react-native-quick-crypto 1.0.0-beta.8 → 1.0.0

package/cpp/sign/SignUtils.hpp

@@ -0,0 +1,108 @@
+#pragma once
+
+#include <cstring>
+#include <memory>
+#include <openssl/dsa.h>
+#include <openssl/ec.h>
+#include <openssl/ecdsa.h>
+#include <openssl/evp.h>
+#include <string>
+
+namespace margelo::nitro::crypto {
+
+enum DSASigEnc {
+  kSigEncDER = 0,
+  kSigEncP1363 = 1,
+};
+
+inline const EVP_MD* getDigestByName(const std::string& algorithm) {
+  if (algorithm == "SHA1" || algorithm == "sha1" || algorithm == "SHA-1" || algorithm == "sha-1") {
+    return EVP_sha1();
+  } else if (algorithm == "SHA224" || algorithm == "sha224" || algorithm == "SHA-224" || algorithm == "sha-224") {
+    return EVP_sha224();
+  } else if (algorithm == "SHA256" || algorithm == "sha256" || algorithm == "SHA-256" || algorithm == "sha-256") {
+    return EVP_sha256();
+  } else if (algorithm == "SHA384" || algorithm == "sha384" || algorithm == "SHA-384" || algorithm == "sha-384") {
+    return EVP_sha384();
+  } else if (algorithm == "SHA512" || algorithm == "sha512" || algorithm == "SHA-512" || algorithm == "sha-512") {
+    return EVP_sha512();
+  } else if (algorithm == "SHA3-224" || algorithm == "sha3-224") {
+    return EVP_sha3_224();
+  } else if (algorithm == "SHA3-256" || algorithm == "sha3-256") {
+    return EVP_sha3_256();
+  } else if (algorithm == "SHA3-384" || algorithm == "sha3-384") {
+    return EVP_sha3_384();
+  } else if (algorithm == "SHA3-512" || algorithm == "sha3-512") {
+    return EVP_sha3_512();
+  }
+  throw std::runtime_error("Unsupported hash algorithm: " + algorithm);
+}
+
+inline unsigned int getBytesOfRS(EVP_PKEY* pkey) {
+  int bits;
+  int base_id = EVP_PKEY_base_id(pkey);
+
+  if (base_id == EVP_PKEY_DSA) {
+    const DSA* dsa_key = EVP_PKEY_get0_DSA(pkey);
+    bits = BN_num_bits(DSA_get0_q(dsa_key));
+  } else if (base_id == EVP_PKEY_EC) {
+    const EC_KEY* ec_key = EVP_PKEY_get0_EC_KEY(pkey);
+    const EC_GROUP* ec_group = EC_KEY_get0_group(ec_key);
+    bits = EC_GROUP_order_bits(ec_group);
+  } else {
+    return 0;
+  }
+
+  return (bits + 7) / 8;
+}
+
+inline bool convertSignatureToP1363(const unsigned char* sig_data, size_t sig_len, unsigned char* out, size_t n) {
+  ECDSA_SIG* asn1_sig = d2i_ECDSA_SIG(nullptr, &sig_data, sig_len);
+  if (!asn1_sig)
+    return false;
+
+  const BIGNUM* pr = ECDSA_SIG_get0_r(asn1_sig);
+  const BIGNUM* ps = ECDSA_SIG_get0_s(asn1_sig);
+
+  bool success = BN_bn2binpad(pr, out, static_cast<int>(n)) > 0 && BN_bn2binpad(ps, out + n, static_cast<int>(n)) > 0;
+  ECDSA_SIG_free(asn1_sig);
+  return success;
+}
+
+inline std::unique_ptr<uint8_t[]> convertSignatureToDER(const unsigned char* sig_data, size_t sig_len, size_t n, size_t* out_len) {
+  if (sig_len != 2 * n) {
+    return nullptr;
+  }
+
+  ECDSA_SIG* asn1_sig = ECDSA_SIG_new();
+  if (!asn1_sig)
+    return nullptr;
+
+  BIGNUM* r = BN_bin2bn(sig_data, static_cast<int>(n), nullptr);
+  BIGNUM* s = BN_bin2bn(sig_data + n, static_cast<int>(n), nullptr);
+
+  if (!r || !s || !ECDSA_SIG_set0(asn1_sig, r, s)) {
+    if (r)
+      BN_free(r);
+    if (s)
+      BN_free(s);
+    ECDSA_SIG_free(asn1_sig);
+    return nullptr;
+  }
+
+  int der_len = i2d_ECDSA_SIG(asn1_sig, nullptr);
+  if (der_len <= 0) {
+    ECDSA_SIG_free(asn1_sig);
+    return nullptr;
+  }
+
+  auto der_buf = std::make_unique<uint8_t[]>(der_len);
+  unsigned char* der_ptr = der_buf.get();
+  i2d_ECDSA_SIG(asn1_sig, &der_ptr);
+
+  ECDSA_SIG_free(asn1_sig);
+  *out_len = der_len;
+  return der_buf;
+}
+
+} // namespace margelo::nitro::crypto

