libves 3.1.0 → 3.2.0

package/README.md

@@ -16,6 +16,10 @@
 
 # libVES.js
 
+[![CI](https://github.com/vesvault/libVES/actions/workflows/ci.yml/badge.svg)](https://github.com/vesvault/libVES/actions/workflows/ci.yml)
+[![npm](https://img.shields.io/npm/v/libves)](https://www.npmjs.com/package/libves)
+[![License](https://img.shields.io/badge/license-Apache--2.0-blue)](LICENSE)
+
 **End-to-end encryption for the browser and Node — that you can actually recover from.**
 
 The official VESvault JavaScript library. It does client-side end-to-end encryption
@@ -135,7 +139,9 @@ open source under the Apache License 2.0. See current terms and pricing at
 Bug reports and small, focused fixes are welcome via issues and pull requests. Because
 this is security-critical software backed by a hosted service, larger changes — new
 cryptography, API-surface or protocol changes — should **start with an issue** before you
-write code; we can't always merge changes that affect the protocol or the service.
+write code; we can't always merge changes that affect the protocol or the service. See
+[CONTRIBUTING.md](CONTRIBUTING.md) for build, syntax-check, and test details, and our
+[Code of Conduct](CODE_OF_CONDUCT.md).
 
 Security issues are different: **please don't open a public issue or PR** — follow
 [SECURITY.md](SECURITY.md).

package/libVES.js

@@ -32,7 +32,7 @@
  *
  * @title libVES
  * @dev A JavaScript end-to-end encryption interface to VESvault REST API
- * @version 3.1.0
+ * @version 3.2.0
  *
  * @dev Official source code: https://github.com/vesvault/libVES
  *
@@ -1782,6 +1782,7 @@ if (typeof(libVES) != 'function') function libVES(optns) {
     else throw new libVES.Error('InvalidValue','Required parameters: user || domain');
     this.unlockedKeys = {};
     this.pendingKeys = {};
+    this.attnErrors = [];
 }
 
