internxt-crypto 0.0.10-alpha → 0.0.11
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -4
- package/dist/asymmetric-crypto-BORmLhnx.js +143 -0
- package/dist/asymmetric-crypto-BORmLhnx.js.map +1 -0
- package/dist/asymmetric-crypto-CyXsV4XT.mjs +102 -0
- package/dist/asymmetric-crypto-CyXsV4XT.mjs.map +1 -0
- package/dist/asymmetric-crypto.d.mts +9 -3
- package/dist/asymmetric-crypto.d.ts +9 -3
- package/dist/asymmetric-crypto.js +8 -92
- package/dist/asymmetric-crypto.mjs +2 -84
- package/dist/chunk-DWirmd9C.mjs +18 -0
- package/dist/chunk-Dt-PWiN7.js +60 -0
- package/dist/constants-Ccp21E03.js +208 -0
- package/dist/constants-Ccp21E03.js.map +1 -0
- package/dist/constants-kTeX-2T0.mjs +34 -0
- package/dist/constants-kTeX-2T0.mjs.map +1 -0
- package/dist/constants.d.mts +5 -11
- package/dist/constants.d.ts +5 -11
- package/dist/constants.js +30 -79
- package/dist/constants.mjs +2 -41
- package/dist/derive-key-Be7hS-cN.mjs +751 -0
- package/dist/derive-key-Be7hS-cN.mjs.map +1 -0
- package/dist/derive-key-CBf2WxJd.js +2513 -0
- package/dist/derive-key-CBf2WxJd.js.map +1 -0
- package/dist/derive-key.d.mts +14 -8
- package/dist/derive-key.d.ts +14 -8
- package/dist/derive-key.js +15 -795
- package/dist/derive-key.mjs +5 -783
- package/dist/email-crypto-BrT98taw.js +617 -0
- package/dist/email-crypto-BrT98taw.js.map +1 -0
- package/dist/email-crypto-DJUEjTxA.mjs +534 -0
- package/dist/email-crypto-DJUEjTxA.mjs.map +1 -0
- package/dist/email-crypto.d.mts +58 -78
- package/dist/email-crypto.d.ts +58 -78
- package/dist/email-crypto.js +17 -1409
- package/dist/email-crypto.mjs +8 -1381
- package/dist/email-search.d.mts +39 -32
- package/dist/email-search.d.ts +39 -32
- package/dist/email-search.js +572 -540
- package/dist/email-search.js.map +1 -1
- package/dist/email-search.mjs +567 -539
- package/dist/email-search.mjs.map +1 -1
- package/dist/hash-BoqwNkcd.js +190 -0
- package/dist/hash-BoqwNkcd.js.map +1 -0
- package/dist/hash-CXeGAwai.mjs +131 -0
- package/dist/hash-CXeGAwai.mjs.map +1 -0
- package/dist/hash.d.mts +21 -15
- package/dist/hash.d.ts +21 -15
- package/dist/hash.js +11 -95
- package/dist/hash.mjs +2 -84
- package/dist/index-CQqgKsbX.d.ts +50 -0
- package/dist/index-CintVUbp.d.ts +97 -0
- package/dist/index-D5pBU_A5.d.mts +50 -0
- package/dist/index-MaOov-ag.d.mts +97 -0
- package/dist/index.d.mts +35 -18
- package/dist/index.d.ts +35 -18
- package/dist/index.js +103 -2685
- package/dist/index.mjs +15 -2538
- package/dist/keystore-crypto-B4yCVo9l.js +182 -0
- package/dist/keystore-crypto-B4yCVo9l.js.map +1 -0
- package/dist/keystore-crypto-Bjgriq9h.mjs +159 -0
- package/dist/keystore-crypto-Bjgriq9h.mjs.map +1 -0
- package/dist/keystore-crypto.d.mts +20 -46
- package/dist/keystore-crypto.d.ts +20 -46
- package/dist/keystore-crypto.js +11 -530
- package/dist/keystore-crypto.mjs +9 -501
- package/dist/keystore-service.d.mts +44 -78
- package/dist/keystore-service.d.ts +44 -78
- package/dist/keystore-service.js +113 -340
- package/dist/keystore-service.js.map +1 -1
- package/dist/keystore-service.mjs +107 -335
- package/dist/keystore-service.mjs.map +1 -1
- package/dist/post-quantum-crypto-CAi-cEkV.js +189 -0
- package/dist/post-quantum-crypto-CAi-cEkV.js.map +1 -0
- package/dist/post-quantum-crypto-Vv34t6gX.mjs +154 -0
- package/dist/post-quantum-crypto-Vv34t6gX.mjs.map +1 -0
- package/dist/post-quantum-crypto.d.mts +2 -72
- package/dist/post-quantum-crypto.d.ts +2 -72
- package/dist/post-quantum-crypto.js +13 -92
- package/dist/post-quantum-crypto.mjs +2 -89
- package/dist/storage-service-BgIK2aYZ.js +82 -0
- package/dist/storage-service-BgIK2aYZ.js.map +1 -0
- package/dist/storage-service-CubCbhY2.mjs +65 -0
- package/dist/storage-service-CubCbhY2.mjs.map +1 -0
- package/dist/storage-service.d.mts +2 -53
- package/dist/storage-service.d.ts +2 -53
- package/dist/storage-service.js +12 -68
- package/dist/storage-service.mjs +2 -66
- package/dist/symmetric-crypto-CrdS1Che.mjs +197 -0
- package/dist/symmetric-crypto-CrdS1Che.mjs.map +1 -0
- package/dist/symmetric-crypto-D65zB396.js +244 -0
- package/dist/symmetric-crypto-D65zB396.js.map +1 -0
- package/dist/symmetric-crypto.d.mts +12 -8
- package/dist/symmetric-crypto.d.ts +12 -8
- package/dist/symmetric-crypto.js +10 -142
- package/dist/symmetric-crypto.mjs +3 -133
- package/dist/types-52g887Zi.js +16 -0
- package/dist/types-52g887Zi.js.map +1 -0
- package/dist/types-BiEoleqw.mjs +10 -0
- package/dist/types-BiEoleqw.mjs.map +1 -0
- package/dist/types-Ds3ivE9W.d.ts +104 -0
- package/dist/types-DwQJtrTx.d.mts +104 -0
- package/dist/types.d.mts +2 -102
- package/dist/types.d.ts +2 -102
- package/dist/types.js +2 -13
- package/dist/types.mjs +2 -11
- package/dist/utils-CNs3cyDj.js +263 -0
- package/dist/utils-CNs3cyDj.js.map +1 -0
- package/dist/utils-DS04iUcX.mjs +173 -0
- package/dist/utils-DS04iUcX.mjs.map +1 -0
- package/dist/utils.d.mts +37 -78
- package/dist/utils.d.ts +37 -78
- package/dist/utils.js +16 -313
- package/dist/utils.mjs +2 -272
- package/package.json +15 -90
- package/dist/asymmetric-crypto.js.map +0 -1
- package/dist/asymmetric-crypto.mjs.map +0 -1
- package/dist/constants.js.map +0 -1
- package/dist/constants.mjs.map +0 -1
- package/dist/derive-key.js.map +0 -1
- package/dist/derive-key.mjs.map +0 -1
- package/dist/email-crypto.js.map +0 -1
- package/dist/email-crypto.mjs.map +0 -1
- package/dist/email-service.d.mts +0 -38
- package/dist/email-service.d.ts +0 -38
- package/dist/email-service.js +0 -154
- package/dist/email-service.js.map +0 -1
- package/dist/email-service.mjs +0 -147
- package/dist/email-service.mjs.map +0 -1
- package/dist/hash.js.map +0 -1
- package/dist/hash.mjs.map +0 -1
- package/dist/index.js.map +0 -1
- package/dist/index.mjs.map +0 -1
- package/dist/keystore-crypto.js.map +0 -1
- package/dist/keystore-crypto.mjs.map +0 -1
- package/dist/kyber768-B87rMQ7u.d.mts +0 -30
- package/dist/kyber768-B87rMQ7u.d.ts +0 -30
- package/dist/post-quantum-crypto.js.map +0 -1
- package/dist/post-quantum-crypto.mjs.map +0 -1
- package/dist/storage-service.js.map +0 -1
- package/dist/storage-service.mjs.map +0 -1
- package/dist/symmetric-crypto.js.map +0 -1
- package/dist/symmetric-crypto.mjs.map +0 -1
- package/dist/types.js.map +0 -1
- package/dist/types.mjs.map +0 -1
- package/dist/utils-BDaK_d6T.d.ts +0 -114
- package/dist/utils-v34IRTIx.d.mts +0 -114
- package/dist/utils.js.map +0 -1
- package/dist/utils.mjs.map +0 -1
package/dist/index.js
CHANGED
|
@@ -1,2698 +1,116 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
var CONTEXT_ENC_KEYSTORE = "CRYPTO library 2025-07-30 16:18:03 key for opening encryption keys keystore";
|
|
50
|
-
var CONTEXT_RECOVERY = "CRYPTO library 2025-07-30 16:20:00 key for account recovery";
|
|
51
|
-
var CONTEXT_INDEX = "CRYPTO library 2025-07-30 17:20:00 key for protecting current search indices";
|
|
52
|
-
var CONTEXT_DERIVE = "CRYPTO library 2025-08-27 17:08:00 derive one key from two keys";
|
|
53
|
-
var PREFIX_MEDIA_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:29:00 prefix for commitment to media keys";
|
|
54
|
-
var PREFIX_PUBLIC_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:30:00 prefix for commitment to public keys";
|
|
55
|
-
var PREFIX_IDENTITY_KEY_COMMITMENT = "CRYPTO library 2025-08-26 18:45:00 prefix for commitment to identity keys";
|
|
56
|
-
var ARGON2ID_PARALLELISM = 3;
|
|
57
|
-
var ARGON2ID_ITERATIONS = 4;
|
|
58
|
-
var ARGON2ID_MEMORY_SIZE = 65536;
|
|
59
|
-
var ARGON2ID_SALT_BYTE_LENGTH = 16;
|
|
60
|
-
var ARGON2ID_OUTPUT_BYTE_LENGTH = 32;
|
|
61
|
-
var IDENTITY_KEYSTORE_TAG = "Identity keystore";
|
|
62
|
-
var ENCRYPTION_KEYSTORE_TAG = "Encryption keystore";
|
|
63
|
-
var RECOVERY_KEYSTORE_TAG = "Key recovery keystroe";
|
|
64
|
-
var INDEX_KEYSTORE_TAG = "Current encrypted indices";
|
|
65
|
-
var KYBER512_PUBLIC_KEY_LENGTH = 800;
|
|
66
|
-
var KYBER512_SECRET_KEY_LENGTH = 1632;
|
|
67
|
-
var KYBER768_PUBLIC_KEY_LENGTH = 1184;
|
|
68
|
-
var KYBER768_SECRET_KEY_LENGTH = 2400;
|
|
69
|
-
var KYBER1024_PUBLIC_KEY_LENGTH = 1568;
|
|
70
|
-
var KYBER1024_SECRET_KEY_LENGTH = 3168;
|
|
71
|
-
var KYBER_SEED_LENGTH = 64;
|
|
72
|
-
var HASH_BIT_LEN = 256;
|
|
73
|
-
var MAX_CACHE_SIZE = 6e8;
|
|
74
|
-
var MAX_EMAIL_PER_BATCH = 100;
|
|
75
|
-
var DB_LABEL = "email";
|
|
76
|
-
var DB_VERSION = 1;
|
|
77
|
-
|
|
78
|
-
// src/asymmetric-crypto/ellipticCurve.ts
|
|
79
|
-
async function deriveSecretKey(otherUserPublicKey, ownPrivateKey) {
|
|
80
|
-
try {
|
|
81
|
-
const result = await crypto.subtle.deriveBits(
|
|
82
|
-
{
|
|
83
|
-
name: ECC_ALGORITHM,
|
|
84
|
-
public: otherUserPublicKey
|
|
85
|
-
},
|
|
86
|
-
ownPrivateKey,
|
|
87
|
-
AES_KEY_BIT_LENGTH
|
|
88
|
-
);
|
|
89
|
-
return new Uint8Array(result);
|
|
90
|
-
} catch (error) {
|
|
91
|
-
throw new Error("Failed to derive elliptic curve secret key", { cause: error });
|
|
92
|
-
}
|
|
93
|
-
}
|
|
94
|
-
|
|
95
|
-
// src/asymmetric-crypto/keys.ts
|
|
96
|
-
async function generateEccKeys() {
|
|
97
|
-
try {
|
|
98
|
-
return await crypto.subtle.generateKey(
|
|
99
|
-
{
|
|
100
|
-
name: ECC_ALGORITHM
|
|
101
|
-
},
|
|
102
|
-
true,
|
|
103
|
-
["deriveBits"]
|
|
104
|
-
);
|
|
105
|
-
} catch (error) {
|
|
106
|
-
throw new Error("Failed to generate elliptic curve key pair", { cause: error });
|
|
107
|
-
}
|
|
108
|
-
}
|
|
109
|
-
async function exportPublicKey(key) {
|
|
110
|
-
try {
|
|
111
|
-
const result = await crypto.subtle.exportKey("spki", key);
|
|
112
|
-
return new Uint8Array(result);
|
|
113
|
-
} catch (error) {
|
|
114
|
-
throw new Error("Failed to export public key", { cause: error });
|
|
115
|
-
}
|
|
116
|
-
}
|
|
117
|
-
async function importPublicKey(spkiKeyData) {
|
|
118
|
-
try {
|
|
119
|
-
return await crypto.subtle.importKey(
|
|
120
|
-
"spki",
|
|
121
|
-
spkiKeyData,
|
|
122
|
-
{
|
|
123
|
-
name: ECC_ALGORITHM
|
|
124
|
-
},
|
|
125
|
-
true,
|
|
126
|
-
[]
|
|
127
|
-
);
|
|
128
|
-
} catch (error) {
|
|
129
|
-
throw new Error("Failed to import public key", { cause: error });
|
|
130
|
-
}
|
|
131
|
-
}
|
|
132
|
-
async function exportPrivateKey(key) {
|
|
133
|
-
try {
|
|
134
|
-
const result = await crypto.subtle.exportKey("pkcs8", key);
|
|
135
|
-
return new Uint8Array(result);
|
|
136
|
-
} catch (error) {
|
|
137
|
-
throw new Error("Failed to export private key", { cause: error });
|
|
138
|
-
}
|
|
139
|
-
}
|
|
140
|
-
async function importPrivateKey(pkcs8KeyData) {
|
|
141
|
-
try {
|
|
142
|
-
return await crypto.subtle.importKey(
|
|
143
|
-
"pkcs8",
|
|
144
|
-
pkcs8KeyData,
|
|
145
|
-
{
|
|
146
|
-
name: ECC_ALGORITHM
|
|
147
|
-
},
|
|
148
|
-
true,
|
|
149
|
-
["deriveBits"]
|
|
150
|
-
);
|
|
151
|
-
} catch (error) {
|
|
152
|
-
throw new Error("Failed to import private key", { cause: error });
|
|
153
|
-
}
|
|
154
|
-
}
|
|
155
|
-
function uint8ArrayToHex(array) {
|
|
156
|
-
return utils_js.bytesToHex(array);
|
|
157
|
-
}
|
|
158
|
-
function UTF8ToUint8(str) {
|
|
159
|
-
return new TextEncoder().encode(str);
|
|
160
|
-
}
|
|
161
|
-
function uint8ToUTF8(array) {
|
|
162
|
-
return new TextDecoder().decode(array);
|
|
163
|
-
}
|
|
164
|
-
function hexToUint8Array(hex) {
|
|
165
|
-
return utils_js.hexToBytes(hex);
|
|
166
|
-
}
|
|
167
|
-
function uint8ArrayToBase64(buffer) {
|
|
168
|
-
const array = Uint16Array.from(buffer);
|
|
169
|
-
const binaryString = new TextDecoder("UTF-16").decode(array);
|
|
170
|
-
return btoa(binaryString);
|
|
171
|
-
}
|
|
172
|
-
function base64ToUint8Array(str) {
|
|
173
|
-
const binaryString = atob(str);
|
|
174
|
-
const len = binaryString.length;
|
|
175
|
-
const array = new Uint8Array(len);
|
|
176
|
-
for (let i = 0; i < len; i++) {
|
|
177
|
-
array[i] = binaryString.charCodeAt(i);
|
|
178
|
-
}
|
|
179
|
-
return new Uint8Array(array.buffer);
|
|
180
|
-
}
|
|
181
|
-
|
|
182
|
-
// src/utils/aesConverters.ts
|
|
183
|
-
function ciphertextToBase64(encryptedMessage) {
|
|
184
|
-
try {
|
|
185
|
-
const ivBase64 = uint8ArrayToBase64(encryptedMessage.iv);
|
|
186
|
-
const ciphertextBase64 = uint8ArrayToBase64(encryptedMessage.ciphertext);
|
|
187
|
-
const json = JSON.stringify({ ciphertext: ciphertextBase64, iv: ivBase64 });
|
|
188
|
-
const base64 = btoa(json);
|
|
189
|
-
return base64;
|
|
190
|
-
} catch (error) {
|
|
191
|
-
throw new Error("Failed to convert ciphertext to base64", { cause: error });
|
|
192
|
-
}
|
|
193
|
-
}
|
|
194
|
-
function base64ToCiphertext(base64) {
|
|
195
|
-
try {
|
|
196
|
-
const json = atob(base64);
|
|
197
|
-
const obj = JSON.parse(json);
|
|
198
|
-
const iv = base64ToUint8Array(obj.iv);
|
|
199
|
-
const ciphertext = base64ToUint8Array(obj.ciphertext);
|
|
200
|
-
const result = {
|
|
201
|
-
ciphertext,
|
|
202
|
-
iv
|
|
203
|
-
};
|
|
204
|
-
return result;
|
|
205
|
-
} catch (error) {
|
|
206
|
-
throw new Error("Failed to convert base64 to ciphertext", { cause: error });
|
|
207
|
-
}
|
|
208
|
-
}
|
|
209
|
-
|
|
210
|
-
// src/utils/keyConverters.ts
|
|
211
|
-
async function identityKeysToBase64(keys) {
|
|
212
|
-
try {
|
|
213
|
-
const pkArray = await exportPublicKey(keys.userPublicKey);
|
|
214
|
-
const skArray = await exportPrivateKey(keys.userPrivateKey);
|
|
215
|
-
const json = JSON.stringify({
|
|
216
|
-
userPublicKey: uint8ArrayToBase64(pkArray),
|
|
217
|
-
userPrivateKey: uint8ArrayToBase64(skArray)
|
|
218
|
-
});
|
|
219
|
-
const base64 = btoa(json);
|
|
220
|
-
return base64;
|
|
221
|
-
} catch (error) {
|
|
222
|
-
throw new Error("Failed to convert identity keys to base64", { cause: error });
|
|
223
|
-
}
|
|
224
|
-
}
|
|
225
|
-
async function encryptionKeysToBase64(keys) {
|
|
226
|
-
try {
|
|
227
|
-
const pkArray = await exportPublicKey(keys.userPublicKey);
|
|
228
|
-
const skArray = await exportPrivateKey(keys.userPrivateKey);
|
|
229
|
-
const json = JSON.stringify({
|
|
230
|
-
userPublicKey: uint8ArrayToBase64(pkArray),
|
|
231
|
-
userPrivateKey: uint8ArrayToBase64(skArray),
|
|
232
|
-
userPublicKyberKey: uint8ArrayToBase64(keys.userPublicKyberKey),
|
|
233
|
-
userPrivateKyberKey: uint8ArrayToBase64(keys.userPrivateKyberKey)
|
|
234
|
-
});
|
|
235
|
-
const base64 = btoa(json);
|
|
236
|
-
return base64;
|
|
237
|
-
} catch (error) {
|
|
238
|
-
throw new Error("Failed to convert identity keys to base64", { cause: error });
|
|
239
|
-
}
|
|
240
|
-
}
|
|
241
|
-
function encryptedKeystoreToBase64(keystore) {
|
|
242
|
-
try {
|
|
243
|
-
const ciphertext = ciphertextToBase64(keystore.encryptedKeys);
|
|
244
|
-
const json = JSON.stringify({
|
|
245
|
-
userID: keystore.userID,
|
|
246
|
-
type: keystore.type.toString(),
|
|
247
|
-
encryptedKeys: ciphertext
|
|
248
|
-
});
|
|
249
|
-
const base64 = btoa(json);
|
|
250
|
-
return base64;
|
|
251
|
-
} catch (error) {
|
|
252
|
-
throw new Error("Failed to convert encrypted keystore to base64", { cause: error });
|
|
253
|
-
}
|
|
254
|
-
}
|
|
255
|
-
async function base64ToIdentityKeys(base64) {
|
|
256
|
-
try {
|
|
257
|
-
const json = atob(base64);
|
|
258
|
-
const obj = JSON.parse(json);
|
|
259
|
-
const pkArray = base64ToUint8Array(obj.userPublicKey);
|
|
260
|
-
const skArray = base64ToUint8Array(obj.userPrivateKey);
|
|
261
|
-
const pkCryptoKey = await importPublicKey(pkArray);
|
|
262
|
-
const skCryptoKey = await importPrivateKey(skArray);
|
|
263
|
-
const result = {
|
|
264
|
-
userPublicKey: pkCryptoKey,
|
|
265
|
-
userPrivateKey: skCryptoKey
|
|
266
|
-
};
|
|
267
|
-
return result;
|
|
268
|
-
} catch (error) {
|
|
269
|
-
throw new Error("Failed convert base64 to idenity key", { cause: error });
|
|
270
|
-
}
|
|
271
|
-
}
|
|
272
|
-
async function base64ToEncryptionKeys(base64) {
|
|
273
|
-
try {
|
|
274
|
-
const json = atob(base64);
|
|
275
|
-
const obj = JSON.parse(json);
|
|
276
|
-
const pkArray = base64ToUint8Array(obj.userPublicKey);