package/cpp/utils/Macros.hpp

@@ -0,0 +1,68 @@
+#include <utility>
+
+// Windows 8+ does not like abort() in Release mode
+#ifdef _WIN32
+#define ABORT_NO_BACKTRACE() _exit(134)
+#else
+#define ABORT_NO_BACKTRACE() abort()
+#endif
+
+struct AssertionInfo {
+  const char* file_line; // filename:line
+  const char* message;
+  const char* function;
+};
+
+inline void Abort() {
+  //  DumpBacktrace(stderr);
+  fflush(stderr);
+  ABORT_NO_BACKTRACE();
+}
+
+inline void Assert(const AssertionInfo& info) {
+  //  std::string name = GetHumanReadableProcessName();
+
+  fprintf(stderr, "%s:%s%s Assertion `%s' failed.\n", info.file_line, info.function, *info.function ? ":" : "", info.message);
+  fflush(stderr);
+
+  Abort();
+}
+
+// Macros stolen from Node
+#define ERROR_AND_ABORT(expr)                                                                                                              \
+  do {                                                                                                                                     \
+    /* Make sure that this struct does not end up in inline code, but      */                                                              \
+    /* rather in a read-only data section when modifying this code.        */                                                              \
+    static const AssertionInfo args = {__FILE__ ":" STRINGIFY(__LINE__), #expr, PRETTY_FUNCTION_NAME};                                     \
+    Assert(args);                                                                                                                          \
+  } while (0)
+
+#ifdef __GNUC__
+#define LIKELY(expr) __builtin_expect(!!(expr), 1)
+#define UNLIKELY(expr) __builtin_expect(!!(expr), 0)
+#define PRETTY_FUNCTION_NAME __PRETTY_FUNCTION__
+#else
+#define LIKELY(expr) expr
+#define UNLIKELY(expr) expr
+#define PRETTY_FUNCTION_NAME ""
+#endif
+
+#define STRINGIFY_(x) #x
+#define STRINGIFY(x) STRINGIFY_(x)
+
+#define CHECK(expr)                                                                                                                        \
+  do {                                                                                                                                     \
+    if (UNLIKELY(!(expr))) {                                                                                                               \
+      ERROR_AND_ABORT(expr);                                                                                                               \
+    }                                                                                                                                      \
+  } while (0)
+
+#define CHECK_EQ(a, b) CHECK((a) == (b))
+#define CHECK_GE(a, b) CHECK((a) >= (b))
+#define CHECK_GT(a, b) CHECK((a) > (b))
+#define CHECK_LE(a, b) CHECK((a) <= (b))
+#define CHECK_LT(a, b) CHECK((a) < (b))
+#define CHECK_NE(a, b) CHECK((a) != (b))
+#define CHECK_NULL(val) CHECK((val) == nullptr)
+#define CHECK_NOT_NULL(val) CHECK((val) != nullptr)
+#define CHECK_IMPLIES(a, b) CHECK(!(a) || (b))

package/cpp/utils/Utils.hpp

@@ -1,16 +1,49 @@
+#pragma once
+
+#include <algorithm>
+#include <cctype>
 #include <limits>
+#include <openssl/err.h>
+#include <string>
 
