werift 0.22.9 → 0.24.0

package/lib/rtp/src/srtp/cipher/ctr.js

@@ -3,8 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CipherAesCtr = void 0;
 const crypto_1 = require("crypto");
 const _1 = require(".");
-const header_1 = require("../../rtcp/header");
-const rtp_1 = require("../../rtp/rtp");
+const error_1 = require("../error");
+const packet_1 = require("../packet");
 class CipherAesCtr extends _1.CipherAesBase {
     constructor(srtpSessionKey, srtpSessionSalt, srtcpSessionKey, srtcpSessionSalt, srtpSessionAuthTag, srtcpSessionAuthTag) {
         super(srtpSessionKey, srtpSessionSalt, srtcpSessionKey, srtcpSessionSalt);
@@ -35,20 +35,24 @@ class CipherAesCtr extends _1.CipherAesBase {
         const authTag = this.generateSrtpAuthTag(rolloverCounter, headerBuffer, enc);
         return Buffer.concat([headerBuffer, enc, authTag]);
     }
-    decryptRtp(cipherText, rolloverCounter) {
-        const header = rtp_1.RtpHeader.deSerialize(cipherText);
-        const size = cipherText.length - this.authTagLength;
-        cipherText = cipherText.subarray(0, cipherText.length - this.authTagLength);
+    decryptRtp(cipherText, rolloverCounter, header = (0, packet_1.parseSrtpRtpHeader)(cipherText, this.authTagLength)) {
+        const authTagOffset = cipherText.length - this.authTagLength;
+        const encryptedPacket = cipherText.subarray(0, authTagOffset);
+        const actualAuthTag = cipherText.subarray(authTagOffset);
+        const expectedAuthTag = this.generateSrtpAuthTag(rolloverCounter, encryptedPacket.subarray(0, header.payloadOffset), encryptedPacket.subarray(header.payloadOffset));
+        assertAuthTag(actualAuthTag, expectedAuthTag, "Failed to authenticate SRTP packet");
         const counter = this.generateCounter(header.sequenceNumber, rolloverCounter, header.ssrc, this.srtpSessionSalt);
         const cipher = (0, crypto_1.createDecipheriv)("aes-128-ctr", this.srtpSessionKey, counter);
-        const payload = cipherText.subarray(header.payloadOffset);
+        const payload = encryptedPacket.subarray(header.payloadOffset);
         const buf = cipher.update(payload);
         const dst = Buffer.concat([
-            cipherText.subarray(0, header.payloadOffset),
+            encryptedPacket.subarray(0, header.payloadOffset),
             buf,
-            Buffer.alloc(size - header.payloadOffset - buf.length),
         ]);
-        return [dst, header];
+        return [
+            dst,
+            (0, packet_1.finalizeSrtpRtpHeader)(header, dst, "Failed to authenticate SRTP packet"),
+        ];
     }
     encryptRTCP(rtcpPacket, srtcpIndex) {
         let out = Buffer.from(rtcpPacket);
@@ -66,17 +70,19 @@ class CipherAesCtr extends _1.CipherAesBase {
         return out;
     }
     decryptRTCP(encrypted) {
-        const header = header_1.RtcpHeader.deSerialize(encrypted);
+        const header = (0, packet_1.parseSrtcpHeader)(encrypted, this.authTagLength, srtcpIndexSize);
         const tailOffset = encrypted.length - (this.authTagLength + srtcpIndexSize);
+        const authenticatedPortion = encrypted.subarray(0, encrypted.length - this.authTagLength);
+        const actualTag = encrypted.subarray(encrypted.length - this.authTagLength);
+        const expectedTag = this.generateSrtcpAuthTag(authenticatedPortion);
+        assertAuthTag(actualTag, expectedTag, "Failed to authenticate SRTCP packet");
         const out = Buffer.from(encrypted).slice(0, tailOffset);
-        const isEncrypted = encrypted[tailOffset] >> 7;
+        const isEncrypted = encrypted[tailOffset] >>> 7;