|
|
277
|
-
const skArray = base64ToUint8Array(obj.userPrivateKey);
|
|
278
|
-
const pkCryptoKey = await importPublicKey(pkArray);
|
|
279
|
-
const skCryptoKey = await importPrivateKey(skArray);
|
|
280
|
-
const pkKyber = base64ToUint8Array(obj.userPublicKyberKey);
|
|
281
|
-
const skKyber = base64ToUint8Array(obj.userPrivateKyberKey);
|
|
282
|
-
const result = {
|
|
283
|
-
userPublicKey: pkCryptoKey,
|
|
284
|
-
userPrivateKey: skCryptoKey,
|
|
285
|
-
userPublicKyberKey: pkKyber,
|
|
286
|
-
userPrivateKyberKey: skKyber
|
|
287
|
-
};
|
|
288
|
-
return result;
|
|
289
|
-
} catch (error) {
|
|
290
|
-
throw new Error("Failed to convert base64 to encryption key", { cause: error });
|
|
291
|
-
}
|
|
292
|
-
}
|
|
293
|
-
function base64ToEncryptedKeystore(base64) {
|
|
294
|
-
try {
|
|
295
|
-
const json = atob(base64);
|
|
296
|
-
const obj = JSON.parse(json);
|
|
297
|
-
const ciphertext = base64ToCiphertext(obj.encryptedKeys);
|
|
298
|
-
const result = {
|
|
299
|
-
userID: obj.userID,
|
|
300
|
-
type: obj.type,
|
|
301
|
-
encryptedKeys: ciphertext
|
|
302
|
-
};
|
|
303
|
-
return result;
|
|
304
|
-
} catch (error) {
|
|
305
|
-
throw new Error("Failed to convert base64 to encrypted keystore", { cause: error });
|
|
306
|
-
}
|
|
307
|
-
}
|
|
308
|
-
function mediaKeysToBase64(keys) {
|
|
309
|
-
try {
|
|
310
|
-
const json = JSON.stringify({
|
|
311
|
-
olmKey: uint8ArrayToBase64(keys.olmKey),
|
|
312
|
-
pqKey: uint8ArrayToBase64(keys.pqKey),
|
|
313
|
-
index: keys.index.toString(),
|
|
314
|
-
userID: keys.userID
|
|
315
|
-
});
|
|
316
|
-
const base64 = btoa(json);
|
|
317
|
-
return base64;
|
|
318
|
-
} catch (error) {
|
|
319
|
-
throw new Error("Failed to convert media keys to base64", { cause: error });
|
|
320
|
-
}
|
|
321
|
-
}
|
|
322
|
-
async function base64ToMediaKeys(base64) {
|
|
323
|
-
try {
|
|
324
|
-
const json = atob(base64);
|
|
325
|
-
const obj = JSON.parse(json);
|
|
326
|
-
const result = {
|
|
327
|
-
olmKey: base64ToUint8Array(obj.olmKey),
|
|
328
|
-
pqKey: base64ToUint8Array(obj.pqKey),
|
|
329
|
-
index: Number(obj.index),
|
|
330
|
-
userID: obj.userID
|
|
331
|
-
};
|
|
332
|
-
return result;
|
|
333
|
-
} catch (error) {
|
|
334
|
-
throw new Error("Failed convert base64 to media keys", { cause: error });
|
|
335
|
-
}
|
|
336
|
-
}
|
|
337
|
-
async function base64ToPublicKey(base64) {
|
|
338
|
-
try {
|
|
339
|
-
const json = atob(base64);
|
|
340
|
-
const obj = JSON.parse(json);
|
|
341
|
-
const eccPublicKeyBytes = base64ToUint8Array(obj.eccPublicKey);
|
|
342
|
-
const eccPublicKey = await importPublicKey(eccPublicKeyBytes);
|
|
343
|
-
const kyberPublicKey = base64ToUint8Array(obj.kyberPublicKey);
|
|
344
|
-
return {
|
|
345
|
-
eccPublicKey,
|
|
346
|
-
kyberPublicKey
|
|
347
|
-
};
|
|
348
|
-
} catch (error) {
|
|
349
|
-
throw new Error("Failed to convert base64 to PublicKeys", { cause: error });
|
|
350
|
-
}
|
|
351
|
-
}
|
|
352
|
-
async function publicKeyToBase64(key) {
|
|
353
|
-
try {
|
|
354
|
-
const eccPublicKeyArray = await exportPublicKey(key.eccPublicKey);
|
|
355
|
-
const json = JSON.stringify({
|
|
356
|
-
eccPublicKey: uint8ArrayToBase64(eccPublicKeyArray),
|
|
357
|
-
kyberPublicKey: uint8ArrayToBase64(key.kyberPublicKey)
|
|
358
|
-
});
|
|
359
|
-
const base64 = btoa(json);
|
|
360
|
-
return base64;
|
|
361
|
-
} catch (error) {
|
|
362
|
-
throw new Error("Failed to convert key of the type PublicKeys to base64", { cause: error });
|
|
363
|
-
}
|
|
364
|
-
}
|
|
365
|
-
function genMnemonic(bits) {
|
|
366
|
-
return bip39__namespace.generateMnemonic(english.wordlist, bits);
|
|
367
|
-
}
|
|
368
|
-
function hashData(data) {
|
|
369
|
-
try {
|
|
370
|
-
const hasher = blake3_js.blake3.create();
|
|
371
|
-
for (const d of data) {
|
|
372
|
-
hasher.update(d);
|
|
373
|
-
}
|
|
374
|
-
return hasher.digest();
|
|
375
|
-
} catch (error) {
|
|
376
|
-
throw new Error("Failed to compute hash", { cause: error });
|
|
377
|
-
}
|
|
378
|
-
}
|
|
379
|
-
function keyedHash(hashKey, data) {
|
|
380
|
-
try {
|
|
381
|
-
const hasher = blake3_js.blake3.create({ key: hashKey });
|
|
382
|
-
for (const d of data) {
|
|
383
|
-
hasher.update(d);
|
|
384
|
-
}
|
|
385
|
-
return hasher.digest();
|
|
386
|
-
} catch (error) {
|
|
387
|
-
throw new Error("Failed to compute hash", { cause: error });
|
|
388
|
-
}
|
|
389
|
-
}
|
|
390
|
-
function getBytesFromData(bytes, data) {
|
|
391
|
-
try {
|
|
392
|
-
const hasher = blake3_js.blake3.create({ dkLen: bytes });
|
|
393
|
-
for (const chunk of data) {
|
|
394
|
-
hasher.update(chunk);
|
|
395
|
-
}
|
|
396
|
-
return hasher.digest();
|
|
397
|
-
} catch (error) {
|
|
398
|
-
throw new Error("Failed to get bytes from data", { cause: error });
|
|
399
|
-
}
|
|
400
|
-
}
|
|
401
|
-
function getBytesFromDataHex(bytes, data) {
|
|
402
|
-
try {
|
|
403
|
-
const hash = getBytesFromData(bytes, data);
|
|
404
|
-
return utils_js.bytesToHex(hash);
|
|
405
|
-
} catch (error) {
|
|
406
|
-
throw new Error("Failed to get bytes from data", { cause: error });
|
|
407
|
-
}
|
|
408
|
-
}
|
|
409
|
-
function getBytesFromString(bytes, value) {
|
|
410
|
-
return blake3_js.blake3(utils_js.utf8ToBytes(value), { dkLen: bytes });
|
|
411
|
-
}
|
|
412
|
-
function computeMac(keyMaterial, data) {
|
|
413
|
-
try {
|
|
414
|
-
const key = getBytesFromString(AES_KEY_BIT_LENGTH / 8, keyMaterial);
|
|
415
|
-
const hash = keyedHash(key, data);
|
|
416
|
-
return utils_js.bytesToHex(hash);
|
|
417
|
-
} catch (error) {
|
|
418
|
-
throw new Error("Failed to compute mac", { cause: error });
|
|
419
|
-
}
|
|
420
|
-
}
|
|
421
|
-
|
|
422
|
-
// src/symmetric-crypto/keys.ts
|
|
423
|
-
async function importSymmetricCryptoKey(keyData) {
|
|
424
|
-
return crypto.subtle.importKey(
|
|
425
|
-
KEY_FORMAT,
|
|
426
|
-
new Uint8Array(keyData),
|
|
427
|
-
{
|
|
428
|
-
name: AES_ALGORITHM,
|
|
429
|
-
length: AES_KEY_BIT_LENGTH
|
|
430
|
-
},
|
|
431
|
-
true,
|
|
432
|
-
["encrypt", "decrypt"]
|
|
433
|
-
);
|
|
434
|
-
}
|
|
435
|
-
async function exportSymmetricCryptoKey(key) {
|
|
436
|
-
try {
|
|
437
|
-
const rawKey = await crypto.subtle.exportKey(KEY_FORMAT, key);
|
|
438
|
-
return new Uint8Array(rawKey);
|
|
439
|
-
} catch (error) {
|
|
440
|
-
throw new Error("Failed to export symmetric CryptoKey", { cause: error });
|
|
441
|
-
}
|
|
442
|
-
}
|
|
443
|
-
async function genSymmetricCryptoKey() {
|
|
444
|
-
return crypto.subtle.generateKey(
|
|
445
|
-
{
|
|
446
|
-
name: AES_ALGORITHM,
|
|
447
|
-
length: AES_KEY_BIT_LENGTH
|
|
448
|
-
},
|
|
449
|
-
true,
|
|
450
|
-
["encrypt", "decrypt"]
|
|
451
|
-
);
|
|
452
|
-
}
|
|
453
|
-
function genSymmetricKey() {
|
|
454
|
-
try {
|
|
455
|
-
const key = new Uint8Array(AES_KEY_BIT_LENGTH / 8);
|
|
456
|
-
crypto.getRandomValues(key);
|
|
457
|
-
return key;
|
|
458
|
-
} catch (error) {
|
|
459
|
-
throw new Error("Failed to generate symmetric key", { cause: error });
|
|
460
|
-
}
|
|
461
|
-
}
|
|
462
|
-
async function deriveSymmetricCryptoKey(keyMaterial) {
|
|
463
|
-
try {
|
|
464
|
-
const hashBuffer = await getBytesFromString(AES_KEY_BIT_LENGTH / 8, keyMaterial);
|
|
465
|
-
return importSymmetricCryptoKey(hashBuffer);
|
|
466
|
-
} catch (error) {
|
|
467
|
-
throw new Error("Failed to derive CryptoKey from the given key material", { cause: error });
|
|
468
|
-
}
|
|
469
|
-
}
|
|
470
|
-
async function createNISTbasedIV(freeField) {
|
|
471
|
-
try {
|
|
472
|
-
if (!freeField) {
|
|
473
|
-
return utils_js$1.randomBytes(IV_LEN_BYTES);
|
|
474
|
-
}
|
|
475
|
-
const iv = new Uint8Array(16);
|
|
476
|
-
const randFiled = utils_js$1.randomBytes(12);
|
|
477
|
-
iv.set(randFiled, 0);
|
|
478
|
-
const freeFiledFixedLength = await getBytesFromString(4, freeField);
|
|
479
|
-
iv.set(freeFiledFixedLength, 12);
|
|
480
|
-
return iv;
|
|
481
|
-
} catch (error) {
|
|
482
|
-
throw new Error("Failed to create IV", { cause: error });
|
|
483
|
-
}
|
|
484
|
-
}
|
|
485
|
-
async function makeAuxFixedLength(aux) {
|
|
486
|
-
return getBytesFromString(AUX_LEN / 8, aux);
|
|
487
|
-
}
|
|
488
|
-
async function encryptMessage(message, encryptionKey, iv, additionalData) {
|
|
489
|
-
try {
|
|
490
|
-
const encrypted = await crypto.subtle.encrypt(
|
|
491
|
-
{ name: AES_ALGORITHM, iv, additionalData },
|
|
492
|
-
encryptionKey,
|
|
493
|
-
message
|
|
494
|
-
);
|
|
495
|
-
return new Uint8Array(encrypted);
|
|
496
|
-
} catch (error) {
|
|
497
|
-
throw new Error("Failed to encrypt symmetrically", { cause: error });
|
|
498
|
-
}
|
|
499
|
-
}
|
|
500
|
-
async function decryptMessage(ciphertext, iv, encryptionKey, additionalData) {
|
|
501
|
-
try {
|
|
502
|
-
const decrypted = await crypto.subtle.decrypt(
|
|
503
|
-
{ name: AES_ALGORITHM, iv, additionalData },
|
|
504
|
-
encryptionKey,
|
|
505
|
-
ciphertext
|
|
506
|
-
);
|
|
507
|
-
return new Uint8Array(decrypted);
|
|
508
|
-
} catch (error) {
|
|
509
|
-
throw new Error("Failed to decrypt symmetrically", { cause: error });
|
|
510
|
-
}
|
|
511
|
-
}
|
|
512
|
-
|
|
513
|
-
// src/symmetric-crypto/aes.ts
|
|
514
|
-
async function encryptSymmetrically(encryptionKey, message, aux, freeField) {
|
|
515
|
-
try {
|
|
516
|
-
const iv = await createNISTbasedIV(freeField);
|
|
517
|
-
const additionalData = await makeAuxFixedLength(aux);
|
|
518
|
-
const ciphertext = await encryptMessage(message, encryptionKey, iv, additionalData);
|
|
519
|
-
return { ciphertext, iv };
|
|
520
|
-
} catch (error) {
|
|
521
|
-
throw new Error("Failed to encrypt symmetrically", { cause: error });
|
|
522
|
-
}
|
|
523
|
-
}
|
|
524
|
-
async function decryptSymmetrically(encryptionKey, encryptedMessage, aux) {
|
|
525
|
-
try {
|
|
526
|
-
const additionalData = await makeAuxFixedLength(aux);
|
|
527
|
-
const result = await decryptMessage(
|
|
528
|
-
encryptedMessage.ciphertext,
|
|
529
|
-
encryptedMessage.iv,
|
|
530
|
-
encryptionKey,
|
|
531
|
-
additionalData
|
|
532
|
-
);
|
|
533
|
-
return result;
|
|
534
|
-
} catch (error) {
|
|
535
|
-
throw new Error("Failed to decrypt symmetrically", { cause: error });
|
|
536
|
-
}
|
|
537
|
-
}
|
|
538
|
-
|
|
539
|
-
// src/derive-key/deriveKeysFromKey.ts
|
|
540
|
-
function deriveSymmetricKeyFromContext(context, baseKey) {
|
|
541
|
-
return blake3_js.blake3(baseKey, { context: UTF8ToUint8(context) });
|
|
542
|
-
}
|
|
543
|
-
async function deriveSymmetricCryptoKeyFromContext(context, baseKey) {
|
|
544
|
-
try {
|
|
545
|
-
if (baseKey.length != AES_KEY_BIT_LENGTH / 8) {
|
|
546
|
-
throw new Error(`Base key length must be exactly ${AES_KEY_BIT_LENGTH / 8} bytes`);
|
|
547
|
-
}
|
|
548
|
-
if (!context) {
|
|
549
|
-
throw new Error("Context is empry");
|
|
550
|
-
}
|
|
551
|
-
const keyBytes = deriveSymmetricKeyFromContext(context, baseKey);
|
|
552
|
-
const key = await importSymmetricCryptoKey(keyBytes);
|
|
553
|
-
return key;
|
|
554
|
-
} catch (error) {
|
|
555
|
-
throw new Error("Failed to derive CryptoKey from base key and context", { cause: error });
|
|
556
|
-
}
|
|
557
|
-
}
|
|
558
|
-
function deriveSymmetricKeyFromTwoKeys(key1, key2) {
|
|
559
|
-
return deriveKeyFromTwoKeysAndContext(key1, key2, CONTEXT_DERIVE);
|
|
560
|
-
}
|
|
561
|
-
async function deriveSymmetricCryptoKeyFromTwoKeys(key1, key2) {
|
|
562
|
-
try {
|
|
563
|
-
const keyBytes = deriveSymmetricKeyFromTwoKeys(key1, key2);
|
|
564
|
-
const key = await importSymmetricCryptoKey(keyBytes);
|
|
565
|
-
return key;
|
|
566
|
-
} catch (error) {
|
|
567
|
-
throw new Error("Failed to derive symmetric CryptoKey from two keys", { cause: error });
|
|
568
|
-
}
|
|
569
|
-
}
|
|
570
|
-
function deriveKeyFromTwoKeysAndContext(key1, key2, context) {
|
|
571
|
-
try {
|
|
572
|
-
if (key2.length != AES_KEY_BIT_LENGTH / 8 || key1.length != AES_KEY_BIT_LENGTH / 8) {
|
|
573
|
-
throw new Error(`Input key length must be exactly ${AES_KEY_BIT_LENGTH / 8} bytes`);
|
|
574
|
-
}
|
|
575
|
-
const key = blake3_js.blake3(key1, { key: key2 });
|
|
576
|
-
return blake3_js.blake3(key, { context: UTF8ToUint8(context) });
|
|
577
|
-
} catch (error) {
|
|
578
|
-
throw new Error("Failed to derive symmetric key from two keys and context", { cause: error });
|
|
579
|
-
}
|
|
580
|
-
}
|
|
581
|
-
|
|
582
|
-
// node_modules/hash-wasm/dist/index.esm.js
|
|
583
|
-
function __awaiter(thisArg, _arguments, P, generator) {
|
|
584
|
-
function adopt(value) {
|
|
585
|
-
return value instanceof P ? value : new P(function(resolve) {
|
|
586
|
-
resolve(value);
|
|
587
|
-
});
|
|
588
|
-
}
|
|
589
|
-
return new (P || (P = Promise))(function(resolve, reject) {
|
|
590
|
-
function fulfilled(value) {
|
|
591
|
-
try {
|
|
592
|
-
step(generator.next(value));
|
|
593
|
-
} catch (e) {
|
|
594
|
-
reject(e);
|
|
595
|
-
}
|
|
596
|
-
}
|
|
597
|
-
function rejected(value) {
|
|
598
|
-
try {
|
|
599
|
-
step(generator["throw"](value));
|
|
600
|
-
} catch (e) {
|
|
601
|
-
reject(e);
|
|
602
|
-
}
|
|
603
|
-
}
|
|
604
|
-
function step(result) {
|
|
605
|
-
result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected);
|
|
606
|
-
}
|
|
607
|
-
step((generator = generator.apply(thisArg, [])).next());
|
|
608
|
-
});
|
|
609
|
-
}
|
|
610
|
-
var Mutex = class {
|
|
611
|
-
constructor() {
|
|
612
|
-
this.mutex = Promise.resolve();
|
|
613
|
-
}
|
|
614
|
-
lock() {
|
|
615
|
-
let begin = () => {
|
|
616
|
-
};
|
|
617
|
-
this.mutex = this.mutex.then(() => new Promise(begin));
|
|
618
|
-
return new Promise((res) => {
|
|
619
|
-
begin = res;
|
|
620
|
-
});
|
|
621
|
-
}
|
|
622
|
-
dispatch(fn) {
|
|
623
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
624
|
-
const unlock = yield this.lock();
|
|
625
|
-
try {
|
|
626
|
-
return yield Promise.resolve(fn());
|
|
627
|
-
} finally {
|
|
628
|
-
unlock();
|
|
629
|
-
}
|
|
630
|
-
});
|
|
631
|
-
}
|
|
632
|
-
};
|
|
633
|
-
var _a;
|
|
634
|
-
function getGlobal() {
|
|
635
|
-
if (typeof globalThis !== "undefined")
|
|
636
|
-
return globalThis;
|
|
637
|
-
if (typeof self !== "undefined")
|
|
638
|
-
return self;
|
|
639
|
-
if (typeof window !== "undefined")
|
|
640
|
-
return window;
|
|
641
|
-
return global;
|
|
642
|
-
}
|
|
643
|
-
var globalObject = getGlobal();
|
|
644
|
-
var nodeBuffer = (_a = globalObject.Buffer) !== null && _a !== void 0 ? _a : null;
|
|
645
|
-
var textEncoder = globalObject.TextEncoder ? new globalObject.TextEncoder() : null;
|
|
646
|
-
function hexCharCodesToInt(a, b) {
|
|
647
|
-
return (a & 15) + (a >> 6 | a >> 3 & 8) << 4 | (b & 15) + (b >> 6 | b >> 3 & 8);
|
|
648
|
-
}
|
|
649
|
-
function writeHexToUInt8(buf, str) {
|
|
650
|
-
const size = str.length >> 1;
|
|
651
|
-
for (let i = 0; i < size; i++) {
|
|
652
|
-
const index = i << 1;
|
|
653
|
-
buf[i] = hexCharCodesToInt(str.charCodeAt(index), str.charCodeAt(index + 1));
|
|
654
|
-
}
|
|
655
|
-
}
|
|
656
|
-
function hexStringEqualsUInt8(str, buf) {
|
|
657
|
-
if (str.length !== buf.length * 2) {
|
|
658
|
-
return false;
|
|
659
|
-
}
|
|
660
|
-
for (let i = 0; i < buf.length; i++) {
|
|
661
|
-
const strIndex = i << 1;
|
|
662
|
-
if (buf[i] !== hexCharCodesToInt(str.charCodeAt(strIndex), str.charCodeAt(strIndex + 1))) {
|
|
663
|
-
return false;
|
|
664
|
-
}
|
|
665
|
-
}
|
|
666
|
-
return true;
|
|
667
|
-
}
|
|
668
|
-
var alpha = "a".charCodeAt(0) - 10;
|
|
669
|
-
var digit = "0".charCodeAt(0);
|
|
670
|
-
function getDigestHex(tmpBuffer, input, hashLength) {
|
|
671
|
-
let p = 0;
|
|
672
|
-
for (let i = 0; i < hashLength; i++) {
|
|
673
|
-
let nibble = input[i] >>> 4;
|
|
674
|
-
tmpBuffer[p++] = nibble > 9 ? nibble + alpha : nibble + digit;
|
|
675
|
-
nibble = input[i] & 15;
|
|
676
|
-
tmpBuffer[p++] = nibble > 9 ? nibble + alpha : nibble + digit;
|
|
677
|
-
}
|
|
678
|
-
return String.fromCharCode.apply(null, tmpBuffer);
|
|
679
|
-
}
|
|
680