+#include "Macros.hpp"
 #include <NitroModules/ArrayBuffer.hpp>
 
+namespace margelo::nitro::crypto {
+
+// Function to get the last OpenSSL error message and clear the error stack
+inline std::string getOpenSSLError() {
+  unsigned long errCode = ERR_get_error();
+  if (errCode == 0) {
+    return "";
+  }
+  char errStr[256];
+  ERR_error_string_n(errCode, errStr, sizeof(errStr));
+  // Clear any remaining errors from the error stack to prevent pollution
+  ERR_clear_error();
+  return std::string(errStr);
+}
+
+// Function to clear OpenSSL error stack without getting error message
+inline void clearOpenSSLErrors() {
+  ERR_clear_error();
+}
+
 // copy a JSArrayBuffer that we do not own into a NativeArrayBuffer that we do own
-inline std::shared_ptr<margelo::nitro::NativeArrayBuffer>
-ToNativeArrayBuffer(const std::shared_ptr<margelo::nitro::ArrayBuffer>& buffer) {
+inline std::shared_ptr<margelo::nitro::NativeArrayBuffer> ToNativeArrayBuffer(const std::shared_ptr<margelo::nitro::ArrayBuffer>& buffer) {
   size_t bufferSize = buffer.get()->size();
   uint8_t* data = new uint8_t[bufferSize];
   memcpy(data, buffer.get()->data(), bufferSize);
   return std::make_shared<margelo::nitro::NativeArrayBuffer>(data, bufferSize, [=]() { delete[] data; });
 }
 
+inline std::shared_ptr<margelo::nitro::NativeArrayBuffer> ToNativeArrayBuffer(std::string str) {
+  size_t size = str.size();
+  uint8_t* data = new uint8_t[size];
+  memcpy(data, str.data(), size);
+  return std::make_shared<margelo::nitro::NativeArrayBuffer>(data, size, [=]() { delete[] data; });
+}
+
 inline bool CheckIsUint32(double value) {
   return (value >= std::numeric_limits<uint32_t>::lowest() && value <= std::numeric_limits<uint32_t>::max());
 }
@@ -18,3 +51,11 @@ inline bool CheckIsUint32(double value) {
 inline bool CheckIsInt32(double value) {
   return (value >= std::numeric_limits<int32_t>::lowest() && value <= std::numeric_limits<int32_t>::max());
 }
+
+// Function to convert a string to lowercase
+inline std::string toLower(std::string s) {
+  std::transform(s.begin(), s.end(), s.begin(), [](unsigned char c) { return static_cast<char>(std::tolower(c)); });
+  return s;
+}
+
+} // namespace margelo::nitro::crypto

