k9crypt 1.0.6 → 1.0.8

package/README.md

@@ -2,6 +2,18 @@
 
 This is a special encryption algorithm created for K9Crypt.
 
+## Updates
+**v1.0.8**
+- Enhanced encryption security with 5-layer encryption system
+- Added multiple AES encryption modes in sequence:
+  - AES-256-GCM
+  - AES-256-CBC
+  - AES-256-CFB
+  - AES-256-OFB
+  - AES-256-CTR
+- Each layer now uses its own initialization vector (IV)
+- Improved data integrity with comprehensive authentication
+
 ## Installation
 
 ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "k9crypt",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "description": "A special encryption algorithm created for K9Crypt.",
   "main": "index.js",
   "scripts": {

package/src/index.js

@@ -15,10 +15,10 @@ class K9crypt {
             const compressed = await compress(plaintext);
             const salt = crypto.randomBytes(SALT_SIZE);
             const key = await deriveKey(this.secretKey, salt);
-            const { iv1, iv2, encrypted, tag1 } = encrypt(compressed, key);
-            const dataToHash = Buffer.concat([salt, iv1, iv2, encrypted, tag1]);
+            const { iv1, iv2, iv3, iv4, iv5, encrypted, tag1 } = encrypt(compressed, key);
+            const dataToHash = Buffer.concat([salt, iv1, iv2, iv3, iv4, iv5, encrypted, tag1]);
             const dataHash = hash(dataToHash);
-            const result = Buffer.concat([salt, iv1, iv2, encrypted, tag1, dataHash]);
+            const result = Buffer.concat([salt, iv1, iv2, iv3, iv4, iv5, encrypted, tag1, dataHash]);
             return result.toString('base64');
         } catch (error) {
             console.log('Encryption failed');
@@ -31,7 +31,10 @@ class K9crypt {
             const salt = data.slice(0, SALT_SIZE);
             const iv1 = data.slice(SALT_SIZE, SALT_SIZE + IV_SIZE);
             const iv2 = data.slice(SALT_SIZE + IV_SIZE, SALT_SIZE + 2 * IV_SIZE);
-            const encrypted = data.slice(SALT_SIZE + 2 * IV_SIZE, -TAG_SIZE - 64);
+            const iv3 = data.slice(SALT_SIZE + 2 * IV_SIZE, SALT_SIZE + 3 * IV_SIZE);
+            const iv4 = data.slice(SALT_SIZE + 3 * IV_SIZE, SALT_SIZE + 4 * IV_SIZE);
+            const iv5 = data.slice(SALT_SIZE + 4 * IV_SIZE, SALT_SIZE + 5 * IV_SIZE);
+            const encrypted = data.slice(SALT_SIZE + 5 * IV_SIZE, -TAG_SIZE - 64);
             const tag1 = data.slice(-TAG_SIZE - 64, -64);
             const dataHash = data.slice(-64);
 
@@ -41,7 +44,7 @@ class K9crypt {
             }
 
             const key = await deriveKey(this.secretKey, salt);
-            const decrypted = decrypt(encrypted, key, iv1, iv2, tag1);
+            const decrypted = decrypt(encrypted, key, iv1, iv2, iv3, iv4, iv5, tag1);
             const decompressed = await decompress(decrypted);
             return decompressed.toString('utf8');
         } catch (error) {

package/src/utils/encryption.js

@@ -12,15 +12,36 @@ exports.encrypt = (data, key) => {
     const cipher2 = crypto.createCipheriv('aes-256-cbc', key, iv2);
     let encrypted2 = cipher2.update(encrypted1);
     encrypted2 = Buffer.concat([encrypted2, cipher2.final()]);
-    const permutedEncrypted = reverseBuffer(encrypted2);
+    const iv3 = crypto.randomBytes(IV_SIZE);
+    const cipher3 = crypto.createCipheriv('aes-256-cfb', key, iv3);
+    let encrypted3 = cipher3.update(encrypted2);
+    encrypted3 = Buffer.concat([encrypted3, cipher3.final()]);
+    const iv4 = crypto.randomBytes(IV_SIZE);
+    const cipher4 = crypto.createCipheriv('aes-256-ofb', key, iv4);
+    let encrypted4 = cipher4.update(encrypted3);
+    encrypted4 = Buffer.concat([encrypted4, cipher4.final()]);
+    const iv5 = crypto.randomBytes(IV_SIZE);
+    const cipher5 = crypto.createCipheriv('aes-256-ctr', key, iv5);
+    let encrypted5 = cipher5.update(encrypted4);
+    encrypted5 = Buffer.concat([encrypted5, cipher5.final()]);
+    const permutedEncrypted = reverseBuffer(encrypted5);
 
-    return { iv1, iv2, encrypted: permutedEncrypted, tag1 };
+    return { iv1, iv2, iv3, iv4, iv5, encrypted: permutedEncrypted, tag1 };
 };
 
-exports.decrypt = (encrypted, key, iv1, iv2, tag1) => {
+exports.decrypt = (encrypted, key, iv1, iv2, iv3, iv4, iv5, tag1) => {
     const originalEncrypted = reverseBuffer(encrypted, true);
+    const decipher5 = crypto.createDecipheriv('aes-256-ctr', key, iv5);
+    let decrypted5 = decipher5.update(originalEncrypted);
+    decrypted5 = Buffer.concat([decrypted5, decipher5.final()]);
+    const decipher4 = crypto.createDecipheriv('aes-256-ofb', key, iv4);
+    let decrypted4 = decipher4.update(decrypted5);
+    decrypted4 = Buffer.concat([decrypted4, decipher4.final()]);
+    const decipher3 = crypto.createDecipheriv('aes-256-cfb', key, iv3);
+    let decrypted3 = decipher3.update(decrypted4);
+    decrypted3 = Buffer.concat([decrypted3, decipher3.final()]);
     const decipher2 = crypto.createDecipheriv('aes-256-cbc', key, iv2);
-    let decrypted2 = decipher2.update(originalEncrypted);
+    let decrypted2 = decipher2.update(decrypted3);
     decrypted2 = Buffer.concat([decrypted2, decipher2.final()]);
     const decipher1 = crypto.createDecipheriv('aes-256-gcm', key, iv1);
     decipher1.setAuthTag(tag1);
@@ -28,4 +49,4 @@ exports.decrypt = (encrypted, key, iv1, iv2, tag1) => {
     decrypted1 = Buffer.concat([decrypted1, decipher1.final()]);
 
     return decrypted1;
-};
+};