_1.KEYCARD_PLAINTEXT_PREFIX));
+        });
+    });
+    describe('SJCL fallback behavior', () => {
+        // Rollout contract:
+        // - Native success -> no warn, no fallback.
+        // - Iter cap violation -> rethrown (no fallback), preserves DoS protection.
+        // - Both engines fail (e.g. wrong password) -> SJCL error rethrown, NO warn.
+        // - Native fails, SJCL succeeds -> return SJCL result + warn (engines disagree).
+        // eslint-disable-next-line no-console
+        const originalWarn = console.warn;
+        let warnings = [];
+        beforeEach(() => {
+            warnings = [];
+            // eslint-disable-next-line no-console
+            console.warn = (...args) => {
+                warnings.push(args.map((a) => (typeof a === 'string' ? a : JSON.stringify(a))).join(' '));
+            };
+        });
+        afterEach(() => {
+            // eslint-disable-next-line no-console
+            console.warn = originalWarn;
+        });
+        it('success path emits no console.warn', async () => {
+            const ct = await (0, src_1.encrypt)(password, plaintext, { encryptionVersion: 1 });
+            await (0, src_1.decrypt)(password, ct);
+            assert_1.default.deepStrictEqual(warnings, []);
+        });
+        it('iter cap violation rethrows and does not warn', async () => {
+            const envelope = JSON.parse(await (0, src_1.encrypt)(password, plaintext, { encryptionVersion: 1 }));
+            envelope.iter = src_1.V1_MAX_ITER + 1;
+            await assert_1.default.rejects(() => (0, src_1.decrypt)(password, JSON.stringify(envelope)), /iter/);
+            assert_1.default.deepStrictEqual(warnings, []);
+        });
+        it('wrong password does not warn (both engines fail, SJCL error rethrown)', async () => {
+            const ct = await (0, src_1.encrypt)(password, plaintext, { encryptionVersion: 1 });
+            await assert_1.default.rejects(() => (0, src_1.decrypt)('wrong', ct));
+            assert_1.default.deepStrictEqual(warnings, []);
+        });
+        it('warns and returns SJCL result when native fails but SJCL succeeds', async () => {
+            const ct = await (0, src_1.encrypt)(password, plaintext, { encryptionVersion: 1 });
+            const brokenNative = async () => {
+                throw new Error('unsupported algorithm');
+            };
+            const result = await (0, src_1.decryptV1WithFallback)(password, ct, brokenNative);
+            assert_1.default.strictEqual(result, plaintext);
+            assert_1.default.strictEqual(warnings.length, 1);
+            assert_1.default.ok(warnings[0].includes('SJCL fallback succeeded'));
+        });
+    });
+    describe('browser runtime (isBrowser = true)', () => {
+        it('skips native and decrypts via SJCL without warning', async () => {
+            const ct = await (0, src_1.encrypt)(password, plaintext, { encryptionVersion: 1 });
+            const neverCalled = async () => {
+                throw new Error('native should not be attempted in the browser');
+            };
+            // eslint-disable-next-line no-console
+            const originalWarn = console.warn;
+            const warnings = [];
+            // eslint-disable-next-line no-console
+            console.warn = (...args) => {
+                warnings.push(args.join(' '));
+            };
+            try {
+                const result = await (0, src_1.decryptV1WithFallback)(password, ct, neverCalled, true);
+                assert_1.default.strictEqual(result, plaintext);
+                assert_1.default.deepStrictEqual(warnings, []);
+            }
+            finally {
+                // eslint-disable-next-line no-console
+                console.warn = originalWarn;
+            }
+        });
+        it('still enforces the iter cap before running PBKDF2', async () => {
+            const envelope = JSON.parse(await (0, src_1.encrypt)(password, plaintext, { encryptionVersion: 1 }));
+            envelope.iter = src_1.V1_MAX_ITER + 1;
+            const start = Date.now();
+            await assert_1.default.rejects(() => (0, src_1.decryptV1WithFallback)(password, JSON.stringify(envelope), src_1.decryptV1, true), /iter/);
+            assert_1.default.ok(Date.now() - start < 100, 'must reject before any KDF work');
+        });
+        it('rejects wrong password via SJCL auth failure', async () => {
+            const ct = await (0, src_1.encrypt)(password, plaintext, { encryptionVersion: 1 });
+            await assert_1.default.rejects(() => (0, src_1.decryptV1WithFallback)('wrongPassword', ct, src_1.decryptV1, true));
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/unit/encrypt.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=encrypt.d.ts.map

package/dist/test/unit/encrypt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt.d.ts","sourceRoot":"","sources":["../../../test/unit/encrypt.ts"],"names":[],"mappings":""}