package/cpp/utils/base64.h

@@ -0,0 +1,309 @@
+/*
+   base64.h
+
+   base64 encoding and decoding with C++.
+   More information at
+     https://renenyffenegger.ch/notes/development/Base64/Encoding-and-decoding-base-64-with-cpp
+
+   Version: 2.rc.09 (release candidate)
+
+   Copyright (C) 2004-2017, 2020-2022 René Nyffenegger
+
+   This source code is provided 'as-is', without any express or implied
+   warranty. In no event will the author be held liable for any damages
+   arising from the use of this software.
+
+   Permission is granted to anyone to use this software for any purpose,
+   including commercial applications, and to alter it and redistribute it
+   freely, subject to the following restrictions:
+
+   1. The origin of this source code must not be misrepresented; you must not
+      claim that you wrote the original source code. If you use this source code
+      in a product, an acknowledgment in the product documentation would be
+      appreciated but is not required.
+
+   2. Altered source versions must be plainly marked as such, and must not be
+      misrepresented as being the original source code.
+
+   3. This notice may not be removed or altered from any source distribution.
+
+   René Nyffenegger rene.nyffenegger@adp-gmbh.ch
+*/
+/**
+ * Copyright (C) 2023 Kevin Heifner
+ *
+ * Modified to be header only.
+ * Templated for std::string, std::string_view, std::vector<char> and other char containers.
+ */
+
+#pragma once
+
+#include <algorithm>
+#include <stdexcept>
+#include <string>
+#include <string_view>
+
+// Interface:
+// Defaults allow for use:
+//   std::string s = "foobar";
+//   std::string encoded = base64_encode(s);
+//   std::string_view sv = "foobar";
+//   std::string encoded = base64_encode(sv);
+//   std::vector<char> vc = {'f', 'o', 'o'};
+//   std::string encoded = base64_encode(vc);
+//
+// Also allows for user provided char containers and specified return types:
+//   std::string s = "foobar";
+//   std::vector<char> encoded = base64_encode<std::vector<char>>(s);
+
+template <typename RetString = std::string, typename String = std::string>
+RetString base64_encode(const String& s, bool url = false);
+
+template <typename RetString = std::string, typename String = std::string>
+RetString base64_encode_pem(const String& s);
+
+template <typename RetString = std::string, typename String = std::string>
+RetString base64_encode_mime(const String& s);
+
+template <typename RetString = std::string, typename String = std::string>
+RetString base64_decode(const String& s, bool remove_linebreaks = false);
+
+template <typename RetString = std::string>
+RetString base64_encode(const unsigned char* s, size_t len, bool url = false);
+
+namespace detail {
+//
+// Depending on the url parameter in base64_chars, one of
+// two sets of base64 characters needs to be chosen.
+// They differ in their last two characters.
+//
+constexpr const char* to_base64_chars[2] = {"ABCDEFGHIJKLMNOPQRSTUVWXYZ"
+                                            "abcdefghijklmnopqrstuvwxyz"
+                                            "0123456789"
+                                            "+/",
+
+                                            "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
+                                            "abcdefghijklmnopqrstuvwxyz"
+                                            "0123456789"
+                                            "-_"};
+
+constexpr unsigned char from_base64_chars[256] = {
+    64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
+    64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 62, 64, 62, 64, 63, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 64, 64, 64, 64, 64, 64,
+    64, 0,  1,  2,  3,  4,  5,  6,  7,  8,  9,  10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 64, 64, 64, 64, 63,
+    64, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 64, 64, 64, 64, 64,
+    64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
+    64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
+    64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64,
+    64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64, 64};
+
+inline unsigned int pos_of_char(const unsigned char chr) {
+  //
+  // Return the position of chr within base64_encode()
+  //
+
+  if (from_base64_chars[chr] != 64)
+    return from_base64_chars[chr];
+
+  //
+  // 2020-10-23: Throw std::exception rather than const char*
+  //(Pablo Martin-Gomez, https://github.com/Bouska)
+  //
+  throw std::runtime_error("Input is not valid base64-encoded data.");
+}
+
+template <typename RetString, typename String>
+inline RetString insert_linebreaks(const String& str, size_t distance) {
+  //
+  // Provided by https://github.com/JomaCorpFX, adapted by Rene & Kevin
+  //
+  if (!str.size()) {
+    return RetString{};
+  }
+
+  if (distance < str.size()) {
+    size_t pos = distance;
+    String s{str};
+    while (pos < s.size()) {
+      s.insert(pos, "\n");
+      pos += distance + 1;
+    }
+    return s;
+  } else {
+    return str;
+  }
+}
+
+template <typename RetString, typename String, unsigned int line_length>
+inline RetString encode_with_line_breaks(String s) {
+  return insert_linebreaks<RetString, String>(base64_encode(s, false), line_length);
+}
+
+template <typename RetString, typename String>
+inline RetString encode_pem(String s) {
+  return encode_with_line_breaks<RetString, String, 64>(s);
+}
+
+template <typename RetString, typename String>