|
-
var getUInt8Buffer = nodeBuffer !== null ? (data) => {
|
|
681
|
-
if (typeof data === "string") {
|
|
682
|
-
const buf = nodeBuffer.from(data, "utf8");
|
|
683
|
-
return new Uint8Array(buf.buffer, buf.byteOffset, buf.length);
|
|
684
|
-
}
|
|
685
|
-
if (nodeBuffer.isBuffer(data)) {
|
|
686
|
-
return new Uint8Array(data.buffer, data.byteOffset, data.length);
|
|
687
|
-
}
|
|
688
|
-
if (ArrayBuffer.isView(data)) {
|
|
689
|
-
return new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
|
|
690
|
-
}
|
|
691
|
-
throw new Error("Invalid data type!");
|
|
692
|
-
} : (data) => {
|
|
693
|
-
if (typeof data === "string") {
|
|
694
|
-
return textEncoder.encode(data);
|
|
695
|
-
}
|
|
696
|
-
if (ArrayBuffer.isView(data)) {
|
|
697
|
-
return new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
|
|
698
|
-
}
|
|
699
|
-
throw new Error("Invalid data type!");
|
|
700
|
-
};
|
|
701
|
-
var base64Chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
|
|
702
|
-
var base64Lookup = new Uint8Array(256);
|
|
703
|
-
for (let i = 0; i < base64Chars.length; i++) {
|
|
704
|
-
base64Lookup[base64Chars.charCodeAt(i)] = i;
|
|
705
|
-
}
|
|
706
|
-
function encodeBase64(data, pad = true) {
|
|
707
|
-
const len = data.length;
|
|
708
|
-
const extraBytes = len % 3;
|
|
709
|
-
const parts = [];
|
|
710
|
-
const len2 = len - extraBytes;
|
|
711
|
-
for (let i = 0; i < len2; i += 3) {
|
|
712
|
-
const tmp = (data[i] << 16 & 16711680) + (data[i + 1] << 8 & 65280) + (data[i + 2] & 255);
|
|
713
|
-
const triplet = base64Chars.charAt(tmp >> 18 & 63) + base64Chars.charAt(tmp >> 12 & 63) + base64Chars.charAt(tmp >> 6 & 63) + base64Chars.charAt(tmp & 63);
|
|
714
|
-
parts.push(triplet);
|
|
715
|
-
}
|
|
716
|
-
if (extraBytes === 1) {
|
|
717
|
-
const tmp = data[len - 1];
|
|
718
|
-
const a = base64Chars.charAt(tmp >> 2);
|
|
719
|
-
const b = base64Chars.charAt(tmp << 4 & 63);
|
|
720
|
-
parts.push(`${a}${b}`);
|
|
721
|
-
if (pad) {
|
|
722
|
-
parts.push("==");
|
|
723
|
-
}
|
|
724
|
-
} else if (extraBytes === 2) {
|
|
725
|
-
const tmp = (data[len - 2] << 8) + data[len - 1];
|
|
726
|
-
const a = base64Chars.charAt(tmp >> 10);
|
|
727
|
-
const b = base64Chars.charAt(tmp >> 4 & 63);
|
|
728
|
-
const c = base64Chars.charAt(tmp << 2 & 63);
|
|
729
|
-
parts.push(`${a}${b}${c}`);
|
|
730
|
-
if (pad) {
|
|
731
|
-
parts.push("=");
|
|
732
|
-
}
|
|
733
|
-
}
|
|
734
|
-
return parts.join("");
|
|
735
|
-
}
|
|
736
|
-
function getDecodeBase64Length(data) {
|
|
737
|
-
let bufferLength = Math.floor(data.length * 0.75);
|
|
738
|
-
const len = data.length;
|
|
739
|
-
if (data[len - 1] === "=") {
|
|
740
|
-
bufferLength -= 1;
|
|
741
|
-
if (data[len - 2] === "=") {
|
|
742
|
-
bufferLength -= 1;
|
|
743
|
-
}
|
|
744
|
-
}
|
|
745
|
-
return bufferLength;
|
|
746
|
-
}
|
|
747
|
-
function decodeBase64(data) {
|
|
748
|
-
const bufferLength = getDecodeBase64Length(data);
|
|
749
|
-
const len = data.length;
|
|
750
|
-
const bytes = new Uint8Array(bufferLength);
|
|
751
|
-
let p = 0;
|
|
752
|
-
for (let i = 0; i < len; i += 4) {
|
|
753
|
-
const encoded1 = base64Lookup[data.charCodeAt(i)];
|
|
754
|
-
const encoded2 = base64Lookup[data.charCodeAt(i + 1)];
|
|
755
|
-
const encoded3 = base64Lookup[data.charCodeAt(i + 2)];
|
|
756
|
-
const encoded4 = base64Lookup[data.charCodeAt(i + 3)];
|
|
757
|
-
bytes[p] = encoded1 << 2 | encoded2 >> 4;
|
|
758
|
-
p += 1;
|
|
759
|
-
bytes[p] = (encoded2 & 15) << 4 | encoded3 >> 2;
|
|
760
|
-
p += 1;
|
|
761
|
-
bytes[p] = (encoded3 & 3) << 6 | encoded4 & 63;
|
|
762
|
-
p += 1;
|
|
763
|
-
}
|
|
764
|
-
return bytes;
|
|
765
|
-
}
|
|
766
|
-
var MAX_HEAP = 16 * 1024;
|
|
767
|
-
var WASM_FUNC_HASH_LENGTH = 4;
|
|
768
|
-
var wasmMutex = new Mutex();
|
|
769
|
-
var wasmModuleCache = /* @__PURE__ */ new Map();
|
|
770
|
-
function WASMInterface(binary, hashLength) {
|
|
771
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
772
|
-
let wasmInstance = null;
|
|
773
|
-
let memoryView = null;
|
|
774
|
-
let initialized = false;
|
|
775
|
-
if (typeof WebAssembly === "undefined") {
|
|
776
|
-
throw new Error("WebAssembly is not supported in this environment!");
|
|
777
|
-
}
|
|
778
|
-
const writeMemory = (data, offset = 0) => {
|
|
779
|
-
memoryView.set(data, offset);
|
|
780
|
-
};
|
|
781
|
-
const getMemory = () => memoryView;
|
|
782
|
-
const getExports = () => wasmInstance.exports;
|
|
783
|
-
const setMemorySize = (totalSize) => {
|
|
784
|
-
wasmInstance.exports.Hash_SetMemorySize(totalSize);
|
|
785
|
-
const arrayOffset = wasmInstance.exports.Hash_GetBuffer();
|
|
786
|
-
const memoryBuffer = wasmInstance.exports.memory.buffer;
|
|
787
|
-
memoryView = new Uint8Array(memoryBuffer, arrayOffset, totalSize);
|
|
788
|
-
};
|
|
789
|
-
const getStateSize = () => {
|
|
790
|
-
const view = new DataView(wasmInstance.exports.memory.buffer);
|
|
791
|
-
const stateSize = view.getUint32(wasmInstance.exports.STATE_SIZE, true);
|
|
792
|
-
return stateSize;
|
|
793
|
-
};
|
|
794
|
-
const loadWASMPromise = wasmMutex.dispatch(() => __awaiter(this, void 0, void 0, function* () {
|
|
795
|
-
if (!wasmModuleCache.has(binary.name)) {
|
|
796
|
-
const asm = decodeBase64(binary.data);
|
|
797
|
-
const promise = WebAssembly.compile(asm);
|
|
798
|
-
wasmModuleCache.set(binary.name, promise);
|
|
799
|
-
}
|
|
800
|
-
const module = yield wasmModuleCache.get(binary.name);
|
|
801
|
-
wasmInstance = yield WebAssembly.instantiate(module, {
|
|
802
|
-
// env: {
|
|
803
|
-
// emscripten_memcpy_big: (dest, src, num) => {
|
|
804
|
-
// const memoryBuffer = wasmInstance.exports.memory.buffer;
|
|
805
|
-
// const memView = new Uint8Array(memoryBuffer, 0);
|
|
806
|
-
// memView.set(memView.subarray(src, src + num), dest);
|
|
807
|
-
// },
|
|
808
|
-
// print_memory: (offset, len) => {
|
|
809
|
-
// const memoryBuffer = wasmInstance.exports.memory.buffer;
|
|
810
|
-
// const memView = new Uint8Array(memoryBuffer, 0);
|
|
811
|
-
// console.log('print_int32', memView.subarray(offset, offset + len));
|
|
812
|
-
// },
|
|
813
|
-
// },
|
|
814
|
-
});
|
|
815
|
-
}));
|
|
816
|
-
const setupInterface = () => __awaiter(this, void 0, void 0, function* () {
|
|
817
|
-
if (!wasmInstance) {
|
|
818
|
-
yield loadWASMPromise;
|
|
819
|
-
}
|
|
820
|
-
const arrayOffset = wasmInstance.exports.Hash_GetBuffer();
|
|
821
|
-
const memoryBuffer = wasmInstance.exports.memory.buffer;
|
|
822
|
-
memoryView = new Uint8Array(memoryBuffer, arrayOffset, MAX_HEAP);
|
|
823
|
-
});
|
|
824
|
-
const init = (bits = null) => {
|
|
825
|
-
initialized = true;
|
|
826
|
-
wasmInstance.exports.Hash_Init(bits);
|
|
827
|
-
};
|
|
828
|
-
const updateUInt8Array = (data) => {
|
|
829
|
-
let read = 0;
|
|
830
|
-
while (read < data.length) {
|
|
831
|
-
const chunk = data.subarray(read, read + MAX_HEAP);
|
|
832
|
-
read += chunk.length;
|
|
833
|
-
memoryView.set(chunk);
|
|
834
|
-
wasmInstance.exports.Hash_Update(chunk.length);
|
|
835
|
-
}
|
|
836
|
-
};
|
|
837
|
-
const update = (data) => {
|
|
838
|
-
if (!initialized) {
|
|
839
|
-
throw new Error("update() called before init()");
|
|
840
|
-
}
|
|
841
|
-
const Uint8Buffer = getUInt8Buffer(data);
|
|
842
|
-
updateUInt8Array(Uint8Buffer);
|
|
843
|
-
};
|
|
844
|
-
const digestChars = new Uint8Array(hashLength * 2);
|
|
845
|
-
const digest = (outputType, padding = null) => {
|
|
846
|
-
if (!initialized) {
|
|
847
|
-
throw new Error("digest() called before init()");
|
|
848
|
-
}
|
|
849
|
-
initialized = false;
|
|
850
|
-
wasmInstance.exports.Hash_Final(padding);
|
|
851
|
-
if (outputType === "binary") {
|
|
852
|
-
return memoryView.slice(0, hashLength);
|
|
853
|
-
}
|
|
854
|
-
return getDigestHex(digestChars, memoryView, hashLength);
|
|
855
|
-
};
|
|
856
|
-
const save = () => {
|
|
857
|
-
if (!initialized) {
|
|
858
|
-
throw new Error("save() can only be called after init() and before digest()");
|
|
859
|
-
}
|
|
860
|
-
const stateOffset = wasmInstance.exports.Hash_GetState();
|
|
861
|
-
const stateLength = getStateSize();
|
|
862
|
-
const memoryBuffer = wasmInstance.exports.memory.buffer;
|
|
863
|
-
const internalState = new Uint8Array(memoryBuffer, stateOffset, stateLength);
|
|
864
|
-
const prefixedState = new Uint8Array(WASM_FUNC_HASH_LENGTH + stateLength);
|
|
865
|
-
writeHexToUInt8(prefixedState, binary.hash);
|
|
866
|
-
prefixedState.set(internalState, WASM_FUNC_HASH_LENGTH);
|
|
867
|
-
return prefixedState;
|
|
868
|
-
};
|
|
869
|
-
const load = (state) => {
|
|
870
|
-
if (!(state instanceof Uint8Array)) {
|
|
871
|
-
throw new Error("load() expects an Uint8Array generated by save()");
|
|
872
|
-
}
|
|
873
|
-
const stateOffset = wasmInstance.exports.Hash_GetState();
|
|
874
|
-
const stateLength = getStateSize();
|
|
875
|
-
const overallLength = WASM_FUNC_HASH_LENGTH + stateLength;
|
|
876
|
-
const memoryBuffer = wasmInstance.exports.memory.buffer;
|
|
877
|
-
if (state.length !== overallLength) {
|
|
878
|
-
throw new Error(`Bad state length (expected ${overallLength} bytes, got ${state.length})`);
|
|
879
|
-
}
|
|
880
|
-
if (!hexStringEqualsUInt8(binary.hash, state.subarray(0, WASM_FUNC_HASH_LENGTH))) {
|
|
881
|
-
throw new Error("This state was written by an incompatible hash implementation");
|
|
882
|
-
}
|
|
883
|
-
const internalState = state.subarray(WASM_FUNC_HASH_LENGTH);
|
|
884
|
-
new Uint8Array(memoryBuffer, stateOffset, stateLength).set(internalState);
|
|
885
|
-
initialized = true;
|
|
886
|
-
};
|
|
887
|
-
const isDataShort = (data) => {
|
|
888
|
-
if (typeof data === "string") {
|
|
889
|
-
return data.length < MAX_HEAP / 4;
|
|
890
|
-
}
|
|
891
|
-
return data.byteLength < MAX_HEAP;
|
|
892
|
-
};
|
|
893
|
-
let canSimplify = isDataShort;
|
|
894
|
-
switch (binary.name) {
|
|
895
|
-
case "argon2":
|
|
896
|
-
case "scrypt":
|
|
897
|
-
canSimplify = () => true;
|
|
898
|
-
break;
|
|
899
|
-
case "blake2b":
|
|
900
|
-
case "blake2s":
|
|
901
|
-
canSimplify = (data, initParam) => initParam <= 512 && isDataShort(data);
|
|
902
|
-
break;
|
|
903
|
-
case "blake3":
|
|
904
|
-
canSimplify = (data, initParam) => initParam === 0 && isDataShort(data);
|
|
905
|
-
break;
|
|
906
|
-
case "xxhash64":
|
|
907
|
-
// cannot simplify
|
|
908
|
-
case "xxhash3":
|
|
909
|
-
case "xxhash128":
|
|
910
|
-
case "crc64":
|
|
911
|
-
canSimplify = () => false;
|
|
912
|
-
break;
|
|
913
|
-
}
|
|
914
|
-
const calculate = (data, initParam = null, digestParam = null) => {
|
|
915
|
-
if (!canSimplify(data, initParam)) {
|
|
916
|
-
init(initParam);
|
|
917
|
-
update(data);
|
|
918
|
-
return digest("hex", digestParam);
|
|
919
|
-
}
|
|
920
|
-
const buffer = getUInt8Buffer(data);
|
|
921
|
-
memoryView.set(buffer);
|
|
922
|
-
wasmInstance.exports.Hash_Calculate(buffer.length, initParam, digestParam);
|
|
923
|
-
return getDigestHex(digestChars, memoryView, hashLength);
|
|
924
|
-
};
|
|
925
|
-
yield setupInterface();
|
|
926
|
-
return {
|
|
927
|
-
getMemory,
|
|
928
|
-
writeMemory,
|
|
929
|
-
getExports,
|
|
930
|
-
setMemorySize,
|
|
931
|
-
init,
|
|
932
|
-
update,
|
|
933
|
-
digest,
|
|
934
|
-
save,
|
|
935
|
-
load,
|
|
936
|
-
calculate,
|
|
937
|
-
hashLength
|
|
938
|
-
};
|
|
939
|
-
});
|
|
940
|
-
}
|
|
941
|
-
new Mutex();
|
|
942
|
-
var name$k = "argon2";
|
|
943
|
-
var data$k = "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";
|
|
944
|
-
var hash$k = "e4cdc523";
|
|
945
|
-
var wasmJson$k = {
|
|
946
|
-
name: name$k,
|
|
947
|
-
data: data$k,
|
|
948
|
-
hash: hash$k
|
|
949
|
-
};
|
|
950
|
-
var name$j = "blake2b";
|
|
951
|
-
var data$j = "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";
|
|
952
|
-
var hash$j = "c6f286e6";
|
|
953
|
-
var wasmJson$j = {
|
|
954
|
-
name: name$j,
|
|
955
|
-
data: data$j,
|
|
956
|
-
hash: hash$j
|
|
957
|
-
};
|
|
958
|
-
new Mutex();
|
|
959
|
-
function validateBits$4(bits) {
|
|
960
|
-
if (!Number.isInteger(bits) || bits < 8 || bits > 512 || bits % 8 !== 0) {
|
|
961
|
-
return new Error("Invalid variant! Valid values: 8, 16, ..., 512");
|
|
962
|
-
}
|
|
963
|
-
return null;
|
|
964
|
-
}
|
|
965
|
-
function getInitParam$1(outputBits, keyBits) {
|
|
966
|
-
return outputBits | keyBits << 16;
|
|
967
|
-
}
|
|
968
|
-
function createBLAKE2b(bits = 512, key = null) {
|
|
969
|
-
if (validateBits$4(bits)) {
|
|
970
|
-
return Promise.reject(validateBits$4(bits));
|
|
971
|
-
}
|
|
972
|
-
let keyBuffer = null;
|
|
973
|
-
let initParam = bits;
|
|
974
|
-
if (key !== null) {
|
|
975
|
-
keyBuffer = getUInt8Buffer(key);
|
|
976
|
-
if (keyBuffer.length > 64) {
|
|
977
|
-
return Promise.reject(new Error("Max key length is 64 bytes"));
|
|
978
|
-
}
|
|
979
|
-
initParam = getInitParam$1(bits, keyBuffer.length);
|
|
980
|
-
}
|
|
981
|
-
const outputSize = bits / 8;
|
|
982
|
-
return WASMInterface(wasmJson$j, outputSize).then((wasm) => {
|
|
983
|
-
if (initParam > 512) {
|
|
984
|
-
wasm.writeMemory(keyBuffer);
|
|
985
|
-
}
|
|
986
|
-
wasm.init(initParam);
|
|
987
|
-
const obj = {
|
|
988
|
-
init: initParam > 512 ? () => {
|
|
989
|
-
wasm.writeMemory(keyBuffer);
|
|
990
|
-
wasm.init(initParam);
|
|
991
|
-
return obj;
|
|
992
|
-
} : () => {
|
|
993
|
-
wasm.init(initParam);
|
|
994
|
-
return obj;
|
|
995
|
-
},
|
|
996
|
-
update: (data) => {
|
|
997
|
-
wasm.update(data);
|
|
998
|
-
return obj;
|
|
999
|
-
},
|
|
1000
|
-
// biome-ignore lint/suspicious/noExplicitAny: Conflict with IHasher type
|
|
1001
|
-
digest: (outputType) => wasm.digest(outputType),
|
|
1002
|
-
save: () => wasm.save(),
|
|
1003
|
-
load: (data) => {
|
|
1004
|
-
wasm.load(data);
|
|
1005
|
-
return obj;
|
|
1006
|
-
},
|
|
1007
|
-
blockSize: 128,
|
|
1008
|
-
digestSize: outputSize
|
|
1009
|
-
};
|
|
1010
|
-
return obj;
|
|
1011
|
-
});
|
|
1012
|
-
}
|
|
1013
|
-
function encodeResult(salt, options, res) {
|
|
1014
|
-
const parameters = [
|
|
1015
|
-
`m=${options.memorySize}`,
|
|
1016
|
-
`t=${options.iterations}`,
|
|
1017
|
-
`p=${options.parallelism}`
|
|
1018
|
-
].join(",");
|
|
1019
|
-
return `$argon2${options.hashType}$v=19$${parameters}$${encodeBase64(salt, false)}$${encodeBase64(res, false)}`;
|
|
1020
|
-
}
|
|
1021
|
-
var uint32View = new DataView(new ArrayBuffer(4));
|
|
1022
|
-
function int32LE(x) {
|
|
1023
|
-
uint32View.setInt32(0, x, true);
|
|
1024
|
-
return new Uint8Array(uint32View.buffer);
|
|
1025
|
-
}
|
|
1026
|
-
function hashFunc(blake512, buf, len) {
|
|
1027
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
1028
|
-
if (len <= 64) {
|
|
1029
|
-
const blake = yield createBLAKE2b(len * 8);
|
|
1030
|
-
blake.update(int32LE(len));
|
|
1031
|
-
blake.update(buf);
|
|
1032
|
-
return blake.digest("binary");
|
|
1033
|
-
}
|
|
1034
|
-
const r = Math.ceil(len / 32) - 2;
|
|
1035
|
-
const ret = new Uint8Array(len);
|
|
1036
|
-
blake512.init();
|
|
1037
|
-
blake512.update(int32LE(len));
|
|
1038
|
-
blake512.update(buf);
|
|
1039
|
-
let vp = blake512.digest("binary");
|
|
1040
|
-
ret.set(vp.subarray(0, 32), 0);
|
|
1041
|
-
for (let i = 1; i < r; i++) {
|
|
1042
|
-
blake512.init();
|
|
1043
|
-
blake512.update(vp);
|
|
1044
|
-
vp = blake512.digest("binary");
|
|
1045
|
-
ret.set(vp.subarray(0, 32), i * 32);
|
|
1046
|
-
}
|
|
1047
|
-
const partialBytesNeeded = len - 32 * r;
|
|
1048
|
-
let blakeSmall;
|
|
1049
|
-
if (partialBytesNeeded === 64) {
|
|
1050
|
-
blakeSmall = blake512;
|
|
1051
|
-
blakeSmall.init();
|
|
1052
|
-
} else {
|
|
1053
|
-
blakeSmall = yield createBLAKE2b(partialBytesNeeded * 8);
|
|
1054
|
-
}
|
|
1055
|
-
blakeSmall.update(vp);
|
|
1056
|
-
vp = blakeSmall.digest("binary");
|
|
1057
|
-
ret.set(vp.subarray(0, partialBytesNeeded), r * 32);
|
|
1058
|
-
return ret;
|
|
1059
|
-
});
|
|
1060
|
-
}
|
|
1061
|
-
function getHashType(type) {
|
|
1062
|
-
switch (type) {
|
|
1063