 libVES.prototype = {
@@ -1980,7 +1981,9 @@ libVES.prototype = {
 		return cryptoKey;
 	    });
 	}).then(function(ck) {
-	    return self.handleAttn().catch(function() {}).then(function() {
+	    return self.handleAttn().catch(function(e) {
+		self.logAttnError(e);
+	    }).then(function() {
 		return ck;
 	    });
 	});
@@ -2583,6 +2586,16 @@ libVES.prototype = {
 	    });
 	});
     },
+    attnErrors: null,
+    logAttnError: function(error, vaultKey) {
+	if (!this.attnErrors) this.attnErrors = [];
+	var rec = {error: error, at: new Date()};
+	if (vaultKey !== undefined) rec.vaultKey = vaultKey;
+	this.attnErrors.push(rec);
+	if (this.attnErrors.length > 64) this.attnErrors.shift();
+	try { console.error('libVES attn error:', error, vaultKey); } catch (e) {}
+	return rec;
+    },
     getAttn: function() {
 	var self = this;
 	var rs = {};
@@ -2605,7 +2618,6 @@ libVES.prototype = {
     attnVaultKeys: function(vkeys) {
 	var self = this;
 	return Promise.all(vkeys.map(function(vkey, i) {
-	    console.log('attnVaultKeys:', vkey);
 	    return vkey.getType().then(function(type) {
 		switch (type) {
 		    case 'temp':
@@ -2641,6 +2653,8 @@ libVES.prototype = {
 			    return rcv.recover();
 			});
 		}
+	    }).catch(function(e) {
+		return self.logAttnError(e, vkey);
 	    });
 	}));
     },
@@ -5166,6 +5180,15 @@ libVES.Scramble = {
     }
 };
 libVES.Scramble.RDX.prototype = {
+    explode: function(sc,ct,optns) {
+	var impl = (optns && optns.v && libVES.Scramble.algo[optns.v]) || (ct <= 255 ? libVES.Scramble.SSS : libVES.Scramble.RDX12);
+	return new impl(this.size).explode(sc,ct,optns);
+    }
+};
+libVES.Scramble.RDX12 = function(x) {
+    this.size = x;
+};
+libVES.Scramble.RDX12.prototype = {
     tag: 'RDX1.2',
     name: 'RDX 1.2 Shamir',
     getBases: function(n) {
@@ -5307,8 +5330,115 @@ libVES.Scramble.RDX.prototype = {
 	return f([0]);
     }
 };
+libVES.Scramble.SSS = function(x) {
+    this.size = x;
+};
+libVES.Scramble.SSS.prototype = {
+    tag: 'SSS1',
+    name: 'Shamir GF(256)',
+    gf: function() {
+	var g = libVES.Scramble.SSS._gf;
+	if (g) return g;
+	var exp = new Uint8Array(512);
+	var log = new Uint8Array(256);
+	for (var a = 1, i = 0; i < 255; i++) {
+	    exp[i] = a;
+	    log[a] = i;
+	    var d = a << 1;
+	    if (d & 0x100) d ^= 0x11b;
+	    a = d ^ a;
+	}
+	for (var j = 255; j < 512; j++) exp[j] = exp[j - 255];
+	return libVES.Scramble.SSS._gf = {exp: exp, log: log};
+    },
+    mul: function(a,b) {
+	if (!a || !b) return 0;
+	var g = this.gf();
+	return g.exp[g.log[a] + g.log[b]];
+    },
+    div: function(a,b) {
+	if (!a) return 0;
+	var g = this.gf();
+	return g.exp[g.log[a] + 255 - g.log[b]];
+    },
+    weights: function(xs,x0) {
+	var w = [];
+	for (var i = 0; i < xs.length; i++) {
+	    var num = 1, den = 1;
+	    for (var l = 0; l < xs.length; l++) if (l != i) {
+		num = this.mul(num,x0 ^ xs[l]);
+		den = this.mul(den,xs[i] ^ xs[l]);
+	    }
+	    w[i] = this.div(num,den);
+	}
+	return w;
+    },
+    combine: function(w,ys,len) {
+	var rs = new Uint8Array(len);
+	for (var j = 0; j < len; j++) {
+	    var acc = 0;
+	    for (var i = 0; i < w.length; i++) acc ^= this.mul(w[i],ys[i][j]);
+	    rs[j] = acc;
+	}
+	return rs;
+    },
+    explode: function(sc,ct,optns) {
+	var self = this;
+	if (ct > 255) return Promise.reject(new libVES.Error('InvalidValue','GF(256) Shamir supports at most 255 shares'));
+	var n = this.size;
+	var L = sc.length;
+	var rnd = new Uint8Array(L * (n - 1));
+	if (n > 1) crypto.getRandomValues(rnd);
+	var rs = [];
+	for (var x = 1; x <= ct; x++) {
+	    var val = new Uint8Array(L);
+	    for (var j = 0; j < L; j++) {
+		var acc = (n > 1) ? rnd[(n - 2) * L + j] : 0;
+		for (var k = n - 2; k >= 1; k--) acc = self.mul(acc,x) ^ rnd[(k - 1) * L + j];
+		val[j] = self.mul(acc,x) ^ sc[j];
+	    }
+	    rs.push({
+		meta: (function(m) {
+		    if (optns) {
+			if (optns.t != null) m.t = optns.t;
+			if (optns.shadow) for (var key in optns.shadow) m[key] = optns.shadow[key];
+		    }
+		    return m;
+		})({
+		    v: self.tag,
+		    n: n,
+		    b: x
+		}),
+		value: val
+	    });
+	}
+	return Promise.resolve(rs);
+    },
+    implode: function(tokens,then,okfn) {
+	var self = this;
+	var n = this.size;
+	if (tokens.length < n) return Promise.reject(new libVES.Error('Internal','Insufficient number of tokens to unscramble'));
+	var xs = [], ys = [];
+	for (var i = 0; i < n; i++) {
+	    xs.push(Number(tokens[i].meta.b));
+	    ys.push(tokens[i].value);
+	}
+	var L = ys[0].length;
+	var rs = Promise.resolve(self.combine(self.weights(xs,0),ys,L));
+	if (then) rs = rs.then(then);
+	if (okfn) rs = rs.then(function(sc) {
+	    for (var i = 0; i < tokens.length; i++) {
+		var ok = i < n || !libVES.Math.cmp(tokens[i].value,self.combine(self.weights(xs,Number(tokens[i].meta.b)),ys,L));
+		okfn(tokens[i],ok,i);
+	    }
+	    return sc;
+	});
+	return rs;
+    }
+};
 libVES.Scramble.algo = {
-    'RDX1.2': libVES.Scramble.RDX
+    'RDX1.2': libVES.Scramble.RDX12,
+    'SSS1': libVES.Scramble.SSS
 };
 
 libVES.Recovery = function(vaultKey, myItems) {
@@ -6532,7 +6662,10 @@ libVES.Algo.OQS.MLKEM = {
     export: function(data, optns) {
 	var spec = this.findSpec(data.algo);
 	if (!spec) return null;
-	if (data.priv) return libVES.Util.PKCS8.encode8(this.exportPriv(spec, data.pub, data.priv), optns);
+	if (data.priv) {
+	    var encrypting = !(optns && optns.opentext);
+	    return libVES.Util.PKCS8.encode8(this.exportPriv(spec, encrypting ? null : data.pub, data.priv), optns);
+	}
 	return libVES.Util.PEM.encode(this.exportPub(spec, data.pub), 'PUBLIC KEY');
     },
     bind: function(spec) {
@@ -7771,4 +7904,4 @@ libVES.KeyStore.flags = function(input) {
     );
     return {};
 };
-libVES.version = '3.1.0';
+libVES.version = '3.2.0';