+inline RetString encode_mime(String s) {
+  return encode_with_line_breaks<RetString, String, 76>(s);
+}
+
+template <typename RetString, typename String>
+inline RetString encode(String s, bool url) {
+  return base64_encode<RetString>(reinterpret_cast<const unsigned char*>(s.data()), s.size(), url);
+}
+
+} // namespace detail
+
+template <typename RetString>
+inline RetString base64_encode(const unsigned char* bytes_to_encode, size_t in_len, bool url) {
+  size_t len_encoded = (in_len + 2) / 3 * 4;
+
+  const unsigned char trailing_char = '=';
+
+  //
+  // Choose set of base64 characters. They differ
+  // for the last two positions, depending on the url
+  // parameter.
+  // A bool (as is the parameter url) is guaranteed
+  // to evaluate to either 0 or 1 in C++ therefore,
+  // the correct character set is chosen by subscripting
+  // base64_chars with url.
+  //
+  const char* base64_chars_ = detail::to_base64_chars[url];
+
+  RetString ret;
+  ret.reserve(len_encoded);
+
+  unsigned int pos = 0;
+
+  while (pos < in_len) {
+    ret.push_back(base64_chars_[(bytes_to_encode[pos + 0] & 0xfc) >> 2]);
+
+    if (pos + 1 < in_len) {
+      ret.push_back(base64_chars_[((bytes_to_encode[pos + 0] & 0x03) << 4) + ((bytes_to_encode[pos + 1] & 0xf0) >> 4)]);
+
+      if (pos + 2 < in_len) {
+        ret.push_back(base64_chars_[((bytes_to_encode[pos + 1] & 0x0f) << 2) + ((bytes_to_encode[pos + 2] & 0xc0) >> 6)]);
+        ret.push_back(base64_chars_[bytes_to_encode[pos + 2] & 0x3f]);
+      } else {
+        ret.push_back(base64_chars_[(bytes_to_encode[pos + 1] & 0x0f) << 2]);
+        if (!url)
+          ret.push_back(trailing_char);
+      }
+    } else {
+      ret.push_back(base64_chars_[(bytes_to_encode[pos + 0] & 0x03) << 4]);
+      if (!url)
+        ret.push_back(trailing_char);
+      if (!url)
+        ret.push_back(trailing_char);
+    }
+
+    pos += 3;
+  }
+
+  return ret;
+}
+
+namespace detail {
+
+template <typename RetString, typename String>
+inline RetString decode(const String& encoded_string, bool remove_linebreaks) {
+  static_assert(!std::is_same<RetString, std::string_view>::value, "RetString should not be std::string_view");
+
+  //
+  // decode(…) is templated so that it can be used with String = const std::string&
+  // or std::string_view (requires at least C++17)
+  //
+
+  if (encoded_string.empty())
+    return RetString{};
+
+  if (remove_linebreaks) {
+    String copy{encoded_string};
+
+    copy.erase(std::remove(copy.begin(), copy.end(), '\n'), copy.end());
+
+    return base64_decode<RetString, String>(copy, false);
+  }
+
+  size_t length_of_string = encoded_string.size();
+  size_t pos = 0;
+
+  //
+  // The approximate length (bytes) of the decoded string might be one or
+  // two bytes smaller, depending on the amount of trailing equal signs
+  // in the encoded string. This approximation is needed to reserve
+  // enough space in the string to be returned.
+  //
+  size_t approx_length_of_decoded_string = length_of_string / 4 * 3;
+  RetString ret;
+  ret.reserve(approx_length_of_decoded_string);
+
+  while (pos < length_of_string && encoded_string.at(pos) != '=') {
+    //
+    // Iterate over encoded input string in chunks. The size of all
+    // chunks except the last one is 4 bytes.
+    //
+    // The last chunk might be padded with equal signs
+    // in order to make it 4 bytes in size as well, but this
+    // is not required as per RFC 2045.
+    //
+    // All chunks except the last one produce three output bytes.
+    //
+    // The last chunk produces at least one and up to three bytes.
+    //
+
+    size_t pos_of_char_1 = pos_of_char(encoded_string.at(pos + 1));
+
+    //
+    // Emit the first output byte that is produced in each chunk:
+    //
+    ret.push_back(
+        static_cast<typename RetString::value_type>(((pos_of_char(encoded_string.at(pos + 0))) << 2) + ((pos_of_char_1 & 0x30) >> 4)));
+
+    if ((pos + 2 < length_of_string) &&
+        // Check for data that is not padded with equal signs (which is allowed by RFC 2045)
+        encoded_string.at(pos + 2) != '=') {
+      //
+      // Emit a chunk's second byte (which might not be produced in the last chunk).
+      //
+      unsigned int pos_of_char_2 = pos_of_char(encoded_string.at(pos + 2));
+      ret.push_back(static_cast<typename RetString::value_type>(((pos_of_char_1 & 0x0f) << 4) + ((pos_of_char_2 & 0x3c) >> 2)));
+
+      if ((pos + 3 < length_of_string) && encoded_string.at(pos + 3) != '=') {
+        //
+        // Emit a chunk's third byte (which might not be produced in the last chunk).
+        //
+        ret.push_back(static_cast<typename RetString::value_type>(((pos_of_char_2 & 0x03) << 6) + pos_of_char(encoded_string.at(pos + 3))));
+      }
+    }
+
+    pos += 4;
+  }
+
+  return ret;
+}
+
+} // namespace detail
+
+template <typename RetString, typename String>
+inline RetString base64_decode(const String& s, bool remove_linebreaks) {
+  return detail::decode<RetString, String>(s, remove_linebreaks);
+}
+
+template <typename RetString, typename String>
+inline RetString base64_encode(const String& s, bool url) {
+  return detail::encode<RetString, String>(s, url);
+}
+
+template <typename RetString, typename String>
+inline RetString base64_encode_pem(const String& s) {
+  return detail::encode_pem<RetString, String>(s);
+}
+
+template <typename RetString, typename String>
+inline RetString base64_encode_mime(const String& s) {
+  return detail::encode_mime<RetString, String>(s);
+}