         if (isEncrypted === 0)
             return [out, header];
         let srtcpIndex = encrypted.readUInt32BE(tailOffset);
         srtcpIndex &= ~(1 << 31);
         const ssrc = encrypted.readUInt32BE(4);
-        // todo impl compare
-        const actualTag = encrypted.subarray(encrypted.length - 10);
         const counter = this.generateCounter(srtcpIndex & 0xffff, srtcpIndex >> 16, ssrc, this.srtcpSessionSalt);
         const cipher = (0, crypto_1.createDecipheriv)("aes-128-ctr", this.srtcpSessionKey, counter);
         const buf = cipher.update(out.subarray(8));
@@ -109,4 +115,9 @@ class CipherAesCtr extends _1.CipherAesBase {
 }
 exports.CipherAesCtr = CipherAesCtr;
 const srtcpIndexSize = 4;
+function assertAuthTag(actual, expected, message) {
+    if (actual.length !== expected.length || !(0, crypto_1.timingSafeEqual)(actual, expected)) {
+        throw new error_1.SrtpAuthenticationError(message);
+    }
+}
 //# sourceMappingURL=ctr.js.map

package/lib/rtp/src/srtp/cipher/ctr.js.map

@@ -1 +1 @@
-{"version":3,"file":"ctr.js","sourceRoot":"","sources":["../../../../../../rtp/src/srtp/cipher/ctr.ts"],"names":[],"mappings":";;;AAAA,mCAAsE;AAEtE,wBAAkC;AAClC,8CAA+C;AAC/C,uCAA0C;AAE1C,MAAa,YAAa,SAAQ,gBAAa;IAG7C,YACE,cAAsB,EACtB,eAAuB,EACvB,eAAuB,EACvB,gBAAwB,EAChB,kBAA0B,EAC1B,mBAA2B;QAEnC,KAAK,CAAC,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;QAH1E;;;;mBAAQ,kBAAkB;WAAQ;QAClC;;;;mBAAQ,mBAAmB;WAAQ;QAR5B;;;;mBAAgB,EAAE;WAAC;IAW5B,CAAC;IAED,UAAU,CAAC,MAAiB,EAAE,OAAe,EAAE,eAAuB;QACpE,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAClC,MAAM,CAAC,cAAc,EACrB,eAAe,EACf,MAAM,CAAC,IAAI,EACX,IAAI,CAAC,eAAe,CACrB,CAAC;QAEF,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnC,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CACtC,eAAe,EACf,YAAY,EACZ,GAAG,CACJ,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,UAAU,CAAC,UAAkB,EAAE,eAAuB;QACpD,MAAM,MAAM,GAAG,eAAS,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEjD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC;QAEpD,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;QAE5E,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAClC,MAAM,CAAC,cAAc,EACrB,eAAe,EACf,MAAM,CAAC,IAAI,EACX,IAAI,CAAC,eAAe,CACrB,CAAC;QACF,MAAM,MAAM,GAAG,IAAA,yBAAgB,EAC7B,aAAa,EACb,IAAI,CAAC,cAAc,EACnB,OAAO,CACR,CAAC;QACF,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;YACxB,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC;YAC5C,GAAG;YACH,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC;SACvD,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,WAAW,CAAC,UAAkB,EAAE,UAAkB;QAChD,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAClC,UAAU,GAAG,MAAM,EACnB,UAAU,IAAI,EAAE,EAChB,IAAI,EACJ,IAAI,CAAC,gBAAgB,CACtB,CAAC;QACF,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAC5E,kCAAkC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjB,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC/C,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAEpC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,WAAW,CAAC,SAAiB;QAC3B,MAAM,MAAM,GAAG,mBAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAEjD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,cAAc,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAExD,MAAM,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,WAAW,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE5C,IAAI,UAAU,GAAG,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACpD,UAAU,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAEzB,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAEvC,oBAAoB;QACpB,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAClC,UAAU,GAAG,MAAM,EACnB,UAAU,IAAI,EAAE,EAChB,IAAI,EACJ,IAAI,CAAC,gBAAgB,CACtB,CAAC;QACF,MAAM,MAAM,GAAG,IAAA,yBAAgB,EAC7B,aAAa,EACb,IAAI,CAAC,eAAe,EACpB,OAAO,CACR,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,oBAAoB,CAAC,GAAW;QAC9B,MAAM,gBAAgB,GAAG,IAAA,mBAAU,EAAC,MAAM,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACtE,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,eAAe,CACb,cAAsB,EACtB,eAAuB,EACvB,IAAY,EACZ,WAAmB;QAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/B,OAAO,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QAC1C,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAEjE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,OAAO,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,mBAAmB,CAAC,GAAW,EAAE,GAAG,OAAiB;QACnD,MAAM,eAAe,GAAG,IAAA,mBAAU,EAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAE1B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;CACF;AAzJD,oCAyJC;AAED,MAAM,cAAc,GAAG,CAAC,CAAC","sourcesContent":["import { createCipheriv, createDecipheriv, createHmac } from \"crypto\";\n\nimport { CipherAesBase } from \".\";\nimport { RtcpHeader } from \"../../rtcp/header\";\nimport { RtpHeader } from \"../../rtp/rtp\";\n\nexport class CipherAesCtr extends CipherAesBase {\n  readonly authTagLength = 10;\n\n  constructor(\n    srtpSessionKey: Buffer,\n    srtpSessionSalt: Buffer,\n    srtcpSessionKey: Buffer,\n    srtcpSessionSalt: Buffer,\n    private srtpSessionAuthTag: Buffer,\n    private srtcpSessionAuthTag: Buffer,\n  ) {\n    super(srtpSessionKey, srtpSessionSalt, srtcpSessionKey, srtcpSessionSalt);\n  }\n\n  encryptRtp(header: RtpHeader, payload: Buffer, rolloverCounter: number) {\n    const headerBuffer = header.serialize(header.serializeSize);\n\n    const counter = this.generateCounter(\n      header.sequenceNumber,\n      rolloverCounter,\n      header.ssrc,\n      this.srtpSessionSalt,\n    );\n\n    const cipher = createCipheriv(\"aes-128-ctr\", this.srtpSessionKey, counter);\n    const enc = cipher.update(payload);\n\n    const authTag = this.generateSrtpAuthTag(\n      rolloverCounter,\n      headerBuffer,\n      enc,\n    );\n    return Buffer.concat([headerBuffer, enc, authTag]);\n  }\n\n  decryptRtp(cipherText: Buffer, rolloverCounter: number): [Buffer, RtpHeader] {\n    const header = RtpHeader.deSerialize(cipherText);\n\n    const size = cipherText.length - this.authTagLength;\n\n    cipherText = cipherText.subarray(0, cipherText.length - this.authTagLength);\n\n    const counter = this.generateCounter(\n      header.sequenceNumber,\n      rolloverCounter,\n      header.ssrc,\n      this.srtpSessionSalt,\n    );\n    const cipher = createDecipheriv(\n      \"aes-128-ctr\",\n      this.srtpSessionKey,\n      counter,\n    );\n    const payload = cipherText.subarray(header.payloadOffset);\n    const buf = cipher.update(payload);\n\n    const dst = Buffer.concat([\n      cipherText.subarray(0, header.payloadOffset),\n      buf,\n      Buffer.alloc(size - header.payloadOffset - buf.length),\n    ]);\n\n    return [dst, header];\n  }\n\n  encryptRTCP(rtcpPacket: Buffer, srtcpIndex: number): Buffer {\n    let out = Buffer.from(rtcpPacket);\n    const ssrc = out.readUInt32BE(4);\n\n    const counter = this.generateCounter(\n      srtcpIndex & 0xffff,\n      srtcpIndex >> 16,\n      ssrc,\n      this.srtcpSessionSalt,\n    );\n    const cipher = createCipheriv(\"aes-128-ctr\", this.srtcpSessionKey, counter);\n    // Encrypt everything after header\n    const