|
-
case "d":
|
|
1064
|
-
return 0;
|
|
1065
|
-
case "i":
|
|
1066
|
-
return 1;
|
|
1067
|
-
default:
|
|
1068
|
-
return 2;
|
|
1069
|
-
}
|
|
1070
|
-
}
|
|
1071
|
-
function argon2Internal(options) {
|
|
1072
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
1073
|
-
var _a2;
|
|
1074
|
-
const { parallelism, iterations, hashLength } = options;
|
|
1075
|
-
const password = getUInt8Buffer(options.password);
|
|
1076
|
-
const salt = getUInt8Buffer(options.salt);
|
|
1077
|
-
const version = 19;
|
|
1078
|
-
const hashType = getHashType(options.hashType);
|
|
1079
|
-
const { memorySize } = options;
|
|
1080
|
-
const secret = getUInt8Buffer((_a2 = options.secret) !== null && _a2 !== void 0 ? _a2 : "");
|
|
1081
|
-
const [argon2Interface, blake512] = yield Promise.all([
|
|
1082
|
-
WASMInterface(wasmJson$k, 1024),
|
|
1083
|
-
createBLAKE2b(512)
|
|
1084
|
-
]);
|
|
1085
|
-
argon2Interface.setMemorySize(memorySize * 1024 + 1024);
|
|
1086
|
-
const initVector = new Uint8Array(24);
|
|
1087
|
-
const initVectorView = new DataView(initVector.buffer);
|
|
1088
|
-
initVectorView.setInt32(0, parallelism, true);
|
|
1089
|
-
initVectorView.setInt32(4, hashLength, true);
|
|
1090
|
-
initVectorView.setInt32(8, memorySize, true);
|
|
1091
|
-
initVectorView.setInt32(12, iterations, true);
|
|
1092
|
-
initVectorView.setInt32(16, version, true);
|
|
1093
|
-
initVectorView.setInt32(20, hashType, true);
|
|
1094
|
-
argon2Interface.writeMemory(initVector, memorySize * 1024);
|
|
1095
|
-
blake512.init();
|
|
1096
|
-
blake512.update(initVector);
|
|
1097
|
-
blake512.update(int32LE(password.length));
|
|
1098
|
-
blake512.update(password);
|
|
1099
|
-
blake512.update(int32LE(salt.length));
|
|
1100
|
-
blake512.update(salt);
|
|
1101
|
-
blake512.update(int32LE(secret.length));
|
|
1102
|
-
blake512.update(secret);
|
|
1103
|
-
blake512.update(int32LE(0));
|
|
1104
|
-
const segments = Math.floor(memorySize / (parallelism * 4));
|
|
1105
|
-
const lanes = segments * 4;
|
|
1106
|
-
const param = new Uint8Array(72);
|
|
1107
|
-
const H0 = blake512.digest("binary");
|
|
1108
|
-
param.set(H0);
|
|
1109
|
-
for (let lane = 0; lane < parallelism; lane++) {
|
|
1110
|
-
param.set(int32LE(0), 64);
|
|
1111
|
-
param.set(int32LE(lane), 68);
|
|
1112
|
-
let position = lane * lanes;
|
|
1113
|
-
let chunk = yield hashFunc(blake512, param, 1024);
|
|
1114
|
-
argon2Interface.writeMemory(chunk, position * 1024);
|
|
1115
|
-
position += 1;
|
|
1116
|
-
param.set(int32LE(1), 64);
|
|
1117
|
-
chunk = yield hashFunc(blake512, param, 1024);
|
|
1118
|
-
argon2Interface.writeMemory(chunk, position * 1024);
|
|
1119
|
-
}
|
|
1120
|
-
const C = new Uint8Array(1024);
|
|
1121
|
-
writeHexToUInt8(C, argon2Interface.calculate(new Uint8Array([]), memorySize));
|
|
1122
|
-
const res = yield hashFunc(blake512, C, hashLength);
|
|
1123
|
-
if (options.outputType === "hex") {
|
|
1124
|
-
const digestChars = new Uint8Array(hashLength * 2);
|
|
1125
|
-
return getDigestHex(digestChars, res, hashLength);
|
|
1126
|
-
}
|
|
1127
|
-
if (options.outputType === "encoded") {
|
|
1128
|
-
return encodeResult(salt, options, res);
|
|
1129
|
-
}
|
|
1130
|
-
return res;
|
|
1131
|
-
});
|
|
1132
|
-
}
|
|
1133
|
-
var validateOptions$3 = (options) => {
|
|
1134
|
-
var _a2;
|
|
1135
|
-
if (!options || typeof options !== "object") {
|
|
1136
|
-
throw new Error("Invalid options parameter. It requires an object.");
|
|
1137
|
-
}
|
|
1138
|
-
if (!options.password) {
|
|
1139
|
-
throw new Error("Password must be specified");
|
|
1140
|
-
}
|
|
1141
|
-
options.password = getUInt8Buffer(options.password);
|
|
1142
|
-
if (options.password.length < 1) {
|
|
1143
|
-
throw new Error("Password must be specified");
|
|
1144
|
-
}
|
|
1145
|
-
if (!options.salt) {
|
|
1146
|
-
throw new Error("Salt must be specified");
|
|
1147
|
-
}
|
|
1148
|
-
options.salt = getUInt8Buffer(options.salt);
|
|
1149
|
-
if (options.salt.length < 8) {
|
|
1150
|
-
throw new Error("Salt should be at least 8 bytes long");
|
|
1151
|
-
}
|
|
1152
|
-
options.secret = getUInt8Buffer((_a2 = options.secret) !== null && _a2 !== void 0 ? _a2 : "");
|
|
1153
|
-
if (!Number.isInteger(options.iterations) || options.iterations < 1) {
|
|
1154
|
-
throw new Error("Iterations should be a positive number");
|
|
1155
|
-
}
|
|
1156
|
-
if (!Number.isInteger(options.parallelism) || options.parallelism < 1) {
|
|
1157
|
-
throw new Error("Parallelism should be a positive number");
|
|
1158
|
-
}
|
|
1159
|
-
if (!Number.isInteger(options.hashLength) || options.hashLength < 4) {
|
|
1160
|
-
throw new Error("Hash length should be at least 4 bytes.");
|
|
1161
|
-
}
|
|
1162
|
-
if (!Number.isInteger(options.memorySize)) {
|
|
1163
|
-
throw new Error("Memory size should be specified.");
|
|
1164
|
-
}
|
|
1165
|
-
if (options.memorySize < 8 * options.parallelism) {
|
|
1166
|
-
throw new Error("Memory size should be at least 8 * parallelism.");
|
|
1167
|
-
}
|
|
1168
|
-
if (options.outputType === void 0) {
|
|
1169
|
-
options.outputType = "hex";
|
|
1170
|
-
}
|
|
1171
|
-
if (!["hex", "binary", "encoded"].includes(options.outputType)) {
|
|
1172
|
-
throw new Error(`Insupported output type ${options.outputType}. Valid values: ['hex', 'binary', 'encoded']`);
|
|
1173
|
-
}
|
|
1174
|
-
};
|
|
1175
|
-
function argon2id(options) {
|
|
1176
|
-
return __awaiter(this, void 0, void 0, function* () {
|
|
1177
|
-
validateOptions$3(options);
|
|
1178
|
-
return argon2Internal(Object.assign(Object.assign({}, options), { hashType: "id" }));
|
|
1179
|
-
});
|
|
1180
|
-
}
|
|
1181
|
-
new Mutex();
|
|
1182
|
-
new Mutex();
|
|
1183
|
-
new Mutex();
|
|
1184
|
-
new Mutex();
|
|
1185
|
-
new Mutex();
|
|
1186
|
-
new Mutex();
|
|
1187
|
-
new Mutex();
|
|
1188
|
-
new Mutex();
|
|
1189
|
-
new Mutex();
|
|
1190
|
-
new Mutex();
|
|
1191
|
-
new Mutex();
|
|
1192
|
-
new Mutex();
|
|
1193
|
-
new Mutex();
|
|
1194
|
-
new Mutex();
|
|
1195
|
-
new Mutex();
|
|
1196
|
-
new Mutex();
|
|
1197
|
-
new Mutex();
|
|
1198
|
-
new Mutex();
|
|
1199
|
-
new Mutex();
|
|
1200
|
-
new Mutex();
|
|
1201
|
-
|
|
1202
|
-
// src/derive-key/core.ts
|
|
1203
|
-
async function argon2(password, salt, parallelism = ARGON2ID_PARALLELISM, iterations = ARGON2ID_ITERATIONS, memorySize = ARGON2ID_MEMORY_SIZE, hashLength = ARGON2ID_OUTPUT_BYTE_LENGTH) {
|
|
1204
|
-
return argon2id({
|
|
1205
|
-
password,
|
|
1206
|
-
salt,
|
|
1207
|
-
parallelism,
|
|
1208
|
-
iterations,
|
|
1209
|
-
memorySize,
|
|
1210
|
-
hashLength,
|
|
1211
|
-
outputType: "binary"
|
|
1212
|
-
});
|
|
1213
|
-
}
|
|
1214
|
-
function sampleSalt() {
|
|
1215
|
-
try {
|
|
1216
|
-
const salt = new Uint8Array(ARGON2ID_SALT_BYTE_LENGTH);
|
|
1217
|
-
crypto.getRandomValues(salt);
|
|
1218
|
-
return salt;
|
|
1219
|
-
} catch (error) {
|
|
1220
|
-
throw new Error("Failed to sample salt", { cause: error });
|
|
1221
|
-
}
|
|
1222
|
-
}
|
|
1223
|
-
|
|
1224
|
-
// src/derive-key/deriveKeysFromPassword.ts
|
|
1225
|
-
async function getKeyFromPassword(password) {
|
|
1226
|
-
try {
|
|
1227
|
-
if (!password) {
|
|
1228
|
-
throw new Error("No password given");
|
|
1229
|
-
}
|
|
1230
|
-
const salt = sampleSalt();
|
|
1231
|
-
const key = await argon2(password, salt);
|
|
1232
|
-
return { key, salt };
|
|
1233
|
-
} catch (error) {
|
|
1234
|
-
throw new Error("Failed to derive key from password", { cause: error });
|
|
1235
|
-
}
|
|
1236
|
-
}
|
|
1237
|
-
async function getKeyFromPasswordAndSalt(password, salt) {
|
|
1238
|
-
try {
|
|
1239
|
-
if (!salt.length) {
|
|
1240
|
-
throw new Error("No salt given");
|
|
1241
|
-
}
|
|
1242
|
-
if (!password) {
|
|
1243
|
-
throw new Error("No password given");
|
|
1244
|
-
}
|
|
1245
|
-
return await argon2(password, salt);
|
|
1246
|
-
} catch (error) {
|
|
1247
|
-
throw new Error("Failed to derive key from password and salt", { cause: error });
|
|
1248
|
-
}
|
|
1249
|
-
}
|
|
1250
|
-
async function getKeyFromPasswordHex(password) {
|
|
1251
|
-
try {
|
|
1252
|
-
const { key, salt } = await getKeyFromPassword(password);
|
|
1253
|
-
return { keyHex: uint8ArrayToHex(key), saltHex: uint8ArrayToHex(salt) };
|
|
1254
|
-
} catch (error) {
|
|
1255
|
-
throw new Error("Failed to derive key from password", { cause: error });
|
|
1256
|
-
}
|
|
1257
|
-
}
|
|
1258
|
-
async function getKeyFromPasswordAndSaltHex(password, saltHex) {
|
|
1259
|
-
try {
|
|
1260
|
-
const salt = hexToUint8Array(saltHex);
|
|
1261
|
-
const key = await getKeyFromPasswordAndSalt(password, salt);
|
|
1262
|
-
return uint8ArrayToHex(key);
|
|
1263
|
-
} catch (error) {
|
|
1264
|
-
throw new Error("Failed to derive key from password and salt", { cause: error });
|
|
1265
|
-
}
|
|
1266
|
-
}
|
|
1267
|
-
async function verifyKeyFromPasswordHex(password, saltHex, keyHex) {
|
|
1268
|
-
const result = await getKeyFromPasswordAndSaltHex(password, saltHex);
|
|
1269
|
-
return keyHex === result;
|
|
1270
|
-
}
|
|
1271
|
-
|
|
1272
|
-
// src/email-crypto/converters.ts
|
|
1273
|
-
function emailBodyToBinary(body) {
|
|
1274
|
-
try {
|
|
1275
|
-
const json = JSON.stringify(body);
|
|
1276
|
-
return UTF8ToUint8(json);
|
|
1277
|
-
} catch (error) {
|
|
1278
|
-
throw new Error("Failed to convert EmailBody to Uint8Array", { cause: error });
|
|
1279
|
-
}
|
|
1280
|
-
}
|
|
1281
|
-
function binaryToEmailBody(array) {
|
|
1282
|
-
try {
|
|
1283
|
-
const json = uint8ToUTF8(array);
|
|
1284
|
-
const email = JSON.parse(json);
|
|
1285
|
-
return email;
|
|
1286
|
-
} catch (error) {
|
|
1287
|
-
throw new Error("Failed to convert Uint8Array to EmailBody", { cause: error });
|
|
1288
|
-
}
|
|
1289
|
-
}
|
|
1290
|
-
function encHybridKeyToBase64(encHybridKey) {
|
|
1291
|
-
try {
|
|
1292
|
-
const json = JSON.stringify({
|
|
1293
|
-
kyberCiphertext: uint8ArrayToBase64(encHybridKey.kyberCiphertext),
|
|
1294
|
-
encryptedKey: uint8ArrayToBase64(encHybridKey.encryptedKey)
|
|
1295
|
-
});
|
|
1296
|
-
const base64 = btoa(json);
|
|
1297
|
-
return base64;
|
|
1298
|
-
} catch (error) {
|
|
1299
|
-
throw new Error("Failed to convert hybrid key to base64", { cause: error });
|
|
1
|
+
const require_constants = require('./constants-Ccp21E03.js');
|
|
2
|
+
const require_asymmetric_crypto = require('./asymmetric-crypto-BORmLhnx.js');
|
|
3
|
+
const require_utils = require('./utils-CNs3cyDj.js');
|
|
4
|
+
const require_hash = require('./hash-BoqwNkcd.js');
|
|
5
|
+
const require_symmetric_crypto = require('./symmetric-crypto-D65zB396.js');
|
|
6
|
+
const require_derive_key = require('./derive-key-CBf2WxJd.js');
|
|
7
|
+
const require_post_quantum_crypto = require('./post-quantum-crypto-CAi-cEkV.js');
|
|
8
|
+
const require_email_crypto = require('./email-crypto-BrT98taw.js');
|
|
9
|
+
const require_email_search = require('./email-search.js');
|
|
10
|
+
const require_types = require('./types-52g887Zi.js');
|
|
11
|
+
const require_keystore_crypto = require('./keystore-crypto-B4yCVo9l.js');
|
|
12
|
+
const require_keystore_service = require('./keystore-service.js');
|
|
13
|
+
const require_storage_service = require('./storage-service-BgIK2aYZ.js');
|
|
14
|
+
|
|
15
|
+
exports.AES_ALGORITHM = require_constants.AES_ALGORITHM;
|
|
16
|
+
exports.AES_KEY_BIT_LENGTH = require_constants.AES_KEY_BIT_LENGTH;
|
|
17
|
+
exports.ARGON2ID_ITERATIONS = require_constants.ARGON2ID_ITERATIONS;
|
|
18
|
+
exports.ARGON2ID_MEMORY_SIZE = require_constants.ARGON2ID_MEMORY_SIZE;
|
|
19
|
+
exports.ARGON2ID_OUTPUT_BYTE_LENGTH = require_constants.ARGON2ID_OUTPUT_BYTE_LENGTH;
|
|
20
|
+
exports.ARGON2ID_PARALLELISM = require_constants.ARGON2ID_PARALLELISM;
|
|
21
|
+
exports.ARGON2ID_SALT_BYTE_LENGTH = require_constants.ARGON2ID_SALT_BYTE_LENGTH;
|
|
22
|
+
exports.AUX_BYTE_LEN = require_constants.AUX_BYTE_LEN;
|
|
23
|
+
exports.CONTEXT_DERIVE = require_constants.CONTEXT_DERIVE;
|
|
24
|
+
exports.CONTEXT_ENC_KEYSTORE = require_constants.CONTEXT_ENC_KEYSTORE;
|
|
25
|
+
exports.CONTEXT_INDEX = require_constants.CONTEXT_INDEX;
|
|
26
|
+
exports.CONTEXT_RECOVERY = require_constants.CONTEXT_RECOVERY;
|
|
27
|
+
exports.CONTEXT_WRAPPING = require_constants.CONTEXT_WRAPPING;
|
|
28
|
+
exports.DB_LABEL = require_constants.DB_LABEL;
|
|
29
|
+
exports.DB_VERSION = require_constants.DB_VERSION;
|
|
30
|
+
exports.ECC_ALGORITHM = require_constants.ECC_ALGORITHM;
|
|
31
|
+
exports.HASH_BIT_LEN = require_constants.HASH_BIT_LEN;
|
|
32
|
+
exports.IV_LEN_BYTES = require_constants.IV_LEN_BYTES;
|
|
33
|
+
exports.KEY_FORMAT = require_constants.KEY_FORMAT;
|
|
34
|
+
exports.KEY_WRAPPING_ALGORITHM = require_constants.KEY_WRAPPING_ALGORITHM;
|
|
35
|
+
exports.KYBER1024_PUBLIC_KEY_LENGTH = require_constants.KYBER1024_PUBLIC_KEY_LENGTH;
|
|
36
|
+
exports.KYBER1024_SECRET_KEY_LENGTH = require_constants.KYBER1024_SECRET_KEY_LENGTH;
|
|
37
|
+
exports.KYBER512_PUBLIC_KEY_LENGTH = require_constants.KYBER512_PUBLIC_KEY_LENGTH;
|
|
38
|
+
exports.KYBER512_SECRET_KEY_LENGTH = require_constants.KYBER512_SECRET_KEY_LENGTH;
|
|
39
|
+
exports.KYBER768_PUBLIC_KEY_LENGTH = require_constants.KYBER768_PUBLIC_KEY_LENGTH;
|
|
40
|
+
exports.KYBER768_SECRET_KEY_LENGTH = require_constants.KYBER768_SECRET_KEY_LENGTH;
|
|
41
|
+
exports.KYBER_SEED_LENGTH = require_constants.KYBER_SEED_LENGTH;
|
|
42
|
+
exports.KeystoreType = require_types.KeystoreType;
|
|
43
|
+
exports.MAX_CACHE_SIZE = require_constants.MAX_CACHE_SIZE;
|
|
44
|
+
exports.MAX_EMAIL_PER_BATCH = require_constants.MAX_EMAIL_PER_BATCH;
|
|
45
|
+
Object.defineProperty(exports, 'asymmetric', {
|
|
46
|
+
enumerable: true,
|
|
47
|
+
get: function () {
|
|
48
|
+
return require_asymmetric_crypto.asymmetric_crypto_exports;
|
|
1300
49
|
}
|
|
1301
|
-
}
|
|
1302
|
-
function pwdProtectedKeyToBase64(pwdProtectedKey) {
|
|
1303
|
-
try {
|
|
1304
|
-
const json = JSON.stringify({
|
|
1305
|
-
encryptedKey: uint8ArrayToBase64(pwdProtectedKey.encryptedKey),
|
|
1306
|
-
salt: uint8ArrayToBase64(pwdProtectedKey.salt)
|
|
1307
|
-
});
|
|
1308
|
-
const base64 = btoa(json);
|
|
1309
|
-
return base64;
|
|
1310
|
-
} catch (error) {
|
|
1311
|
-
throw new Error("Failed to convert password-protected key to base64", { cause: error });
|
|
1312
|
-
}
|
|
1313
|
-
}
|
|
1314
|
-
function hybridEncyptedEmailToBase64(email) {
|
|
1315
|
-
try {
|
|
1316
|
-
const json = JSON.stringify({
|
|
1317
|
-
encryptedKey: encHybridKeyToBase64(email.encryptedKey),
|
|
1318
|
-
enc: ciphertextToBase64(email.enc),
|
|
1319
|
-
recipientEmail: email.recipientEmail
|
|
1320
|
-
});
|
|
1321
|
-
const base64 = btoa(json);
|
|
1322
|
-
return base64;
|
|
1323
|
-
} catch (error) {
|
|
1324
|
-
throw new Error("Failed to convert hybrid email to base64", { cause: error });
|
|
1325
|
-
}
|
|
1326
|
-
}
|
|
1327
|
-
function pwdProtectedEmailToBase64(email) {
|
|
1328
|
-
try {
|
|
1329
|
-
const json = JSON.stringify({
|
|
1330
|
-
encryptedKey: pwdProtectedKeyToBase64(email.encryptedKey),
|
|
1331
|
-
enc: ciphertextToBase64(email.enc)
|
|
1332
|
-
});
|
|
1333
|
-
const base64 = btoa(json);
|
|
1334
|
-
return base64;
|
|
1335
|
-
} catch (error) {
|
|
1336
|
-
throw new Error("Failed to convert pwd protected email to base64", { cause: error });
|
|
1337
|
-
}
|
|
1338
|
-
}
|
|
1339
|
-
function emailToBinary(email) {
|
|
1340
|
-
try {
|
|
1341
|
-
const json = JSON.stringify(email);
|
|
1342
|
-
return UTF8ToUint8(json);
|
|
1343
|
-
} catch (error) {
|
|
1344
|
-
throw new Error("Failed to convert EmailBody to Uint8Array", { cause: error });
|
|
1345
|
-
}
|
|
1346
|
-
}
|
|
1347
|
-
function generateKyberKeys(seed) {
|
|
1348
|
-
try {
|
|
1349
|
-
return mlKem_js.ml_kem768.keygen(seed);
|
|
1350
|
-
} catch (error) {
|
|
1351
|
-
throw new Error("Failed to generate Kyber keys", { cause: error });
|
|
1352
|
-
}
|
|
1353
|
-
}
|
|
1354
|
-