package/deps/blake3/.cargo/config.toml

@@ -0,0 +1,2 @@
+[target.wasm32-wasip1]
+runner = "wasmtime"

package/deps/blake3/.git-blame-ignore-revs

@@ -0,0 +1,2 @@
+# CMakeLists.txt whitespace fixups
+3e14f865d30271c74fc68d417af488ea91b66d48

package/deps/blake3/.github/workflows/build_b3sum.py

@@ -0,0 +1,38 @@
+#! /usr/bin/env python3
+
+from pathlib import Path
+import platform
+import shutil
+import subprocess
+import sys
+
+ROOT = Path(__file__).parent.parent.parent
+RUST_TARGET = sys.argv[1]
+
+subprocess.run(
+    ["cargo", "build", "--target", sys.argv[1], "--release"], cwd=ROOT / "b3sum"
+)
+
+if platform.system() == "Windows":
+    original_exe_name = "b3sum.exe"
+else:
+    original_exe_name = "b3sum"
+
+if platform.system() == "Windows":
+    new_exe_name = "b3sum_windows_x64_bin.exe"
+elif platform.system() == "Darwin":
+    new_exe_name = "b3sum_macos_x64_bin"
+elif platform.system() == "Linux":
+    new_exe_name = "b3sum_linux_x64_bin"
+else:
+    raise RuntimeError("Unexpected platform: " + platform.system())
+
+# Copy the built binary so that it has the upload name we want.
+out_dir = ROOT / "b3sum/target" / RUST_TARGET / "release"
+original_exe_path = str(out_dir / original_exe_name)
+new_exe_path = str(out_dir / new_exe_name)
+print("copying", repr(original_exe_path), "to", repr(new_exe_path))
+shutil.copyfile(original_exe_path, new_exe_path)
+
+# This lets the subsequent upload step get the filepath.
+print("::set-output name=bin_path::" + new_exe_path)