buf = cipher.update(out.slice(8));\n    buf.copy(out, 8);\n    out = Buffer.concat([out, Buffer.alloc(4)]);\n    out.writeUInt32BE(srtcpIndex, out.length - 4);\n    out[out.length - 4] |= 0x80;\n    const authTag = this.generateSrtcpAuthTag(out);\n    out = Buffer.concat([out, authTag]);\n\n    return out;\n  }\n\n  decryptRTCP(encrypted: Buffer): [Buffer, RtcpHeader] {\n    const header = RtcpHeader.deSerialize(encrypted);\n\n    const tailOffset = encrypted.length - (this.authTagLength + srtcpIndexSize);\n    const out = Buffer.from(encrypted).slice(0, tailOffset);\n\n    const isEncrypted = encrypted[tailOffset] >> 7;\n    if (isEncrypted === 0) return [out, header];\n\n    let srtcpIndex = encrypted.readUInt32BE(tailOffset);\n    srtcpIndex &= ~(1 << 31);\n\n    const ssrc = encrypted.readUInt32BE(4);\n\n    // todo impl compare\n    const actualTag = encrypted.subarray(encrypted.length - 10);\n\n    const counter = this.generateCounter(\n      srtcpIndex & 0xffff,\n      srtcpIndex >> 16,\n      ssrc,\n      this.srtcpSessionSalt,\n    );\n    const cipher = createDecipheriv(\n      \"aes-128-ctr\",\n      this.srtcpSessionKey,\n      counter,\n    );\n    const buf = cipher.update(out.subarray(8));\n    buf.copy(out, 8);\n    return [out, header];\n  }\n\n  generateSrtcpAuthTag(buf: Buffer) {\n    const srtcpSessionAuth = createHmac(\"sha1\", this.srtcpSessionAuthTag);\n    return srtcpSessionAuth.update(buf).digest().slice(0, 10);\n  }\n\n  generateCounter(\n    sequenceNumber: number,\n    rolloverCounter: number,\n    ssrc: number,\n    sessionSalt: Buffer,\n  ) {\n    const counter = Buffer.alloc(16);\n    counter.writeUInt32BE(ssrc, 4);\n    counter.writeUInt32BE(rolloverCounter, 8);\n    counter.writeUInt32BE(Number(BigInt(sequenceNumber) << 16n), 12);\n\n    for (let i = 0; i < sessionSalt.length; i++) {\n      counter[i] ^= sessionSalt[i];\n    }\n    return counter;\n  }\n\n  generateSrtpAuthTag(roc: number, ...buffers: Buffer[]) {\n    const srtpSessionAuth = createHmac(\"sha1\", this.srtpSessionAuthTag);\n    const rocRaw = Buffer.alloc(4);\n    rocRaw.writeUInt32BE(roc);\n\n    for (const buf of buffers) {\n      srtpSessionAuth.update(buf);\n    }\n    return srtpSessionAuth.update(rocRaw).digest().subarray(0, 10);\n  }\n}\n\nconst srtcpIndexSize = 4;\n"]}
+{"version":3,"file":"ctr.js","sourceRoot":"","sources":["../../../../../../rtp/src/srtp/cipher/ctr.ts"],"names":[],"mappings":";;;AAAA,mCAKgB;AAEhB,wBAAkC;AAGlC,oCAAmD;AACnD,sCAImB;AAEnB,MAAa,YAAa,SAAQ,gBAAa;IAG7C,YACE,cAAsB,EACtB,eAAuB,EACvB,eAAuB,EACvB,gBAAwB,EAChB,kBAA0B,EAC1B,mBAA2B;QAEnC,KAAK,CAAC,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;QAH1E;;;;mBAAQ,kBAAkB;WAAQ;QAClC;;;;mBAAQ,mBAAmB;WAAQ;QAR5B;;;;mBAAgB,EAAE;WAAC;IAW5B,CAAC;IAED,UAAU,CAAC,MAAiB,EAAE,OAAe,EAAE,eAAuB;QACpE,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAE5D,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAClC,MAAM,CAAC,cAAc,EACrB,eAAe,EACf,MAAM,CAAC,IAAI,EACX,IAAI,CAAC,eAAe,CACrB,CAAC;QAEF,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnC,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CACtC,eAAe,EACf,YAAY,EACZ,GAAG,CACJ,CAAC;QACF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAED,UAAU,CACR,UAAkB,EAClB,eAAuB,EACvB,MAAM,GAAG,IAAA,2BAAkB,EAAC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;QAE3D,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC;QAC7D,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QAC9D,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QAEzD,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