function encapsulateKyber(publicKey) {
|
|
1355
|
-
try {
|
|
1356
|
-
return mlKem_js.ml_kem768.encapsulate(publicKey);
|
|
1357
|
-
} catch (error) {
|
|
1358
|
-
throw new Error("Failed to encapsulate", { cause: error });
|
|
1359
|
-
}
|
|
1360
|
-
}
|
|
1361
|
-
function decapsulateKyber(cipherText, secretKey) {
|
|
1362
|
-
try {
|
|
1363
|
-
return mlKem_js.ml_kem768.decapsulate(cipherText, secretKey);
|
|
1364
|
-
} catch (error) {
|
|
1365
|
-
throw new Error("Failed to decapsulate", { cause: error });
|
|
1366
|
-
}
|
|
1367
|
-
}
|
|
1368
|
-
|
|
1369
|
-
// src/key-wrapper/aesWrapper.ts
|
|
1370
|
-
async function importWrappingKey(key) {
|
|
1371
|
-
try {
|
|
1372
|
-
return await crypto.subtle.importKey(KEY_FORMAT, key, KEY_WRAPPING_ALGORITHM, false, [
|
|
1373
|
-
"wrapKey",
|
|
1374
|
-
"unwrapKey"
|
|
1375
|
-
]);
|
|
1376
|
-
} catch (error) {
|
|
1377
|
-
throw new Error("Failed to import wrapping key", { cause: error });
|
|
1378
|
-
}
|
|
1379
|
-
}
|
|
1380
|
-
async function deriveWrappingKey(eccSecret, kyberSecret) {
|
|
1381
|
-
try {
|
|
1382
|
-
if (eccSecret.length !== kyberSecret.length) {
|
|
1383
|
-
throw new Error("secrets must have equal length");
|
|
1384
|
-
}
|
|
1385
|
-
const key = await deriveKeyFromTwoKeysAndContext(eccSecret, kyberSecret, CONTEXT_WRAPPING);
|
|
1386
|
-
return await importWrappingKey(key);
|
|
1387
|
-
} catch (error) {
|
|
1388
|
-
throw new Error("Failed to derive wrapping key", { cause: error });
|
|
1389
|
-
}
|
|
1390
|
-
}
|
|
1391
|
-
async function unwrapKey(encryptedKey, wrappingKey) {
|
|
1392
|
-
try {
|
|
1393
|
-
return await crypto.subtle.unwrapKey(
|
|
1394
|
-
KEY_FORMAT,
|
|
1395
|
-
encryptedKey,
|
|
1396
|
-
wrappingKey,
|
|
1397
|
-
KEY_WRAPPING_ALGORITHM,
|
|
1398
|
-
AES_ALGORITHM,
|
|
1399
|
-
false,
|
|
1400
|
-
["encrypt", "decrypt"]
|
|
1401
|
-
);
|
|
1402
|
-
} catch (error) {
|
|
1403
|
-
throw new Error("Failed to unwrap key", { cause: error });
|
|
1404
|
-
}
|
|
1405
|
-
}
|
|
1406
|
-
async function wrapKey(encryptionKey, wrappingKey) {
|
|
1407
|
-
try {
|
|
1408
|
-
const result = await crypto.subtle.wrapKey(KEY_FORMAT, encryptionKey, wrappingKey, KEY_WRAPPING_ALGORITHM);
|
|
1409
|
-
return new Uint8Array(result);
|
|
1410
|
-
} catch (error) {
|
|
1411
|
-
throw new Error("Failed to wrap key", { cause: error });
|
|
1412
|
-
}
|
|
1413
|
-
}
|
|
1414
|
-
|
|
1415
|
-
// src/email-crypto/core.ts
|
|
1416
|
-
async function encryptEmailContentSymmetrically(email, aux, emailID) {
|
|
1417
|
-
try {
|
|
1418
|
-
const encryptionKey = await genSymmetricCryptoKey();
|
|
1419
|
-
const enc = await encryptEmailContentSymmetricallyWithKey(email, encryptionKey, aux, emailID);
|
|
1420
|
-
return { enc, encryptionKey };
|
|
1421
|
-
} catch (error) {
|
|
1422
|
-
throw new Error("Failed to symmetrically encrypt email", { cause: error });
|
|
1423
|
-
}
|
|
1424
|
-
}
|
|
1425
|
-
async function encryptEmailContentAndSubjectSymmetrically(email, subject, aux, emailID) {
|
|
1426
|
-
try {
|
|
1427
|
-
const encryptionKey = await genSymmetricCryptoKey();
|
|
1428
|
-
const enc = await encryptEmailContentSymmetricallyWithKey(email, encryptionKey, aux, emailID);
|
|
1429
|
-
const subjectBuff = UTF8ToUint8(subject);
|
|
1430
|
-
const subjectEnc = await encryptSymmetrically(encryptionKey, subjectBuff, aux);
|
|
1431
|
-
return { enc, encryptionKey, subjectEnc };
|
|
1432
|
-
} catch (error) {
|
|
1433
|
-
throw new Error("Failed to symmetrically encrypt email and subject", { cause: error });
|
|
1434
|
-
}
|
|
1435
|
-
}
|
|
1436
|
-
async function decryptEmailAndSubjectSymmetrically(emailCiphertext, encSubject, encryptionKey, aux) {
|
|
1437
|
-
try {
|
|
1438
|
-
const binaryEmail = await decryptSymmetrically(encryptionKey, emailCiphertext, aux);
|
|
1439
|
-
const subject = await decryptSymmetrically(encryptionKey, encSubject, aux);
|
|
1440
|
-
const body = binaryToEmailBody(binaryEmail);
|
|
1441
|
-
return { body, subject: uint8ToUTF8(subject) };
|
|
1442
|
-
} catch (error) {
|
|
1443
|
-
throw new Error("Failed to symmetrically decrypt email and subject", { cause: error });
|
|
1444
|
-
}
|
|
1445
|
-
}
|
|
1446
|
-
async function encryptEmailContentSymmetricallyWithKey(emailBody, encryptionKey, aux, emailID) {
|
|
1447
|
-
try {
|
|
1448
|
-
const binaryEmail = emailBodyToBinary(emailBody);
|
|
1449
|
-
const ciphertext = await encryptSymmetrically(encryptionKey, binaryEmail, aux, emailID);
|
|
1450
|
-
return ciphertext;
|
|
1451
|
-
} catch (error) {
|
|
1452
|
-
throw new Error("Failed to symmetrically encrypt email with the given key", { cause: error });
|
|
1453
|
-
}
|
|
1454
|
-
}
|
|
1455
|
-
async function decryptEmailSymmetrically(emailCiphertext, encryptionKey, aux) {
|
|
1456
|
-
try {
|
|
1457
|
-
const binaryEmail = await decryptSymmetrically(encryptionKey, emailCiphertext, aux);
|
|
1458
|
-
const body = binaryToEmailBody(binaryEmail);
|
|
1459
|
-
return body;
|
|
1460
|
-
} catch (error) {
|
|
1461
|
-
throw new Error("Failed to symmetrically decrypt email", { cause: error });
|
|
1462
|
-
}
|
|
1463
|
-
}
|
|
1464
|
-
async function encryptKeysHybrid(emailEncryptionKey, recipientPublicKey, senderPrivateKey) {
|
|
1465
|
-
try {
|
|
1466
|
-
const eccSecret = await deriveSecretKey(recipientPublicKey.eccPublicKey, senderPrivateKey.eccPrivateKey);
|
|
1467
|
-
const { cipherText: kyberCiphertext, sharedSecret: kyberSecret } = encapsulateKyber(
|
|
1468
|
-
recipientPublicKey.kyberPublicKey
|
|
1469
|
-
);
|
|
1470
|
-
const wrappingKey = await deriveWrappingKey(eccSecret, kyberSecret);
|
|
1471
|
-
const encryptedKey = await wrapKey(emailEncryptionKey, wrappingKey);
|
|
1472
|
-
return { encryptedKey, kyberCiphertext };
|
|
1473
|
-
} catch (error) {
|
|
1474
|
-
throw new Error("Failed to encrypt email key using hybrid encryption", { cause: error });
|
|
1475
|
-
}
|
|
1476
|
-
}
|
|
1477
|
-
async function decryptKeysHybrid(encryptedKey, senderPublicKey, recipientPrivateKey) {
|
|
1478
|
-
try {
|
|
1479
|
-
const eccSecret = await deriveSecretKey(senderPublicKey.eccPublicKey, recipientPrivateKey.eccPrivateKey);
|
|
1480
|
-
const kyberSecret = decapsulateKyber(encryptedKey.kyberCiphertext, recipientPrivateKey.kyberPrivateKey);
|
|
1481
|
-
const wrappingKey = await deriveWrappingKey(eccSecret, kyberSecret);
|
|
1482
|
-
const encryptionKey = await unwrapKey(encryptedKey.encryptedKey, wrappingKey);
|
|
1483
|
-
return encryptionKey;
|
|
1484
|
-
} catch (error) {
|
|
1485
|
-
throw new Error("Failed to decrypt email key encrypted via hybrid encryption", { cause: error });
|
|
1486
|
-
}
|
|
1487
|
-
}
|
|
1488
|
-
async function passwordProtectKey(emailEncryptionKey, password) {
|
|
1489
|
-
try {
|
|
1490
|
-
const { key, salt } = await getKeyFromPassword(password);
|
|
1491
|
-
const wrappingKey = await importWrappingKey(key);
|
|
1492
|
-
const encryptedKey = await wrapKey(emailEncryptionKey, wrappingKey);
|
|
1493
|
-
return { encryptedKey, salt };
|
|
1494
|
-
} catch (error) {
|
|
1495
|
-
throw new Error("Failed to password-protect email key", { cause: error });
|
|
1496
|
-
}
|
|
1497
|
-
}
|
|
1498
|
-
async function removePasswordProtection(emailEncryptionKey, password) {
|
|
1499
|
-
try {
|
|
1500
|
-
const key = await getKeyFromPasswordAndSalt(password, emailEncryptionKey.salt);
|
|
1501
|
-
const wrappingKey = await importWrappingKey(key);
|
|
1502
|
-
const encryptionKey = await unwrapKey(emailEncryptionKey.encryptedKey, wrappingKey);
|
|
1503
|
-
return encryptionKey;
|
|
1504
|
-
} catch (error) {
|
|
1505
|
-
throw new Error("Failed to remove password-protection from email key", { cause: error });
|
|
1506
|
-
}
|
|
1507
|
-
}
|
|
1508
|
-
function getAux(params) {
|
|
1509
|
-
try {
|
|
1510
|
-
const { subject, replyToEmailID, sender, recipients } = params;
|
|
1511
|
-
const aux = JSON.stringify({ subject, replyToEmailID, sender, recipients });
|
|
1512
|
-
return aux;
|
|
1513
|
-
} catch (error) {
|
|
1514
|
-
throw new Error("Failed to create aux", { cause: error });
|
|
1515
|
-
}
|
|
1516
|
-
}
|
|
1517
|
-
function getAuxWithoutSubject(params) {
|
|
1518
|
-
try {
|
|
1519
|
-
const { replyToEmailID, sender, recipients } = params;
|
|
1520
|
-
const aux = JSON.stringify({ replyToEmailID, sender, recipients });
|
|
1521
|
-
return aux;
|
|
1522
|
-
} catch (error) {
|
|
1523
|
-
throw new Error("Failed to create aux without subject", { cause: error });
|
|
1524
|
-
}
|
|
1525
|
-
}
|
|
1526
|
-
function generateEmailID() {
|
|
1527
|
-
return uuid.v4();
|
|
1528
|
-
}
|
|
1529
|
-
|
|
1530
|
-
// src/email-crypto/hybridEncyptedEmail.ts
|
|
1531
|
-
async function encryptEmailHybrid(email, recipient, senderPrivateKey) {
|
|
1532
|
-
try {
|
|
1533
|
-
const aux = getAux(email.params);
|
|
1534
|
-
const { enc, encryptionKey } = await encryptEmailContentSymmetrically(email.body, aux, email.id);
|
|
1535
|
-
const encryptedKey = await encryptKeysHybrid(encryptionKey, recipient.publicKeys, senderPrivateKey);
|
|
1536
|
-
return { enc, encryptedKey, recipientEmail: recipient.email, params: email.params, id: email.id };
|
|
1537
|
-
} catch (error) {
|
|
1538
|
-
throw new Error("Failed to encrypt email with hybrid encryption", { cause: error });
|
|
1539
|
-
}
|
|
1540
|
-
}
|
|
1541
|
-
async function encryptEmailHybridForMultipleRecipients(email, recipients, senderPrivateKey) {
|
|
1542
|
-
try {
|
|
1543
|
-
const aux = getAux(email.params);
|
|
1544
|
-
const { enc, encryptionKey } = await encryptEmailContentSymmetrically(email.body, aux, email.id);
|
|
1545
|
-
const encryptedEmails = [];
|
|
1546
|
-
for (const recipient of recipients) {
|
|
1547
|
-
const encryptedKey = await encryptKeysHybrid(encryptionKey, recipient.publicKeys, senderPrivateKey);
|
|
1548
|
-
encryptedEmails.push({ enc, encryptedKey, recipientEmail: recipient.email, params: email.params, id: email.id });
|
|
1549
|
-
}
|
|
1550
|
-
return encryptedEmails;
|
|
1551
|
-
} catch (error) {
|
|
1552
|
-
throw new Error("Failed to encrypt email to multiple recipients with hybrid encryption", { cause: error });
|
|
1553
|
-
}
|
|
1554
|
-
}
|
|
1555
|
-
async function decryptEmailHybrid(encryptedEmail, senderPublicKeys, recipientPrivateKeys) {
|
|
1556
|
-
try {
|
|
1557
|
-
const aux = getAux(encryptedEmail.params);
|
|
1558
|
-
const encryptionKey = await decryptKeysHybrid(encryptedEmail.encryptedKey, senderPublicKeys, recipientPrivateKeys);
|
|
1559
|
-
const body = await decryptEmailSymmetrically(encryptedEmail.enc, encryptionKey, aux);
|
|
1560
|
-
return { body, params: encryptedEmail.params, id: encryptedEmail.id };
|
|
1561
|
-
} catch (error) {
|
|
1562
|
-
throw new Error("Failed to decrypt email with hybrid encryption", { cause: error });
|
|
1563
|
-
}
|
|
1564
|
-
}
|
|
1565
|
-
|
|
1566
|
-
// src/email-crypto/hybridEncyptedEmailAndSubject.ts
|
|
1567
|
-
async function encryptEmailAndSubjectHybrid(email, recipient, senderPrivateKey) {
|
|
1568
|
-
try {
|
|
1569
|
-
const aux = getAuxWithoutSubject(email.params);
|
|
1570
|
-
const { enc, encryptionKey, subjectEnc } = await encryptEmailContentAndSubjectSymmetrically(
|
|
1571
|
-
email.body,
|
|
1572
|
-
email.params.subject,
|
|
1573
|
-
aux,
|
|
1574
|
-
email.id
|
|
1575
|
-
);
|
|
1576
|
-
const encSubjectStr = ciphertextToBase64(subjectEnc);
|
|
1577
|
-
const encryptedKey = await encryptKeysHybrid(encryptionKey, recipient.publicKeys, senderPrivateKey);
|
|
1578
|
-
const params = { ...email.params, subject: encSubjectStr };
|
|
1579
|
-
return { enc, encryptedKey, recipientEmail: recipient.email, params, id: email.id };
|
|
1580
|
-
} catch (error) {
|
|
1581
|
-
throw new Error("Failed to encrypt the email and its subject with hybrid encryption", { cause: error });
|
|
1582
|
-
}
|
|
1583
|
-
}
|
|
1584
|
-
async function encryptEmailAndSubjectHybridForMultipleRecipients(email, recipients, senderPrivateKey) {
|
|
1585
|
-
try {
|
|
1586
|
-
const aux = getAuxWithoutSubject(email.params);
|
|
1587
|
-
const { enc, encryptionKey, subjectEnc } = await encryptEmailContentAndSubjectSymmetrically(
|
|
1588
|
-
email.body,
|
|
1589
|
-
email.params.subject,
|
|
1590
|
-
aux,
|
|
1591
|
-
email.id
|
|
1592
|
-
);
|
|
1593
|
-
const encSubjectStr = ciphertextToBase64(subjectEnc);
|
|
1594
|
-
const encryptedEmails = [];
|
|
1595
|
-
for (const recipient of recipients) {
|
|
1596
|
-
const encryptedKey = await encryptKeysHybrid(encryptionKey, recipient.publicKeys, senderPrivateKey);
|
|
1597
|
-
const params = { ...email.params, subject: encSubjectStr };
|
|
1598
|
-
encryptedEmails.push({ enc, encryptedKey, recipientEmail: recipient.email, params, id: email.id });
|
|
1599
|
-
}
|
|
1600
|
-
return encryptedEmails;
|
|
1601
|
-
} catch (error) {
|
|
1602
|
-
throw new Error("Failed to encrypt the email and its subject to multiple recipients with hybrid encryption", {
|
|
1603
|
-
cause: error
|
|
1604
|
-
});
|
|
1605
|
-
}
|
|
1606
|
-
}
|
|
1607
|
-
async function decryptEmailAndSubjectHybrid(encryptedEmail, senderPublicKeys, recipientPrivateKeys) {
|
|
1608
|
-
try {
|
|
1609
|
-
const aux = getAuxWithoutSubject(encryptedEmail.params);
|
|
1610
|
-
const encryptionKey = await decryptKeysHybrid(encryptedEmail.encryptedKey, senderPublicKeys, recipientPrivateKeys);
|
|
1611
|
-
const encSubject = base64ToCiphertext(encryptedEmail.params.subject);
|
|
1612
|
-
const { body, subject } = await decryptEmailAndSubjectSymmetrically(
|
|
1613
|
-
encryptedEmail.enc,
|
|
1614
|
-
encSubject,
|
|
1615
|
-
encryptionKey,
|
|
1616
|
-
aux
|
|
1617
|
-
);
|
|
1618
|
-
const params = { ...encryptedEmail.params, subject };
|
|
1619
|
-
return { body, params, id: encryptedEmail.id };
|
|
1620
|
-
} catch (error) {
|
|
1621
|
-
throw new Error("Failed to decrypt the email and its subject with hybrid encryption", { cause: error });
|
|
1622
|
-
}
|
|
1623
|
-
}
|
|
1624
|
-
|
|
1625
|
-
// src/email-crypto/pwdProtectedEmail.ts
|
|
1626
|
-
async function createPwdProtectedEmail(email, password) {
|
|
1627
|
-
try {
|
|
1628
|
-
if (!email?.body || !email.params) {
|
|
1629
|
-
throw new Error("Failed to password-protect email: Invalid email structure");
|
|
1630
|
-
}
|
|
1631
|
-
const aux = getAux(email.params);
|
|
1632
|
-
const { enc, encryptionKey } = await encryptEmailContentSymmetrically(email.body, aux, email.id);
|
|
1633
|
-
const encryptedKey = await passwordProtectKey(encryptionKey, password);
|
|
1634
|
-
return { enc, encryptedKey, params: email.params, id: email.id };
|
|
1635
|
-
} catch (error) {
|
|
1636
|
-
throw new Error("Failed to password-protect email", { cause: error });
|
|
1637
|
-
}
|
|
1638
|
-
}
|
|
1639
|
-
async function decryptPwdProtectedEmail(encryptedEmail, password) {
|
|
1640
|
-
try {
|
|
1641
|
-
const aux = getAux(encryptedEmail.params);
|
|
1642
|
-
const encryptionKey = await removePasswordProtection(encryptedEmail.encryptedKey, password);
|
|
1643
|
-
const body = await decryptEmailSymmetrically(encryptedEmail.enc, encryptionKey, aux);
|
|
1644
|
-
return { body, params: encryptedEmail.params, id: encryptedEmail.id };
|
|
1645
|
-
} catch (error) {
|
|
1646
|
-
throw new Error("Failed to decrypt password-protect email", { cause: error });
|
|
1647
|
-
}
|
|
1648
|
-
}
|
|
1649
|
-
|
|
1650
|
-
// src/email-crypto/pwdProtectedEmailAndSubject.ts
|
|
1651
|
-
async function createPwdProtectedEmailAndSubject(email, password) {
|
|
1652
|
-
try {
|
|
1653
|
-
if (!email?.body || !email.params) {
|
|
1654
|
-
throw new Error("Failed to password-protect email and subject: Invalid email structure");
|
|
1655
|
-
}
|
|
1656
|
-
const aux = getAuxWithoutSubject(email.params);
|
|
1657
|
-
const { enc, encryptionKey, subjectEnc } = await encryptEmailContentAndSubjectSymmetrically(
|
|
1658
|
-
email.body,
|
|
1659
|
-
email.params.subject,
|
|
1660
|
-
aux,
|
|
1661
|
-
email.id