package/libVES.node.js

@@ -32,7 +32,7 @@
  *
  * @title libVES
  * @dev A JavaScript end-to-end encryption interface to VESvault REST API
- * @version 3.1.0
+ * @version 3.2.0
  *
  * @dev Official source code: https://github.com/vesvault/libVES
  *
@@ -6233,6 +6233,7 @@ if (typeof(libVES) != 'function') function libVES(optns) {
     else throw new libVES.Error('InvalidValue','Required parameters: user || domain');
     this.unlockedKeys = {};
     this.pendingKeys = {};
+    this.attnErrors = [];
 }
 
 libVES.prototype = {
@@ -6431,7 +6432,9 @@ libVES.prototype = {
 		return cryptoKey;
 	    });
 	}).then(function(ck) {
-	    return self.handleAttn().catch(function() {}).then(function() {
+	    return self.handleAttn().catch(function(e) {
+		self.logAttnError(e);
+	    }).then(function() {
 		return ck;
 	    });
 	});
@@ -7034,6 +7037,16 @@ libVES.prototype = {
 	    });
 	});
     },
+    attnErrors: null,
+    logAttnError: function(error, vaultKey) {
+	if (!this.attnErrors) this.attnErrors = [];
+	var rec = {error: error, at: new Date()};
+	if (vaultKey !== undefined) rec.vaultKey = vaultKey;
+	this.attnErrors.push(rec);
+	if (this.attnErrors.length > 64) this.attnErrors.shift();
+	try { console.error('libVES attn error:', error, vaultKey); } catch (e) {}
+	return rec;
+    },
     getAttn: function() {
 	var self = this;
 	var rs = {};
@@ -7056,7 +7069,6 @@ libVES.prototype = {
     attnVaultKeys: function(vkeys) {
 	var self = this;
 	return Promise.all(vkeys.map(function(vkey, i) {
-	    console.log('attnVaultKeys:', vkey);
 	    return vkey.getType().then(function(type) {
 		switch (type) {
 		    case 'temp':
@@ -7092,6 +7104,8 @@ libVES.prototype = {
 			    return rcv.recover();
 			});
 		}
+	    }).catch(function(e) {
+		return self.logAttnError(e, vkey);
 	    });
 	}));
     },
@@ -9617,6 +9631,15 @@ libVES.Scramble = {
     }
 };
 libVES.Scramble.RDX.prototype = {
+    explode: function(sc,ct,optns) {
+	var impl = (optns && optns.v && libVES.Scramble.algo[optns.v]) || (ct <= 255 ? libVES.Scramble.SSS : libVES.Scramble.RDX12);
+	return new impl(this.size).explode(sc,ct,optns);
+    }
+};
+libVES.Scramble.RDX12 = function(x) {
+    this.size = x;
+};
+libVES.Scramble.RDX12.prototype = {
     tag: 'RDX1.2',
     name: 'RDX 1.2 Shamir',
     getBases: function(n) {
@@ -9758,8 +9781,115 @@ libVES.Scramble.RDX.prototype = {
 	return f([0]);
     }
 };
+libVES.Scramble.SSS = function(x) {
+    this.size = x;
+};
+libVES.Scramble.SSS.prototype = {
+    tag: 'SSS1',
+    name: 'Shamir GF(256)',
+    gf: function() {
+	var g = libVES.Scramble.SSS._gf;
+	if (g) return g;
+	var exp = new Uint8Array(512);
+	var log = new Uint8Array(256);
+	for (var a = 1, i = 0; i < 255; i++) {
+	    exp[i] = a;
+	    log[a] = i;
+	    var d = a << 1;
+	    if (d & 0x100) d ^= 0x11b;
+	    a = d ^ a;
+	}
+	for (var j = 255; j < 512; j++) exp[j] = exp[j - 255];
+	return libVES.Scramble.SSS._gf = {exp: exp, log: log};
+    },
+    mul: function(a,b) {
+	if (!a || !b) return 0;
+	var g = this.gf();
+	return g.exp[g.log[a] + g.log[b]];
+    },
+    div: function(a,b) {
+	if (!a) return 0;
+	var g = this.gf();
+	return g.exp[g.log[a] + 255 - g.log[b]];
+    },
+    weights: function(xs,x0) {
+	var w = [];
+	for (var i = 0; i < xs.length; i++) {
+	    var num = 1, den = 1;
+	    for (var l = 0; l < xs.length; l++) if (l != i) {
+		num = this.mul(num,x0 ^ xs[l]);
+		den = this.mul(den,xs[i] ^ xs[l]);
+	    }
+	    w[i] = this.div(num,den);
+	}
+	return w;
+    },
+    combine: function(w,ys,len) {
+	var rs = new Uint8Array(len);
+	for (var j = 0; j < len; j++) {
+	    var acc = 0;
+	    for (var i = 0; i < w.length; i++) acc ^= this.mul(w[i],ys[i][j]);
+	    rs[j] = acc;
+	}
+	return rs;
+    },
+    explode: function(sc,ct,optns) {
+	var self = this;
+	if (ct > 255) return Promise.reject(new libVES.Error('InvalidValue','GF(256) Shamir supports at most 255 shares'));
+	var n = this.size;
+	var L = sc.length;
+	var rnd = new Uint8Array(L * (n - 1));
+	if (n > 1) crypto.getRandomValues(rnd);
+	var rs = [];
+	for (var x = 1; x <= ct; x++) {
+	    var val = new Uint8Array(L);
+	    for (var j = 0; j < L; j++) {
+		var acc = (n > 1) ? rnd[(n - 2) * L + j] : 0;
+		for (var k = n - 2; k >= 1; k--) acc = self.mul(acc,x) ^ rnd[(k - 1) * L + j];
+		val[j] = self.mul(acc,x) ^ sc[j];
+	    }
+	    rs.push({
+		meta: (function(m) {
+		    if (optns) {
+			if (optns.t != null) m.t = optns.t;
+			if (optns.shadow) for (var key in optns.shadow) m[key] = optns.shadow[key];
+		    }
+		    return m;
+		})({
+		    v: self.tag,
+		    n: n,
+		    b: x
+		}),
+		value: val
+	    });
+	}
+	return Promise.resolve(rs);
+    },
+    implode: function(tokens,then,okfn) {
+	var self = this;
+	var n = this.size;
+	if (tokens.length < n) return Promise.reject(new libVES.Error('Internal','Insufficient number of tokens to unscramble'));
+	var xs = [], ys = [];
+	for (var i = 0; i < n; i++) {
+	    xs.push(Number(tokens[i].meta.b));
+	    ys.push(tokens[i].value);
+	}
+	var L = ys[0].length;
+	var rs = Promise.resolve(self.combine(self.weights(xs,0),ys,L));
+	if (then) rs = rs.then(then);
+	if (okfn) rs = rs.then(function(sc) {
+	    for (var i = 0; i < tokens.length; i++) {
+		var ok = i < n || !libVES.Math.cmp(tokens[i].value,self.combine(self.weights(xs,Number(tokens[i].meta.b)),ys,L));
+		okfn(tokens[i],ok,i);
+	    }
+	    return sc;
+	});
+	return rs;
+    }
+};
 libVES.Scramble.algo = {
-    'RDX1.2': libVES.Scramble.RDX
+    'RDX1.2': libVES.Scramble.RDX12,
+    'SSS1': libVES.Scramble.SSS
 };
 