,CAC9C,eAAe,EACf,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,EACjD,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAC/C,CAAC;QACF,aAAa,CACX,aAAa,EACb,eAAe,EACf,oCAAoC,CACrC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAClC,MAAM,CAAC,cAAc,EACrB,eAAe,EACf,MAAM,CAAC,IAAI,EACX,IAAI,CAAC,eAAe,CACrB,CAAC;QACF,MAAM,MAAM,GAAG,IAAA,yBAAgB,EAC7B,aAAa,EACb,IAAI,CAAC,cAAc,EACnB,OAAO,CACR,CAAC;QACF,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;YACxB,eAAe,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC;YACjD,GAAG;SACJ,CAAC,CAAC;QAEH,OAAO;YACL,GAAG;YACH,IAAA,8BAAqB,EAAC,MAAM,EAAE,GAAG,EAAE,oCAAoC,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,UAAkB,EAAE,UAAkB;QAChD,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAClC,UAAU,GAAG,MAAM,EACnB,UAAU,IAAI,EAAE,EAChB,IAAI,EACJ,IAAI,CAAC,gBAAgB,CACtB,CAAC;QACF,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QAC5E,kCAAkC;QAClC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjB,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9C,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC/C,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAEpC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,WAAW,CAAC,SAAiB;QAC3B,MAAM,MAAM,GAAG,IAAA,yBAAgB,EAC7B,SAAS,EACT,IAAI,CAAC,aAAa,EAClB,cAAc,CACf,CAAC;QAEF,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,cAAc,CAAC,CAAC;QAC5E,MAAM,oBAAoB,GAAG,SAAS,CAAC,QAAQ,CAC7C,CAAC,EACD,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,CACtC,CAAC;QACF,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;QACpE,aAAa,CACX,SAAS,EACT,WAAW,EACX,qCAAqC,CACtC,CAAC;QAEF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAExD,MAAM,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,WAAW,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAE5C,IAAI,UAAU,GAAG,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACpD,UAAU,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAEzB,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAEvC,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAClC,UAAU,GAAG,MAAM,EACnB,UAAU,IAAI,EAAE,EAChB,IAAI,EACJ,IAAI,CAAC,gBAAgB,CACtB,CAAC;QACF,MAAM,MAAM,GAAG,IAAA,yBAAgB,EAC7B,aAAa,EACb,IAAI,CAAC,eAAe,EACpB,OAAO,CACR,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjB,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,oBAAoB,CAAC,GAAW;QAC9B,MAAM,gBAAgB,GAAG,IAAA,mBAAU,EAAC,MAAM,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACtE,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,eAAe,CACb,cAAsB,EACtB,eAAuB,EACvB,IAAY,EACZ,WAAmB;QAEnB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC/B,OAAO,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QAC1C,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAEjE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,OAAO,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,mBAAmB,CAAC,GAAW,EAAE,GAAG,OAAiB;QACnD,MAAM,eAAe,GAAG,IAAA,mBAAU,EAAC,MAAM,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAE1B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;CACF;AArLD,oCAqLC;AAED,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,SAAS,aAAa,CAAC,MAAc,EAAE,QAAgB,EAAE,OAAe;IACtE,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAA,wBAAe,EAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,+BAAuB,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC","sourcesContent":["import {\n  createCipheriv,\n  createDecipheriv,\n  createHmac,\n  timingSafeEqual,\n} from \"crypto\";\n\nimport { CipherAesBase } from \".