|
|
1662
|
-
);
|
|
1663
|
-
const encryptedKey = await passwordProtectKey(encryptionKey, password);
|
|
1664
|
-
const encSubjectStr = ciphertextToBase64(subjectEnc);
|
|
1665
|
-
const params = { ...email.params, subject: encSubjectStr };
|
|
1666
|
-
return { enc, encryptedKey, params, id: email.id };
|
|
1667
|
-
} catch (error) {
|
|
1668
|
-
throw new Error("Failed to password-protect email and subject", { cause: error });
|
|
1669
|
-
}
|
|
1670
|
-
}
|
|
1671
|
-
async function decryptPwdProtectedEmailAndSubject(encryptedEmail, password) {
|
|
1672
|
-
try {
|
|
1673
|
-
const aux = getAuxWithoutSubject(encryptedEmail.params);
|
|
1674
|
-
const encryptionKey = await removePasswordProtection(encryptedEmail.encryptedKey, password);
|
|
1675
|
-
const encSubject = base64ToCiphertext(encryptedEmail.params.subject);
|
|
1676
|
-
const { body, subject } = await decryptEmailAndSubjectSymmetrically(
|
|
1677
|
-
encryptedEmail.enc,
|
|
1678
|
-
encSubject,
|
|
1679
|
-
encryptionKey,
|
|
1680
|
-
aux
|
|
1681
|
-
);
|
|
1682
|
-
const params = { ...encryptedEmail.params, subject };
|
|
1683
|
-
return { body, params, id: encryptedEmail.id };
|
|
1684
|
-
} catch (error) {
|
|
1685
|
-
throw new Error("Failed to decrypt password-protect email", { cause: error });
|
|
1686
|
-
}
|
|
1687
|
-
}
|
|
1688
|
-
var getDatabaseName = (userID) => {
|
|
1689
|
-
return `ES:${userID}:DB`;
|
|
1690
|
-
};
|
|
1691
|
-
var openDatabase = async (userID) => {
|
|
1692
|
-
try {
|
|
1693
|
-
const dbName = getDatabaseName(userID);
|
|
1694
|
-
return idb.openDB(dbName, DB_VERSION, {
|
|
1695
|
-
upgrade(db) {
|
|
1696
|
-
if (!db.objectStoreNames.contains(DB_LABEL)) {
|
|
1697
|
-
const store = db.createObjectStore(DB_LABEL, { keyPath: "id" });
|
|
1698
|
-
store.createIndex("byTime", "params.createdAt");
|
|
1699
|
-
}
|
|
1700
|
-
}
|
|
1701
|
-
});
|
|
1702
|
-
} catch (error) {
|
|
1703
|
-
throw new Error(`Cannot open a database for the user ${userID}`, { cause: error });
|
|
1704
|
-
}
|
|
1705
|
-
};
|
|
1706
|
-
var closeDatabase = (esDB) => {
|
|
1707
|
-
return esDB.close();
|
|
1708
|
-
};
|
|
1709
|
-
var deriveIndexKey = async (baseKey) => {
|
|
1710
|
-
return deriveSymmetricCryptoKeyFromContext(CONTEXT_INDEX, baseKey);
|
|
1711
|
-
};
|
|
1712
|
-
var encryptAndStoreEmail = async (newEmailToStore, indexKey, esDB) => {
|
|
1713
|
-
try {
|
|
1714
|
-
const aux = getAux(newEmailToStore.params);
|
|
1715
|
-
const ciphertext = await encryptEmailContentSymmetricallyWithKey(
|
|
1716
|
-
newEmailToStore.body,
|
|
1717
|
-
indexKey,
|
|
1718
|
-
aux,
|
|
1719
|
-
newEmailToStore.id
|
|
1720
|
-
);
|
|
1721
|
-
const encryptedEmail = { content: ciphertext, params: newEmailToStore.params, id: newEmailToStore.id };
|
|
1722
|
-
await esDB.put(DB_LABEL, encryptedEmail);
|
|
1723
|
-
} catch (error) {
|
|
1724
|
-
throw new Error("Cannot encrypt and add the given email to the database", { cause: error });
|
|
1725
|
-
}
|
|
1726
|
-
};
|
|
1727
|
-
var encryptAndStoreManyEmail = async (newEmailsToStore, indexKey, esDB) => {
|
|
1728
|
-
try {
|
|
1729
|
-
const encryptedEmails = await Promise.all(
|
|
1730
|
-
newEmailsToStore.map(async (email) => {
|
|
1731
|
-
const aux = getAux(email.params);
|
|
1732
|
-
const ciphertext = await encryptEmailContentSymmetricallyWithKey(email.body, indexKey, aux, email.id);
|
|
1733
|
-
return { content: ciphertext, params: email.params, id: email.id };
|
|
1734
|
-
})
|
|
1735
|
-
);
|
|
1736
|
-
const tr = esDB.transaction(DB_LABEL, "readwrite");
|
|
1737
|
-
await Promise.all([...encryptedEmails.map((encEmail) => tr.store.put(encEmail)), tr.done]);
|
|
1738
|
-
} catch (error) {
|
|
1739
|
-
throw new Error("Cannot encrypt and add emails to the database", { cause: error });
|
|
1740
|
-
}
|
|
1741
|
-
};
|
|
1742
|
-
var decryptEmail = async (indexKey, encryptedEmail) => {
|
|
1743
|
-
try {
|
|
1744
|
-
const aux = getAux(encryptedEmail.params);
|
|
1745
|
-
const email = await decryptEmailSymmetrically(encryptedEmail.content, indexKey, aux);
|
|
1746
|
-
return { body: email, params: encryptedEmail.params, id: encryptedEmail.id };
|
|
1747
|
-
} catch (error) {
|
|
1748
|
-
throw new Error("Cannot decrypt the given email", { cause: error });
|
|
1749
|
-
}
|
|
1750
|
-
};
|
|
1751
|
-
var getAndDecryptEmail = async (emailID, indexKey, esDB) => {
|
|
1752
|
-
try {
|
|
1753
|
-
const encryptedEmail = await esDB.get(DB_LABEL, emailID);
|
|
1754
|
-
if (!encryptedEmail) {
|
|
1755
|
-
throw new Error(`DB cannot find email with id ${emailID}`);
|
|
1756
|
-
}
|
|
1757
|
-
return decryptEmail(indexKey, encryptedEmail);
|
|
1758
|
-
} catch (error) {
|
|
1759
|
-
throw new Error(`Cannot fetch the email ${emailID} from the database`, { cause: error });
|
|
1760
|
-
}
|
|
1761
|
-
};
|
|
1762
|
-
var getAndDecryptAllEmails = async (indexKey, esDB) => {
|
|
1763
|
-
try {
|
|
1764
|
-
const encryptedEmails = await esDB.getAll(DB_LABEL);
|
|
1765
|
-
const decryptedEmails = await Promise.all(
|
|
1766
|
-
encryptedEmails.map(async (encEmail) => {
|
|
1767
|
-
const aux = getAux(encEmail.params);
|
|
1768
|
-
const body = await decryptEmailSymmetrically(encEmail.content, indexKey, aux);
|
|
1769
|
-
return { body, params: encEmail.params, id: encEmail.id };
|
|
1770
|
-
})
|
|
1771
|
-
);
|
|
1772
|
-
return decryptedEmails.filter((email) => email !== null);
|
|
1773
|
-
} catch (error) {
|
|
1774
|
-
throw new Error("Cannot fetch and decrypt all emails from the database", { cause: error });
|
|
1775
|
-
}
|
|
1776
|
-
};
|
|
1777
|
-
var deleteEmail = async (emailID, esDB) => {
|
|
1778
|
-
await esDB.delete(DB_LABEL, emailID);
|
|
1779
|
-
};
|
|
1780
|
-
var getEmailCount = async (esDB) => {
|
|
1781
|
-
return await esDB.count(DB_LABEL);
|
|
1782
|
-
};
|
|
1783
|
-
var deleteOldestEmails = async (emailsToDelete, esDB) => {
|
|
1784
|
-
try {
|
|
1785
|
-
const tx = esDB.transaction(DB_LABEL, "readwrite");
|
|
1786
|
-
const index = tx.store.index("byTime");
|
|
1787
|
-
let cursor = await index.openCursor();
|
|
1788
|
-
let deletedCount = 0;
|
|
1789
|
-
while (cursor && deletedCount < emailsToDelete) {
|
|
1790
|
-
await cursor.delete();
|
|
1791
|
-
deletedCount++;
|
|
1792
|
-
cursor = await cursor.continue();
|
|
1793
|
-
}
|
|
1794
|
-
await tx.done;
|
|
1795
|
-
} catch (error) {
|
|
1796
|
-
throw new Error(`Cannot delete ${emailsToDelete} oldests emails from the database`, { cause: error });
|
|
1797
|
-
}
|
|
1798
|
-
};
|
|
1799
|
-
var enforceMaxEmailNumber = async (esDB, max) => {
|
|
1800
|
-
try {
|
|
1801
|
-
const currentCount = await getEmailCount(esDB);
|
|
1802
|
-
if (currentCount <= max) {
|
|
1803
|
-
return;
|
|
1804
|
-
}
|
|
1805
|
-
await deleteOldestEmails(currentCount - max, esDB);
|
|
1806
|
-
} catch (error) {
|
|
1807
|
-
throw new Error(`Cannot enforce the maximum of ${max} emails on the database`, { cause: error });
|
|
1808
|
-
}
|
|
1809
|
-
};
|
|
1810
|
-
var fetchEmails = async (esDB, indexKey, direction) => {
|
|
1811
|
-
try {
|
|
1812
|
-
const tx = esDB.transaction(DB_LABEL, "readonly");
|
|
1813
|
-
const index = tx.store.index("byTime");
|
|
1814
|
-
const encryptedEmails = [];
|
|
1815
|
-
let cursor = await index.openCursor(null, direction);
|
|
1816
|
-
while (cursor) {
|
|
1817
|
-
encryptedEmails.push(cursor.value);
|
|
1818
|
-
cursor = await cursor.continue();
|
|
1819
|
-
}
|
|
1820
|
-
const emails = await Promise.all(encryptedEmails.map((encryptedEmail) => decryptEmail(indexKey, encryptedEmail)));
|
|
1821
|
-
return emails;
|
|
1822
|
-
} catch (error) {
|
|
1823
|
-
throw new Error("Cannot fetch emails from database", { cause: error });
|
|
1824
|
-
}
|
|
1825
|
-
};
|
|
1826
|
-
var getAllEmailsSortedNewestFirst = async (esDB, indexKey) => {
|
|
1827
|
-
return fetchEmails(esDB, indexKey, "prev");
|
|
1828
|
-
};
|
|
1829
|
-
var getAllEmailsSortedOldestFirst = async (esDB, indexKey) => {
|
|
1830
|
-
return fetchEmails(esDB, indexKey, "next");
|
|
1831
|
-
};
|
|
1832
|
-
var getEmailBatch = async (esDB, indexKey, batchSize, startCursor) => {
|
|
1833
|
-
try {
|
|
1834
|
-
const tx = esDB.transaction(DB_LABEL, "readonly");
|
|
1835
|
-
const index = tx.store.index("byTime");
|
|
1836
|
-
const encryptedEmails = [];
|
|
1837
|
-
let cursor;
|
|
1838
|
-
if (startCursor) {
|
|
1839
|
-
const range = IDBKeyRange.upperBound(startCursor, true);
|
|
1840
|
-
cursor = await index.openCursor(range, "prev");
|
|
1841
|
-
} else {
|
|
1842
|
-
cursor = await index.openCursor(null, "prev");
|
|
1843
|
-
}
|
|
1844
|
-
let count = 0;
|
|
1845
|
-
let nextCursor;
|
|
1846
|
-
while (cursor && count < batchSize) {
|
|
1847
|
-
encryptedEmails.push(cursor.value);
|
|
1848
|
-
nextCursor = cursor.key;
|
|
1849
|
-
count++;
|
|
1850
|
-
cursor = await cursor.continue();
|
|
1851
|
-
}
|
|
1852
|
-
const emails = await Promise.all(encryptedEmails.map((encryptedEmail) => decryptEmail(indexKey, encryptedEmail)));
|
|
1853
|
-
return {
|
|
1854
|
-
emails,
|
|
1855
|
-
nextCursor: count === batchSize ? nextCursor : void 0
|
|
1856
|
-
};
|
|
1857
|
-
} catch (error) {
|
|
1858
|
-
throw new Error(`Cannot fetch email batch of ${batchSize} from the database`, { cause: error });
|
|
1859
|
-
}
|
|
1860
|
-
};
|
|
1861
|
-
|
|
1862
|
-
// src/email-search/mailCache.ts
|
|
1863
|
-
function sizeOfEmail(email) {
|
|
1864
|
-
return emailToBinary(email).byteLength;
|
|
1865
|
-
}
|
|
1866
|
-
function createEmptyCache() {
|
|
1867
|
-
return {
|
|
1868
|
-
esCache: /* @__PURE__ */ new Map(),
|
|
1869
|
-
cacheSize: 0,
|
|
1870
|
-
isCacheLimited: false,
|
|
1871
|
-
isCacheReady: true
|
|
1872
|
-
};
|
|
1873
|
-
}
|
|
1874
|
-
var createCacheFromDB = async (indexKey, esDB) => {
|
|
1875
|
-
const esCache = createEmptyCache();
|
|
1876
|
-
esCache.isCacheReady = false;
|
|
1877
|
-
try {
|
|
1878
|
-
const count = await getEmailCount(esDB);
|
|
1879
|
-
if (!count) {
|
|
1880
|
-
esCache.isCacheReady = true;
|
|
1881
|
-
return esCache;
|
|
1882
|
-
}
|
|
1883
|
-
if (count <= MAX_EMAIL_PER_BATCH) {
|
|
1884
|
-
const emails = await getAllEmailsSortedNewestFirst(esDB, indexKey);
|
|
1885
|
-
addEmailsToCache(emails, esCache);
|
|
1886
|
-
} else {
|
|
1887
|
-
let nextCursor = void 0;
|
|
1888
|
-
let cacheFull = false;
|
|
1889
|
-
while (!cacheFull) {
|
|
1890
|
-
const { emails, nextCursor: newCursor } = await getEmailBatch(
|
|
1891
|
-
esDB,
|
|
1892
|
-
indexKey,
|
|
1893
|
-
MAX_EMAIL_PER_BATCH,
|
|
1894
|
-
nextCursor
|
|
1895
|
-
);
|
|
1896
|
-
if (!newCursor || !emails.length) break;
|
|
1897
|
-
nextCursor = newCursor;
|
|
1898
|
-
const success = addEmailsToCache(emails, esCache);
|
|
1899
|
-
if (!success) cacheFull = true;
|
|
1900
|
-
}
|
|
1901
|
-
}
|
|
1902
|
-
return esCache;
|
|
1903
|
-
} catch (error) {
|
|
1904
|
-
throw new Error(`Email caching failed: ${error}`);
|
|
1905
|
-
}
|
|
1906
|
-
};
|
|
1907
|
-
var getEmailFromCache = async (emailID, esCache) => {
|
|
1908
|
-
const email = esCache.esCache.get(emailID);
|
|
1909
|
-
if (!email) {
|
|
1910
|
-
throw new Error(`Email not found in cache for ID: ${emailID}`);
|
|
1911
|
-
}
|
|
1912
|
-
return email;
|
|
1913
|
-
};
|
|
1914
|
-
var deleteEmailFromCache = async (emailID, esCache) => {
|
|
1915
|
-
try {
|
|
1916
|
-
const email = await getEmailFromCache(emailID, esCache);
|
|
1917
|
-
const size = sizeOfEmail(email);
|
|
1918
|
-
const removed = esCache.esCache.delete(emailID);
|
|
1919
|
-
if (removed) esCache.cacheSize -= size;
|
|
1920
|
-
} catch (error) {
|
|
1921
|
-
throw new Error(`Failed to delete email with ID ${emailID}`, { cause: error });
|
|
1922
|
-
}
|
|
1923
|
-
};
|
|
1924
|
-
function addEmailsToCache(emails, esCache) {
|
|
1925
|
-
try {
|
|
1926
|
-
for (const email of emails) {
|
|
1927
|
-
const result = addEmailToCache(email, esCache);
|
|
1928
|
-
if (!result.success) return result;
|
|
1929
|
-
}
|
|
1930
|
-
return { success: true };
|
|
1931
|
-
} catch (error) {
|
|
1932
|
-
throw new Error("Failed to add emails to the cache", { cause: error });
|
|
1933
|
-
}
|
|
1934
|
-
}
|
|
1935
|
-
var addEmailToCache = (email, esCache) => {
|
|
1936
|
-
try {
|
|
1937
|
-
if (esCache.esCache.has(email.id)) {
|
|
1938
|
-
return { success: false, reason: "email already exists in cache" };
|
|
1939
|
-
}
|
|
1940
|
-
const emailSize = sizeOfEmail(email);
|
|
1941
|
-
if (esCache.cacheSize + emailSize > MAX_CACHE_SIZE) {
|
|
1942
|
-
esCache.isCacheLimited = true;
|
|
1943
|
-
return { success: false, reason: "hit cache limit" };
|
|
1944
|
-
}
|
|
1945
|
-
esCache.esCache.set(email.id, email);
|
|
1946
|
-
esCache.cacheSize += emailSize;
|
|
1947
|
-
return { success: true };
|
|
1948
|
-
} catch (error) {
|
|
1949
|
-
throw new Error("Failed to add email to the cache", { cause: error });
|
|
1950
|
-
}
|
|
1951
|
-
};
|
|
1952
|
-
var SUBJECT_OPTIONS = {
|
|
1953
|
-
preset: "match",
|
|
1954
|
-
tokenize: "forward",
|
|
1955
|
-
resolution: 9,
|
|
1956
|
-
minlength: 2,
|
|
1957
|
-
optimize: true,
|
|
1958
|
-
fastupdate: true,
|
|
1959
|
-
cache: true
|
|
1960
|
-
};
|
|
1961
|
-
var BODY_OPTIONS = {
|
|
1962
|
-
...SUBJECT_OPTIONS,
|
|
1963
|
-
minlength: 3,
|
|
1964
|
-
resolution: 6
|
|
1965
|
-
};
|
|
1966
|
-
var FROM_OPTIONS = {
|
|
1967
|
-
...SUBJECT_OPTIONS,
|
|
1968
|
-
tokenize: "strict",
|
|
1969
|
-
minlength: 1
|
|
1970
|
-
};
|
|
1971
|
-
var TO_OPTIONS = {
|
|
1972
|
-
...SUBJECT_OPTIONS,
|
|
1973
|
-
tokenize: "strict",
|
|
1974
|
-
minlength: 1
|
|
1975
|
-
};
|
|
1976
|
-
var createSearchIndex = () => ({
|
|
1977
|
-
subjectIndex: new flexsearch.Index(SUBJECT_OPTIONS),
|
|
1978
|
-
bodyIndex: new flexsearch.Index(BODY_OPTIONS),
|
|
1979
|
-
fromIndex: new flexsearch.Index(FROM_OPTIONS),
|
|
1980
|
-
toIndex: new flexsearch.Index(TO_OPTIONS),
|
|
1981
|
-
isReady: false
|
|
1982
50
|
});
|
|
1983
|
-
|
|
1984
|
-
|
|
1985
|
-
|
|
1986
|
-
|
|
1987
|
-
searchIndex.subjectIndex.add(emailId, email.params.subject);
|
|
1988
|
-
}
|
|
1989
|
-
if (email.body?.text) {
|
|
1990
|
-
searchIndex.bodyIndex.add(emailId, email.body.text);
|
|
1991
|
-
}
|
|
1992
|
-
if (email.params.sender) {
|
|
1993
|
-
const senderText = `${email.params.sender.name || ""} ${email.params.sender.email || ""}`.trim();
|
|
1994
|
-
searchIndex.fromIndex.add(emailId, senderText);
|
|
1995
|
-
}
|
|
1996
|
-
const recipientsList = email.params.recipients?.length ? email.params.recipients : [email.params.recipient];
|
|
1997
|
-
const recipientsText = recipientsList.map((recipient) => `${recipient.name || ""} ${recipient.email || ""}`.trim()).join(" ");
|
|
1998
|
-
searchIndex.toIndex.add(emailId, recipientsText);
|
|
1999
|
-
} catch (error) {
|
|
2000
|
-
throw new Error("Failed to add email to the search index", { cause: error });
|
|
2001
|
-
}
|
|
2002
|
-
};
|
|
2003
|
-
var removeEmailFromSearchIndex = (emailID, searchIndex) => {
|
|
2004
|
-
try {
|
|
2005
|
-
searchIndex.subjectIndex.remove(emailID);
|
|
2006
|
-
searchIndex.bodyIndex.remove(emailID);
|
|
2007
|
-
searchIndex.fromIndex.remove(emailID);
|
|
2008
|
-
searchIndex.toIndex.remove(emailID);
|
|
2009
|
-
} catch (error) {
|
|
2010
|
-
throw new Error(`Failed to remove email with ID ${emailID} from the search index`, { cause: error });
|
|
2011
|
-
}
|
|
2012
|
-
};
|
|
2013
|
-
var buildSearchIndexFromCache = async (esCache) => {
|
|
2014
|
-
try {
|
|
2015
|
-
const searchIndex = createSearchIndex();
|
|
2016
|
-
searchIndex.isReady = false;
|
|
2017
|
-
for (const email of esCache.esCache.values()) {
|
|
2018
|
-
addEmailToSearchIndex(email, searchIndex);
|
|
2019
|
-
}
|
|
2020
|
-
searchIndex.isReady = true;
|
|
2021
|
-
return searchIndex;
|
|
2022
|
-
} catch (error) {
|
|
2023
|
-
throw new Error("Failed build an email search index from the cache", { cause: error });
|
|
2024
|
-
}
|
|
2025
|
-
};
|
|
2026
|
-