 libVES.Recovery = function(vaultKey, myItems) {
@@ -10983,7 +11113,10 @@ libVES.Algo.OQS.MLKEM = {
     export: function(data, optns) {
 	var spec = this.findSpec(data.algo);
 	if (!spec) return null;
-	if (data.priv) return libVES.Util.PKCS8.encode8(this.exportPriv(spec, data.pub, data.priv), optns);
+	if (data.priv) {
+	    var encrypting = !(optns && optns.opentext);
+	    return libVES.Util.PKCS8.encode8(this.exportPriv(spec, encrypting ? null : data.pub, data.priv), optns);
+	}
 	return libVES.Util.PEM.encode(this.exportPub(spec, data.pub), 'PUBLIC KEY');
     },
     bind: function(spec) {
@@ -12222,6 +12355,6 @@ libVES.KeyStore.flags = function(input) {
     );
     return {};
 };
-libVES.version = '3.1.0';
+libVES.version = '3.2.0';
 
 module.exports = libVES;

package/package.json

@@ -1,11 +1,14 @@
 {
   "name": "libves",
-  "version": "3.1.0",
+  "version": "3.2.0",
   "description": "Recoverable end-to-end encryption for browser and Node — key management, sharing, and key recovery without exposing keys or plaintext",
   "main": "libVES.node.js",
   "browser": "libVES.js",
   "scripts": {
-    "test": "echo \"No test defined\" && exit 1"
+    "build": "node build.js",
+    "build:min": "node build.js --minify",
+    "prepare": "node build.js",
+    "test": "echo \"tests/ require two live VES accounts - see tests/ and tests/vestest.conf.example.js\" && exit 0"
   },
   "files": [
     "libVES.js",