var searchEmails = async (query, esCache, searchIndex, options = {}) => {
|
|
2027
|
-
try {
|
|
2028
|
-
if (!searchIndex.isReady || !query.trim()) {
|
|
2029
|
-
return [];
|
|
2030
|
-
}
|
|
2031
|
-
const {
|
|
2032
|
-
fields = ["subject", "body", "from", "to"],
|
|
2033
|
-
limit = 50,
|
|
2034
|
-
boost = { subject: 3, body: 1, from: 2, to: 2 }
|
|
2035
|
-
} = options;
|
|
2036
|
-
const results = /* @__PURE__ */ new Map();
|
|
2037
|
-
const searchPromises = fields.map(async (field) => {
|
|
2038
|
-
let fieldResults;
|
|
2039
|
-
switch (field) {
|
|
2040
|
-
case "subject":
|
|
2041
|
-
fieldResults = await searchIndex.subjectIndex.searchAsync(query);
|
|
2042
|
-
break;
|
|
2043
|
-
case "body":
|
|
2044
|
-
fieldResults = await searchIndex.bodyIndex.searchAsync(query);
|
|
2045
|
-
break;
|
|
2046
|
-
case "from":
|
|
2047
|
-
fieldResults = await searchIndex.fromIndex.searchAsync(query);
|
|
2048
|
-
break;
|
|
2049
|
-
case "to":
|
|
2050
|
-
fieldResults = await searchIndex.toIndex.searchAsync(query);
|
|
2051
|
-
break;
|
|
2052
|
-
default:
|
|
2053
|
-
return;
|
|
2054
|
-
}
|
|
2055
|
-
const fieldBoost = boost[field] || 1;
|
|
2056
|
-
fieldResults.forEach((emailId) => {
|
|
2057
|
-
const currentScore = results.get(String(emailId)) || 0;
|
|
2058
|
-
results.set(String(emailId), currentScore + fieldBoost);
|
|
2059
|
-
});
|
|
2060
|
-
});
|
|
2061
|
-
await Promise.all(searchPromises);
|
|
2062
|
-
const emailResults = [];
|
|
2063
|
-
for (const [emailId, score] of results) {
|
|
2064
|
-
const email = esCache.esCache.get(emailId);
|
|
2065
|
-
if (email) {
|
|
2066
|
-
emailResults.push({ email, score });
|
|
2067
|
-
}
|
|
2068
|
-
}
|
|
2069
|
-
emailResults.sort((a, b) => (b.score || 0) - (a.score || 0));
|
|
2070
|
-
return emailResults.slice(0, limit);
|
|
2071
|
-
} catch (error) {
|
|
2072
|
-
throw new Error("Email search failed", { cause: error });
|
|
2073
|
-
}
|
|
2074
|
-
};
|
|
2075
|
-
var EmailServiceAPI = class {
|
|
2076
|
-
serviceId;
|
|
2077
|
-
templateId;
|
|
2078
|
-
publicKey;
|
|
2079
|
-
constructor(serviceId, templateId, publicKey) {
|
|
2080
|
-
this.serviceId = serviceId;
|
|
2081
|
-
this.templateId = templateId;
|
|
2082
|
-
this.publicKey = publicKey;
|
|
51
|
+
Object.defineProperty(exports, 'deriveKey', {
|
|
52
|
+
enumerable: true,
|
|
53
|
+
get: function () {
|
|
54
|
+
return require_derive_key.derive_key_exports;
|
|
2083
55
|
}
|
|
2084
|
-
|
|
2085
|
-
|
|
2086
|
-
|
|
2087
|
-
|
|
2088
|
-
|
|
2089
|
-
* @returns The server response
|
|
2090
|
-
*/
|
|
2091
|
-
async sendEmail(content, param) {
|
|
2092
|
-
try {
|
|
2093
|
-
const templateParams = {
|
|
2094
|
-
from_email: param.sender.email,
|
|
2095
|
-
from_name: param.sender.name,
|
|
2096
|
-
to_email: param.recipient.email,
|
|
2097
|
-
to_name: param.recipient.name,
|
|
2098
|
-
email_subject: param.subject,
|
|
2099
|
-
email_body: content,
|
|
2100
|
-
timestamp: (/* @__PURE__ */ new Date()).toISOString()
|
|
2101
|
-
};
|
|
2102
|
-
await emailjs__default.default.send(this.serviceId, this.templateId, templateParams, this.publicKey);
|
|
2103
|
-
} catch (error) {
|
|
2104
|
-
throw new Error(`Failed to send an email ${error.message}`, { cause: error });
|
|
2105
|
-
}
|
|
2106
|
-
}
|
|
2107
|
-
/**
|
|
2108
|
-
* Sends a hybridly encrypted email to a particular recipient recipient
|
|
2109
|
-
*
|
|
2110
|
-
* @param encryptedEmail - The hybridly encrypted email
|
|
2111
|
-
* @returns The server reply
|
|
2112
|
-
*/
|
|
2113
|
-
async sendHybridEmail(encryptedEmail) {
|
|
2114
|
-
try {
|
|
2115
|
-
if (encryptedEmail.recipientEmail !== encryptedEmail.params.recipient.email) {
|
|
2116
|
-
throw new Error("Email is encrypted for another recipient");
|
|
2117
|
-
}
|
|
2118
|
-
const body = hybridEncyptedEmailToBase64(encryptedEmail);
|
|
2119
|
-
await this.sendEmail(body, encryptedEmail.params);
|
|
2120
|
-
} catch (error) {
|
|
2121
|
-
throw new Error(`Failed to email to the recipient: ${error.message}`, { cause: error });
|
|
2122
|
-
}
|
|
2123
|
-
}
|
|
2124
|
-
/**
|
|
2125
|
-
* Sends a password-protected email to a particular recipient
|
|
2126
|
-
*
|
|
2127
|
-
* @param protectedEmail - The password protected email
|
|
2128
|
-
* @param recipient - The email recipient
|
|
2129
|
-
* @returns The server reply
|
|
2130
|
-
*/
|
|
2131
|
-
async sendPwdProtectedEmail(protectedEmail) {
|
|
2132
|
-
try {
|
|
2133
|
-
const body = pwdProtectedEmailToBase64(protectedEmail);
|
|
2134
|
-
await this.sendEmail(body, protectedEmail.params);
|
|
2135
|
-
} catch (error) {
|
|
2136
|
-
throw new Error(`Failed to email to the recipient ${error.message}`, { cause: error });
|
|
2137
|
-
}
|
|
2138
|
-
}
|
|
2139
|
-
};
|
|
2140
|
-
function getEmailServiceAPI(serviceId, templateId, publicKey) {
|
|
2141
|
-
return new EmailServiceAPI(serviceId, templateId, publicKey);
|
|
2142
|
-
}
|
|
2143
|
-
|
|
2144
|
-
// src/types.ts
|
|
2145
|
-
var KeystoreType = /* @__PURE__ */ ((KeystoreType2) => {
|
|
2146
|
-
KeystoreType2["IDENTITY"] = "identity";
|
|
2147
|
-
KeystoreType2["ENCRYPTION"] = "encryption";
|
|
2148
|
-
KeystoreType2["RECOVERY"] = "recovery";
|
|
2149
|
-
KeystoreType2["INDEX"] = "index";
|
|
2150
|
-
return KeystoreType2;
|
|
2151
|
-
})(KeystoreType || {});
|
|
2152
|
-
|
|
2153
|
-
// src/storage-service/sessionStorageService.ts
|
|
2154
|
-
function get(key) {
|
|
2155
|
-
return sessionStorage.getItem(key);
|
|
2156
|
-
}
|
|
2157
|
-
function set(key, value) {
|
|
2158
|
-
return sessionStorage.setItem(key, value);
|
|
2159
|
-
}
|
|
2160
|
-
function removeItem(key) {
|
|
2161
|
-
sessionStorage.removeItem(key);
|
|
2162
|
-
}
|
|
2163
|
-
function exists(key) {
|
|
2164
|
-
return !!sessionStorage.getItem(key);
|
|
2165
|
-
}
|
|
2166
|
-
function clear() {
|
|
2167
|
-
sessionStorage.clear();
|
|
2168
|
-
}
|
|
2169
|
-
var sessionStorageService = {
|
|
2170
|
-
set,
|
|
2171
|
-
get,
|
|
2172
|
-
removeItem,
|
|
2173
|
-
exists,
|
|
2174
|
-
clear
|
|
2175
|
-
};
|
|
2176
|
-
var sessionStorageService_default = sessionStorageService;
|
|
2177
|
-
|
|
2178
|
-
// src/keystore-crypto/core.ts
|
|
2179
|
-
async function encryptKeystoreContent(secretKey, content, userID, tag) {
|
|
2180
|
-
try {
|
|
2181
|
-
const aux = userID + tag;
|
|
2182
|
-
const message = base64ToUint8Array(content);
|
|
2183
|
-
const result = await encryptSymmetrically(secretKey, message, aux);
|
|
2184
|
-
return result;
|
|
2185
|
-
} catch (error) {
|
|
2186
|
-
throw new Error("Failed to encrypt keystore content", { cause: error });
|
|
2187
|
-
}
|
|
2188
|
-
}
|
|
2189
|
-
async function decryptKeystoreContent(secretKey, encryptedKeys, userID, tag) {
|
|
2190
|
-
try {
|
|
2191
|
-
const aux = userID + tag;
|
|
2192
|
-
const content = await decryptSymmetrically(secretKey, encryptedKeys, aux);
|
|
2193
|
-
const result = uint8ArrayToBase64(content);
|
|
2194
|
-
return result;
|
|
2195
|
-
} catch (error) {
|
|
2196
|
-
throw new Error("Failed to decrypt keystore content", { cause: error });
|
|
2197
|
-
}
|
|
2198
|
-
}
|
|
2199
|
-
function getUserID() {
|
|
2200
|
-
try {
|
|
2201
|
-
const userID = sessionStorageService_default.get("userID");
|
|
2202
|
-
if (!userID) {
|
|
2203
|
-
throw new Error("No UserID");
|
|
2204
|
-
}
|
|
2205
|
-
return userID;
|
|
2206
|
-
} catch (error) {
|
|
2207
|
-
throw new Error("Failed to get UserID from session storage", { cause: error });
|
|
2208
|
-
}
|
|
2209
|
-
}
|
|
2210
|
-
function getBaseKey() {
|
|
2211
|
-
try {
|
|
2212
|
-
const baseKeyBase64 = sessionStorageService_default.get("baseKey");
|
|
2213
|
-
if (!baseKeyBase64) {
|
|
2214
|
-
throw new Error("No base key");
|
|
2215
|
-
}
|
|
2216
|
-
return base64ToUint8Array(baseKeyBase64);
|
|
2217
|
-
} catch (error) {
|
|
2218
|
-
throw new Error("Failed to get base key from session storage", { cause: error });
|
|
2219
|
-
}
|
|
2220
|
-
}
|
|
2221
|
-
async function deriveIdentityKeystoreKey(baseKey) {
|
|
2222
|
-
return deriveSymmetricCryptoKeyFromContext(CONTEXT_LOGIN, baseKey);
|
|
2223
|
-
}
|
|
2224
|
-
async function deriveRecoveryKey(recoveryCodes) {
|
|
2225
|
-
const recoveryCodesBuffer = await getBytesFromString(AES_KEY_BIT_LENGTH / 8, recoveryCodes);
|
|
2226
|
-
return deriveSymmetricCryptoKeyFromContext(CONTEXT_RECOVERY, recoveryCodesBuffer);
|
|
2227
|
-
}
|
|
2228
|
-
async function deriveEncryptionKeystoreKey(baseKey) {
|
|
2229
|
-
return deriveSymmetricCryptoKeyFromContext(CONTEXT_ENC_KEYSTORE, baseKey);
|
|
2230
|
-
}
|
|
2231
|
-
|
|
2232
|
-
// src/keystore-crypto/emailEncryptionKey.ts
|
|
2233
|
-
function generateRecoveryCodes() {
|
|
2234
|
-
return genMnemonic(AES_KEY_BIT_LENGTH);
|
|
2235
|
-
}
|
|
2236
|
-
async function generateEncryptionKeys() {
|
|
2237
|
-
try {
|
|
2238
|
-
const keyPair = await generateEccKeys();
|
|
2239
|
-
const keyPairKyber = generateKyberKeys();
|
|
2240
|
-
const result = {
|
|
2241
|
-
userPrivateKey: keyPair.privateKey,
|
|
2242
|
-
userPublicKey: keyPair.publicKey,
|
|
2243
|
-
userPublicKyberKey: keyPairKyber.publicKey,
|
|
2244
|
-
userPrivateKyberKey: keyPairKyber.secretKey
|
|
2245
|
-
};
|
|
2246
|
-
return result;
|
|
2247
|
-
} catch (error) {
|
|
2248
|
-
throw new Error("Failed to generate encryption keys", { cause: error });
|
|
2249
|
-
}
|
|
2250
|
-
}
|
|
2251
|
-
async function createEncryptionAndRecoveryKeystores() {
|
|
2252
|
-
try {
|
|
2253
|
-
const userID = getUserID();
|
|
2254
|
-
const baseKey = getBaseKey();
|
|
2255
|
-
const keys = await generateEncryptionKeys();
|
|
2256
|
-
const content = await encryptionKeysToBase64(keys);
|
|
2257
|
-
const secretKey = await deriveEncryptionKeystoreKey(baseKey);
|
|
2258
|
-
const ciphertext = await encryptKeystoreContent(secretKey, content, userID, ENCRYPTION_KEYSTORE_TAG);
|
|
2259
|
-
const encryptionKeystore = {
|
|
2260
|
-
userID,
|
|
2261
|
-
type: "encryption" /* ENCRYPTION */,
|
|
2262
|
-
encryptedKeys: ciphertext
|
|
2263
|
-
};
|
|
2264
|
-
const recoveryCodes = generateRecoveryCodes();
|
|
2265
|
-
const recoveryKey = await deriveRecoveryKey(recoveryCodes);
|
|
2266
|
-
const encKeys = await encryptKeystoreContent(recoveryKey, content, userID, RECOVERY_KEYSTORE_TAG);
|
|
2267
|
-
const recoveryKeystore = {
|
|
2268
|
-
userID,
|
|
2269
|
-
type: "recovery" /* RECOVERY */,
|
|
2270
|
-
encryptedKeys: encKeys
|
|
2271
|
-
};
|
|
2272
|
-
return { encryptionKeystore, recoveryKeystore, recoveryCodes };
|
|
2273
|
-
} catch (error) {
|
|
2274
|
-
throw new Error("Failed to create encryption and recovery keystores", { cause: error });
|
|
2275
|
-
}
|
|
2276
|
-
}
|
|
2277
|
-
async function openEncryptionKeystore(encryptedKeystore) {
|
|
2278
|
-
try {
|
|
2279
|
-
if (encryptedKeystore.type != "encryption" /* ENCRYPTION */) {
|
|
2280
|
-
throw new Error("Input is invalid");
|
|
2281
|
-
}
|
|
2282
|
-
const baseKey = getBaseKey();
|
|
2283
|
-
const secretKey = await deriveEncryptionKeystoreKey(baseKey);
|
|
2284
|
-
const json = await decryptKeystoreContent(
|
|
2285
|
-
secretKey,
|
|
2286
|
-
encryptedKeystore.encryptedKeys,
|
|
2287
|
-
encryptedKeystore.userID,
|
|
2288
|
-
ENCRYPTION_KEYSTORE_TAG
|
|
2289
|
-
);
|
|
2290
|
-
const keys = await base64ToEncryptionKeys(json);
|
|
2291
|
-
return keys;
|
|
2292
|
-
} catch (error) {
|
|
2293
|
-
throw new Error("Failed to open encryption keystore", { cause: error });
|
|
2294
|
-
}
|
|
2295
|
-
}
|
|
2296
|
-
async function openRecoveryKeystore(recoveryCodes, encryptedKeystore) {
|
|
2297
|
-
try {
|
|
2298
|
-
if (encryptedKeystore.type != "recovery" /* RECOVERY */) {
|
|
2299
|
-
throw new Error("Input is invalid");
|
|
2300
|
-
}
|
|
2301
|
-
const recoveryKey = await deriveRecoveryKey(recoveryCodes);
|
|
2302
|
-
const json = await decryptKeystoreContent(
|
|
2303
|
-
recoveryKey,
|
|
2304
|
-
encryptedKeystore.encryptedKeys,
|
|
2305
|
-
encryptedKeystore.userID,
|
|
2306
|
-
RECOVERY_KEYSTORE_TAG
|
|
2307
|
-
);
|
|
2308
|
-
const keys = await base64ToEncryptionKeys(json);
|
|
2309
|
-
return keys;
|
|
2310
|
-
} catch (error) {
|
|
2311
|
-
throw new Error("Failed to open recovery keystore", { cause: error });
|
|
2312
|
-
}
|
|
2313
|
-
}
|
|
2314
|
-
|
|
2315
|
-
// src/keystore-crypto/userIdenityKey.ts
|
|
2316
|
-
async function generateIdentityKeys() {
|
|
2317
|
-
try {
|
|
2318
|
-
const keyPair = await generateEccKeys();
|
|
2319
|
-
const result = {
|
|
2320
|
-
userPrivateKey: keyPair.privateKey,
|
|
2321
|
-
userPublicKey: keyPair.publicKey
|
|
2322
|
-
};
|
|
2323
|
-
return result;
|
|
2324
|
-
} catch (error) {
|
|
2325
|
-
throw new Error("Failed to generate idenity keys", { cause: error });
|
|
2326
|
-
}
|
|
2327
|
-
}
|
|
2328
|
-
async function createIdentityKeystore() {
|
|
2329
|
-
try {
|
|
2330
|
-
const type = "identity" /* IDENTITY */;
|
|
2331
|
-
const userID = getUserID();
|
|
2332
|
-
const baseKey = getBaseKey();
|
|
2333
|
-
const keys = await generateIdentityKeys();
|
|
2334
|
-
const content = await identityKeysToBase64(keys);
|
|
2335
|
-
const secretKey = await deriveIdentityKeystoreKey(baseKey);
|
|
2336
|
-
const encryptedKeys = await encryptKeystoreContent(secretKey, content, userID, IDENTITY_KEYSTORE_TAG);
|
|
2337
|
-
const result = {
|
|
2338
|
-
userID,
|
|
2339
|
-
type,
|
|
2340
|
-
encryptedKeys
|
|
2341
|
-
};
|
|
2342
|
-
return result;
|
|
2343
|
-
} catch (error) {
|
|
2344
|
-
throw new Error("Failed to create identity keystore", { cause: error });
|
|
2345
|
-
}
|
|
2346
|
-
}
|
|
2347
|
-
async function openIdentityKeystore(encryptedKeystore) {
|
|
2348
|
-
try {
|
|
2349
|
-
if (encryptedKeystore.type != "identity" /* IDENTITY */) {
|
|
2350
|
-
throw new Error("Input is invalid");
|
|
2351
|
-
}
|
|
2352
|
-
const baseKey = getBaseKey();
|
|
2353
|
-
const secretKey = await deriveIdentityKeystoreKey(baseKey);
|
|
2354
|
-
const json = await decryptKeystoreContent(
|
|
2355
|
-
secretKey,
|
|
2356
|
-
encryptedKeystore.encryptedKeys,
|
|
2357
|
-
encryptedKeystore.userID,
|
|
2358
|
-
IDENTITY_KEYSTORE_TAG
|
|
2359
|
-
);
|
|
2360
|
-
const keys = await base64ToIdentityKeys(json);
|
|
2361
|
-
return keys;
|
|
2362
|
-
} catch (error) {
|
|
2363
|
-
throw new Error("Failed to open identity keystore", { cause: error });
|
|
2364
|
-
}
|
|
2365
|
-
}
|
|
2366
|
-
var KeyServiceAPI = class {
|
|
2367
|
-
baseUrl;
|
|
2368
|
-
constructor(baseUrl) {
|
|
2369
|
-
this.baseUrl = baseUrl;
|
|
2370
|
-
}
|
|
2371
|
-
/**
|
|
2372
|
-
* Converts the specific client error into a proprietary error for our apps
|
|
2373
|
-
* @param error
|
|
2374
|
-
* @private
|
|
2375
|
-
*/
|
|
2376
|
-
normalizeError(error) {
|
|
2377
|
-
let errorMessage;
|
|
2378
|
-
if (error.response?.status === 401) {
|
|
2379
|
-
errorMessage = "Unauthorized: Invalid or expired token";
|
|
2380
|
-
} else if (error.response?.status === 403) {
|
|
2381
|
-
errorMessage = "Forbidden: Insufficient permissions";
|
|
2382
|
-
} else if (error.response?.status === 404) {
|
|
2383
|
-
errorMessage = "Keystore not found for the specified user";
|
|
2384
|
-
} else {
|
|
2385
|
-
errorMessage = "AxiosError:" + (error.message ?? "Unknown error");
|
|
2386
|
-
}
|
|
2387
|
-
throw new Error(errorMessage);
|
|
2388
|
-
}
|
|
2389
|
-
/**
|
|
2390
|
-
* Sends a user's encrypted keystore to the server
|
|
2391
|
-
* @param keystore - The encrypted keystore
|
|
2392
|
-
* @param url - The user specific part of the url
|
|
2393
|
-
* @returns Server response
|
|
2394
|
-
*/
|
|
2395
|
-
async sendEncryptedKeystoreToServer(encryptedKeystore, url) {
|
|
2396
|
-
try {
|
|
2397
|
-
const response = await axios__default.default.post(
|
|
2398
|
-
this.baseUrl + `${url}`,
|
|
2399
|
-
{ encryptedKeystore },
|
|
2400
|
-
{
|
|
2401
|
-
withCredentials: true,
|
|
2402
|
-
headers: {
|
|
2403
|
-
"Content-Type": "application/json"
|
|
2404
|
-
}
|
|
2405
|
-
}
|
|
2406
|
-
);
|
|
2407
|
-
return response;
|
|
2408
|
-
} catch (error) {
|
|
2409
|
-
if (axios__default.default.isAxiosError(error)) {
|
|
2410
|
-
this.normalizeError(error);
|
|
2411
|
-
}
|
|
2412
|
-
throw new Error("Failed to send keystore", { cause: error });
|
|
2413
|
-
}
|
|
56
|
+
});
|
|
57
|
+
Object.defineProperty(exports, 'emailCrypto', {
|
|
58
|
+
enumerable: true,
|
|
59
|
+
get: function () {
|
|
60
|
+
return require_email_crypto.email_crypto_exports;
|
|
2414
61
|
}
|
|
2415
|
-
|
|
2416
|
-
|
|
2417
|
-
|
|
2418
|
-
|
|
2419
|
-
|
|
2420
|
-
async requestEncryptedKeystore(userID, keystoreType) {
|
|
2421
|
-
try {
|
|
2422
|
-
const url = `/downloadKeystore/${userID}/${keystoreType.toString()}`;
|
|
2423
|
-
const response = await axios__default.default.get(this.baseUrl + `${url}`, {
|
|
2424
|
-
withCredentials: true,
|
|
2425
|
-
headers: {
|
|
2426
|
-
"Content-Type": "application/json"
|
|
2427
|
-
}
|
|
2428
|
-
});
|
|
2429
|
-
return response.data;
|
|
2430
|
-
} catch (error) {
|
|
2431
|
-
if (axios__default.default.isAxiosError(error)) {
|
|
2432
|
-
this.normalizeError(error);
|
|
2433
|
-
}
|
|
2434
|
-
throw new Error("Failed to retrive keystore", { cause: error });
|
|
2435
|
-
}
|
|
62
|
+
});
|
|
63
|
+
Object.defineProperty(exports, 'emailSearch', {
|
|
64
|
+
enumerable: true,
|
|
65
|
+
get: function () {
|
|
66
|
+
return require_email_search.email_search_exports;
|
|
2436
67
|
}
|
|
2437
|
-
|
|
2438
|
-
|
|
2439
|
-
|
|
2440
|
-
|
|
2441
|
-
|
|
2442
|
-
* @returns Server response
|
|
2443
|
-
*/
|
|
2444
|
-
async uploadKeystoreToServer(encryptedKeystore) {
|
|
2445
|
-
try {
|
|
2446
|
-
const userID = getUserID();
|
|
2447
|
-
const keystoreType = encryptedKeystore.type;
|
|
2448
|
-
const url = `/uploadKeystore/${userID}/${keystoreType}`;
|
|
2449
|
-
const ciphertextBase64 = encryptedKeystoreToBase64(encryptedKeystore);
|
|
2450
|
-
const result = await this.sendEncryptedKeystoreToServer(ciphertextBase64, url);
|
|
2451
|
-
return result;
|
|
2452
|
-
} catch (error) {
|
|
2453
|
-
throw new Error("Failed to upload keystore to the server", { cause: error });
|
|
2454
|
-
}
|
|
68
|
+
});
|
|
69
|
+
Object.defineProperty(exports, 'hash', {
|
|
70
|
+
enumerable: true,
|
|
71
|
+
get: function () {
|
|
72
|
+
return require_hash.hash_exports;
|
|
2455
73
|
}
|
|
2456
|
-
|
|
2457
|
-
|
|
2458
|
-
|
|
2459
|
-
|
|
2460
|
-
|
|
2461
|
-
async getEncryptionKeystoreFromServer() {
|
|
2462
|
-
return this.getKeystoreFromServer("encryption" /* ENCRYPTION */);
|
|
74
|
+
});
|
|
75
|
+
Object.defineProperty(exports, 'keyWrapper', {
|
|
76
|
+
enumerable: true,
|
|
77
|
+
get: function () {
|
|
78
|
+
return require_email_crypto.key_wrapper_exports;
|
|
2463
79
|
}
|
|
2464
|
-
|
|
2465
|
-
|
|
2466
|
-
|
|
2467
|
-
|
|
2468
|
-
|
|
2469
|
-
async getIdentityKeystoreFromServer() {
|
|
2470
|
-
return this.getKeystoreFromServer("identity" /* IDENTITY */);
|
|
80
|
+
});
|
|
81
|
+
Object.defineProperty(exports, 'keystoreCrypto', {
|
|
82
|
+
enumerable: true,
|
|
83
|
+
get: function () {
|
|
84
|
+
return require_keystore_crypto.keystore_crypto_exports;
|
|
2471
85
|
}
|
|
2472
|
-
|
|
2473
|
-
|
|
2474
|
-
|
|
2475
|
-
|
|
2476
|
-
|
|
2477
|
-
async getRecoveryKeystoreFromServer() {
|
|
2478
|
-
return this.getKeystoreFromServer("recovery" /* RECOVERY */);
|
|
86
|
+
});
|
|
87
|
+
Object.defineProperty(exports, 'keystoreService', {
|
|
88
|
+
enumerable: true,
|
|
89
|
+
get: function () {
|
|
90
|
+
return require_keystore_service.keystore_service_exports;
|
|
2479
91
|
}
|
|
2480
|
-
|
|
2481
|
-
|
|
2482
|
-
|
|
2483
|
-
|
|
2484
|
-
|
|
2485
|
-
async getIndexKeystoreFromServer() {
|
|
2486
|
-
return this.getKeystoreFromServer("index" /* INDEX */);
|
|
92
|
+
});
|
|
93
|
+
Object.defineProperty(exports, 'pq', {
|
|
94
|
+
enumerable: true,
|
|
95
|
+
get: function () {
|
|
96
|
+
return require_post_quantum_crypto.post_quantum_crypto_exports;
|
|
2487
97
|
}
|
|
2488
|
-
|
|
2489
|
-
|
|
2490
|
-
|
|
2491
|
-
|
|
2492
|
-
|
|
2493
|
-
*/
|
|
2494
|
-
async getKeystoreFromServer(type) {
|
|
2495
|
-
try {
|
|
2496
|
-
const userID = getUserID();
|
|
2497
|
-
const response = await this.requestEncryptedKeystore(userID, type);
|
|
2498
|
-
const result = base64ToEncryptedKeystore(response);
|
|
2499
|
-
return result;
|
|
2500
|
-
} catch (error) {
|
|
2501
|
-
throw new Error("Failed to retrieve keystore from the server", { cause: error });
|
|
2502
|
-
}
|
|
98
|
+
});
|
|
99
|
+
Object.defineProperty(exports, 'storage', {
|
|
100
|
+
enumerable: true,
|
|
101
|
+
get: function () {
|
|
102
|
+
return require_storage_service.storage_service_exports;
|
|
2503
103
|
}
|
|
2504
|
-
|
|
2505
|
-
|
|
2506
|
-
|
|
2507
|
-
|
|
2508
|
-
|
|
2509
|
-
*/
|
|
2510
|
-
async getRecipientsPublicKeysFromServer(emails) {
|
|
2511
|
-
try {
|
|
2512
|
-
const response = await axios__default.default.get("/api/getPublicKeys", {
|
|
2513
|
-
params: {
|
|
2514
|
-
emails
|
|
2515
|
-
},
|
|
2516
|
-
withCredentials: true,
|
|
2517
|
-
headers: {
|
|
2518
|
-
"Content-Type": "application/json"
|
|
2519
|
-
}
|
|
2520
|
-
});
|
|
2521
|
-
return response.data;
|
|
2522
|
-
} catch (error) {
|
|
2523
|
-
if (axios__default.default.isAxiosError(error)) {
|
|
2524
|
-
this.normalizeError(error);
|
|
2525
|
-
}
|
|
2526
|
-
throw new Error("Failed to retrieve public keys", { cause: error });
|
|
2527
|
-
}
|
|
104
|
+
});
|
|
105
|
+
Object.defineProperty(exports, 'symmetric', {
|
|
106
|
+
enumerable: true,
|
|
107
|
+
get: function () {
|
|
108
|
+
return require_symmetric_crypto.symmetric_crypto_exports;
|
|
2528
109
|
}
|
|
2529
|
-
|
|
2530
|
-
|
|
2531
|
-
|
|
2532
|
-
|
|
2533
|
-
|
|
2534
|
-
*/
|
|
2535
|
-
async getRecipientsPublicKeys(emails) {
|
|
2536
|
-
try {
|
|
2537
|
-
const publicKeysBase64 = await this.getRecipientsPublicKeysFromServer(emails);
|
|
2538
|
-
const result = [];
|
|
2539
|
-
for (const keyBase64 of publicKeysBase64) {
|
|
2540
|
-
const publicKeys = await base64ToPublicKey(keyBase64);
|
|
2541
|
-
result.push(publicKeys);
|
|
2542
|
-
}
|
|
2543
|
-
return result;
|
|
2544
|
-
} catch (error) {
|
|
2545
|
-
throw new Error("Failed to get recipients public keys", { cause: error });
|
|
2546
|
-
}
|
|
110
|
+
});
|
|
111
|
+
Object.defineProperty(exports, 'utils', {
|
|
112
|
+
enumerable: true,
|
|
113
|
+
get: function () {
|
|
114
|
+
return require_utils.utils_exports;
|
|
2547
115
|
}
|
|
2548
|
-
};
|
|
2549
|
-
function getKeyServiceAPI(baseUrl) {
|
|
2550
|
-
return new KeyServiceAPI(baseUrl);
|
|
2551
|
-
}
|
|
2552
|
-
/*! Bundled license information:
|
|
2553
|
-
|
|
2554
|
-
hash-wasm/dist/index.esm.js:
|
|
2555
|
-
(*!
|
|
2556
|
-
* hash-wasm (https://www.npmjs.com/package/hash-wasm)
|
|
2557
|
-
* (c) Dani Biro
|
|
2558
|
-
* @license MIT
|
|
2559
|
-
*)
|
|
2560
|
-
*/
|
|
2561
|
-
|
|
2562
|
-
exports.AES_ALGORITHM = AES_ALGORITHM;
|
|
2563
|
-
exports.AES_KEY_BIT_LENGTH = AES_KEY_BIT_LENGTH;
|
|
2564
|
-
exports.ARGON2ID_ITERATIONS = ARGON2ID_ITERATIONS;
|
|
2565
|
-
exports.ARGON2ID_MEMORY_SIZE = ARGON2ID_MEMORY_SIZE;
|
|
2566
|
-
exports.ARGON2ID_OUTPUT_BYTE_LENGTH = ARGON2ID_OUTPUT_BYTE_LENGTH;
|
|
2567
|
-
exports.ARGON2ID_PARALLELISM = ARGON2ID_PARALLELISM;
|
|
2568
|
-
exports.ARGON2ID_SALT_BYTE_LENGTH = ARGON2ID_SALT_BYTE_LENGTH;
|
|
2569
|
-
exports.AUX_LEN = AUX_LEN;
|
|
2570
|
-
exports.CONTEXT_DERIVE = CONTEXT_DERIVE;
|
|
2571
|
-
exports.CONTEXT_ENC_KEYSTORE = CONTEXT_ENC_KEYSTORE;
|
|
2572
|
-
exports.CONTEXT_INDEX = CONTEXT_INDEX;
|
|
2573
|
-
exports.CONTEXT_LOGIN = CONTEXT_LOGIN;
|
|
2574
|
-
exports.CONTEXT_RECOVERY = CONTEXT_RECOVERY;
|
|
2575
|
-
exports.CONTEXT_WRAPPING = CONTEXT_WRAPPING;
|
|
2576
|
-
exports.DB_LABEL = DB_LABEL;
|
|
2577
|
-
exports.DB_VERSION = DB_VERSION;
|
|
2578
|
-
exports.ECC_ALGORITHM = ECC_ALGORITHM;
|
|
2579
|
-
exports.ENCRYPTION_KEYSTORE_TAG = ENCRYPTION_KEYSTORE_TAG;
|
|
2580
|
-
exports.HASH_BIT_LEN = HASH_BIT_LEN;
|
|
2581
|
-
exports.IDENTITY_KEYSTORE_TAG = IDENTITY_KEYSTORE_TAG;
|
|
2582
|
-
exports.INDEX_KEYSTORE_TAG = INDEX_KEYSTORE_TAG;
|
|
2583
|
-
exports.IV_LEN_BYTES = IV_LEN_BYTES;
|
|
2584
|
-
exports.KEY_FORMAT = KEY_FORMAT;
|
|
2585
|
-
exports.KEY_WRAPPING_ALGORITHM = KEY_WRAPPING_ALGORITHM;
|
|
2586
|
-
exports.KYBER1024_PUBLIC_KEY_LENGTH = KYBER1024_PUBLIC_KEY_LENGTH;
|
|
2587
|
-
exports.KYBER1024_SECRET_KEY_LENGTH = KYBER1024_SECRET_KEY_LENGTH;
|
|
2588
|
-
exports.KYBER512_PUBLIC_KEY_LENGTH = KYBER512_PUBLIC_KEY_LENGTH;
|
|
2589
|
-
exports.KYBER512_SECRET_KEY_LENGTH = KYBER512_SECRET_KEY_LENGTH;
|
|
2590
|
-
exports.KYBER768_PUBLIC_KEY_LENGTH = KYBER768_PUBLIC_KEY_LENGTH;
|
|
2591
|
-
exports.KYBER768_SECRET_KEY_LENGTH = KYBER768_SECRET_KEY_LENGTH;
|
|
2592
|
-
exports.KYBER_SEED_LENGTH = KYBER_SEED_LENGTH;
|
|
2593
|
-
exports.KeystoreType = KeystoreType;
|
|
2594
|
-
exports.MAX_CACHE_SIZE = MAX_CACHE_SIZE;
|
|
2595
|
-
exports.MAX_EMAIL_PER_BATCH = MAX_EMAIL_PER_BATCH;
|
|
2596
|
-
exports.PREFIX_IDENTITY_KEY_COMMITMENT = PREFIX_IDENTITY_KEY_COMMITMENT;
|
|
2597
|
-
exports.PREFIX_MEDIA_KEY_COMMITMENT = PREFIX_MEDIA_KEY_COMMITMENT;
|
|
2598
|
-
exports.PREFIX_PUBLIC_KEY_COMMITMENT = PREFIX_PUBLIC_KEY_COMMITMENT;
|
|
2599
|
-
exports.RECOVERY_KEYSTORE_TAG = RECOVERY_KEYSTORE_TAG;
|
|
2600
|
-
exports.UTF8ToUint8 = UTF8ToUint8;
|
|
2601
|
-
exports.addEmailToCache = addEmailToCache;
|
|
2602
|
-
exports.addEmailToSearchIndex = addEmailToSearchIndex;
|
|
2603
|
-
exports.addEmailsToCache = addEmailsToCache;
|
|
2604
|
-
exports.base64ToCiphertext = base64ToCiphertext;
|
|
2605
|
-
exports.base64ToEncryptedKeystore = base64ToEncryptedKeystore;
|
|
2606
|
-
exports.base64ToEncryptionKeys = base64ToEncryptionKeys;
|
|
2607
|
-
exports.base64ToIdentityKeys = base64ToIdentityKeys;
|
|
2608
|
-
exports.base64ToMediaKeys = base64ToMediaKeys;
|
|
2609
|
-
exports.base64ToPublicKey = base64ToPublicKey;
|
|
2610
|
-
exports.base64ToUint8Array = base64ToUint8Array;
|
|
2611
|
-
exports.buildSearchIndexFromCache = buildSearchIndexFromCache;
|
|
2612
|
-
exports.ciphertextToBase64 = ciphertextToBase64;
|
|
2613
|
-
exports.closeDatabase = closeDatabase;
|
|
2614
|
-
exports.computeMac = computeMac;
|
|
2615
|
-
exports.createCacheFromDB = createCacheFromDB;
|
|
2616
|
-
exports.createEncryptionAndRecoveryKeystores = createEncryptionAndRecoveryKeystores;
|
|
2617
|
-
exports.createIdentityKeystore = createIdentityKeystore;
|
|
2618
|
-
exports.createPwdProtectedEmail = createPwdProtectedEmail;
|
|
2619
|
-
exports.createPwdProtectedEmailAndSubject = createPwdProtectedEmailAndSubject;
|
|
2620
|
-
exports.decapsulateKyber = decapsulateKyber;
|
|
2621
|
-
exports.decryptEmailAndSubjectHybrid = decryptEmailAndSubjectHybrid;
|
|
2622
|
-
exports.decryptEmailHybrid = decryptEmailHybrid;
|
|
2623
|
-
exports.decryptPwdProtectedEmail = decryptPwdProtectedEmail;
|
|
2624
|
-
exports.decryptPwdProtectedEmailAndSubject = decryptPwdProtectedEmailAndSubject;
|
|
2625
|
-
exports.decryptSymmetrically = decryptSymmetrically;
|
|
2626
|
-
exports.deleteEmail = deleteEmail;
|
|
2627
|
-
exports.deleteEmailFromCache = deleteEmailFromCache;
|
|
2628
|
-
exports.deleteOldestEmails = deleteOldestEmails;
|
|
2629
|
-
exports.deriveIndexKey = deriveIndexKey;
|
|
2630
|
-
exports.deriveSecretKey = deriveSecretKey;
|
|
2631
|
-
exports.deriveSymmetricCryptoKey = deriveSymmetricCryptoKey;
|
|
2632
|
-
exports.deriveSymmetricCryptoKeyFromContext = deriveSymmetricCryptoKeyFromContext;
|
|
2633
|
-
exports.deriveSymmetricCryptoKeyFromTwoKeys = deriveSymmetricCryptoKeyFromTwoKeys;
|
|
2634
|
-
exports.deriveSymmetricKeyFromContext = deriveSymmetricKeyFromContext;
|
|
2635
|
-
exports.deriveSymmetricKeyFromTwoKeys = deriveSymmetricKeyFromTwoKeys;
|
|
2636
|
-
exports.encapsulateKyber = encapsulateKyber;
|
|
2637
|
-
exports.encryptAndStoreEmail = encryptAndStoreEmail;
|
|
2638
|
-
exports.encryptAndStoreManyEmail = encryptAndStoreManyEmail;
|
|
2639
|
-
exports.encryptEmailAndSubjectHybrid = encryptEmailAndSubjectHybrid;
|
|
2640
|
-
exports.encryptEmailAndSubjectHybridForMultipleRecipients = encryptEmailAndSubjectHybridForMultipleRecipients;
|
|
2641
|
-
exports.encryptEmailHybrid = encryptEmailHybrid;
|
|
2642
|
-
exports.encryptEmailHybridForMultipleRecipients = encryptEmailHybridForMultipleRecipients;
|
|
2643
|
-
exports.encryptSymmetrically = encryptSymmetrically;
|
|
2644
|
-
exports.encryptedKeystoreToBase64 = encryptedKeystoreToBase64;
|
|
2645
|
-
exports.encryptionKeysToBase64 = encryptionKeysToBase64;
|
|
2646
|
-
exports.enforceMaxEmailNumber = enforceMaxEmailNumber;
|
|
2647
|
-
exports.exportPrivateKey = exportPrivateKey;
|
|
2648
|
-
exports.exportPublicKey = exportPublicKey;
|
|
2649
|
-
exports.exportSymmetricCryptoKey = exportSymmetricCryptoKey;
|
|
2650
|
-
exports.genMnemonic = genMnemonic;
|
|
2651
|
-
exports.genSymmetricCryptoKey = genSymmetricCryptoKey;
|
|
2652
|
-
exports.genSymmetricKey = genSymmetricKey;
|
|
2653
|
-
exports.generateEccKeys = generateEccKeys;
|
|
2654
|
-
exports.generateEmailID = generateEmailID;
|
|
2655
|
-
exports.generateEncryptionKeys = generateEncryptionKeys;
|
|
2656
|
-
exports.generateIdentityKeys = generateIdentityKeys;
|
|
2657
|
-
exports.generateKyberKeys = generateKyberKeys;
|
|
2658
|
-
exports.generateRecoveryCodes = generateRecoveryCodes;
|
|
2659
|
-
exports.getAllEmailsSortedNewestFirst = getAllEmailsSortedNewestFirst;
|
|
2660
|
-
exports.getAllEmailsSortedOldestFirst = getAllEmailsSortedOldestFirst;
|
|
2661
|
-
exports.getAndDecryptAllEmails = getAndDecryptAllEmails;
|
|
2662
|
-
exports.getAndDecryptEmail = getAndDecryptEmail;
|
|
2663
|
-
exports.getAux = getAux;
|
|
2664
|
-
exports.getAuxWithoutSubject = getAuxWithoutSubject;
|
|
2665
|
-
exports.getBytesFromData = getBytesFromData;
|
|
2666
|
-
exports.getBytesFromDataHex = getBytesFromDataHex;
|
|
2667
|
-
exports.getBytesFromString = getBytesFromString;
|
|
2668
|
-
exports.getEmailBatch = getEmailBatch;
|
|
2669
|
-
exports.getEmailCount = getEmailCount;
|
|
2670
|
-
exports.getEmailFromCache = getEmailFromCache;
|
|
2671
|
-
exports.getEmailServiceAPI = getEmailServiceAPI;
|
|
2672
|
-
exports.getKeyFromPassword = getKeyFromPassword;
|
|
2673
|
-
exports.getKeyFromPasswordAndSalt = getKeyFromPasswordAndSalt;
|
|
2674
|
-
exports.getKeyFromPasswordAndSaltHex = getKeyFromPasswordAndSaltHex;
|
|
2675
|
-
exports.getKeyFromPasswordHex = getKeyFromPasswordHex;
|
|
2676
|
-
exports.getKeyServiceAPI = getKeyServiceAPI;
|
|
2677
|
-
exports.hashData = hashData;
|
|
2678
|
-
exports.hexToUint8Array = hexToUint8Array;
|
|
2679
|
-
exports.identityKeysToBase64 = identityKeysToBase64;
|
|
2680
|
-
exports.importPrivateKey = importPrivateKey;
|
|
2681
|
-
exports.importPublicKey = importPublicKey;
|
|
2682
|
-
exports.importSymmetricCryptoKey = importSymmetricCryptoKey;
|
|
2683
|
-
exports.mediaKeysToBase64 = mediaKeysToBase64;
|
|
2684
|
-
exports.openDatabase = openDatabase;
|
|
2685
|
-
exports.openEncryptionKeystore = openEncryptionKeystore;
|
|
2686
|
-
exports.openIdentityKeystore = openIdentityKeystore;
|
|
2687
|
-
exports.openRecoveryKeystore = openRecoveryKeystore;
|
|
2688
|
-
exports.publicKeyToBase64 = publicKeyToBase64;
|
|
2689
|
-
exports.removeEmailFromSearchIndex = removeEmailFromSearchIndex;
|
|
2690
|
-
exports.searchEmails = searchEmails;
|
|
2691
|
-
exports.uint8ArrayToBase64 = uint8ArrayToBase64;
|
|
2692
|
-
exports.uint8ArrayToHex = uint8ArrayToHex;
|
|
2693
|
-
exports.uint8ToUTF8 = uint8ToUTF8;
|
|
2694
|
-
exports.unwrapKey = unwrapKey;
|
|
2695
|
-
exports.verifyKeyFromPasswordHex = verifyKeyFromPasswordHex;
|
|
2696
|
-
exports.wrapKey = wrapKey;
|
|
2697
|
-
//# sourceMappingURL=index.js.map
|
|
2698
|
-
//# sourceMappingURL=index.js.map
|
|
116
|
+
});
|