\";\nimport type { RtcpHeader } from \"../../rtcp/header\";\nimport type { RtpHeader } from \"../../rtp/rtp\";\nimport { SrtpAuthenticationError } from \"../error\";\nimport {\n  finalizeSrtpRtpHeader,\n  parseSrtcpHeader,\n  parseSrtpRtpHeader,\n} from \"../packet\";\n\nexport class CipherAesCtr extends CipherAesBase {\n  readonly authTagLength = 10;\n\n  constructor(\n    srtpSessionKey: Buffer,\n    srtpSessionSalt: Buffer,\n    srtcpSessionKey: Buffer,\n    srtcpSessionSalt: Buffer,\n    private srtpSessionAuthTag: Buffer,\n    private srtcpSessionAuthTag: Buffer,\n  ) {\n    super(srtpSessionKey, srtpSessionSalt, srtcpSessionKey, srtcpSessionSalt);\n  }\n\n  encryptRtp(header: RtpHeader, payload: Buffer, rolloverCounter: number) {\n    const headerBuffer = header.serialize(header.serializeSize);\n\n    const counter = this.generateCounter(\n      header.sequenceNumber,\n      rolloverCounter,\n      header.ssrc,\n      this.srtpSessionSalt,\n    );\n\n    const cipher = createCipheriv(\"aes-128-ctr\", this.srtpSessionKey, counter);\n    const enc = cipher.update(payload);\n\n    const authTag = this.generateSrtpAuthTag(\n      rolloverCounter,\n      headerBuffer,\n      enc,\n    );\n    return Buffer.concat([headerBuffer, enc, authTag]);\n  }\n\n  decryptRtp(\n    cipherText: Buffer,\n    rolloverCounter: number,\n    header = parseSrtpRtpHeader(cipherText, this.authTagLength),\n  ): [Buffer, RtpHeader] {\n    const authTagOffset = cipherText.length - this.authTagLength;\n    const encryptedPacket = cipherText.subarray(0, authTagOffset);\n    const actualAuthTag = cipherText.subarray(authTagOffset);\n\n    const expectedAuthTag = this.generateSrtpAuthTag(\n      rolloverCounter,\n      encryptedPacket.subarray(0, header.payloadOffset),\n      encryptedPacket.subarray(header.payloadOffset),\n    );\n    assertAuthTag(\n      actualAuthTag,\n      expectedAuthTag,\n      \"Failed to authenticate SRTP packet\",\n    );\n\n    const counter = this.generateCounter(\n      header.sequenceNumber,\n      rolloverCounter,\n      header.ssrc,\n      this.srtpSessionSalt,\n    );\n    const cipher = createDecipheriv(\n      \"aes-128-ctr\",\n      this.srtpSessionKey,\n      counter,\n    );\n    const payload = encryptedPacket.subarray(header.payloadOffset);\n    const buf = cipher.update(payload);\n\n    const dst = Buffer.concat([\n      encryptedPacket.subarray(0, header.payloadOffset),\n      buf,\n    ]);\n\n    return [\n      dst,\n      finalizeSrtpRtpHeader(header, dst, \"Failed to authenticate SRTP packet\"),\n    ];\n  }\n\n  encryptRTCP(rtcpPacket: Buffer, srtcpIndex: number): Buffer {\n    let out = Buffer.from(rtcpPacket);\n    const ssrc = out.readUInt32BE(4);\n\n    const counter = this.generateCounter(\n      srtcpIndex & 0xffff,\n      srtcpIndex >> 16,\n      ssrc,\n      this.srtcpSessionSalt,\n    );\n    const cipher = createCipheriv(\"aes-128-ctr\", this.srtcpSessionKey, counter);\n    // Encrypt everything after header\n    const buf = cipher.update(out.slice(8));\n    buf.copy(out, 8);\n    out = Buffer.concat([out, Buffer.alloc(4)]);\n    out.writeUInt32BE(srtcpIndex, out.length - 4);\n    out[out.length - 4] |= 0x80;\n    const authTag = this.generateSrtcpAuthTag(out);\n    out = Buffer.concat([out, authTag]);\n\n    return out;\n  }\n\n  decryptRTCP(encrypted: Buffer): [Buffer, RtcpHeader] {\n    const header = parseSrtcpHeader(\n      encrypted,\n      this.authTagLength,\n      srtcpIndexSize,\n    );\n\n    const tailOffset = encrypted.length - (this.authTagLength + srtcpIndexSize);\n    const authenticatedPortion = encrypted.subarray(\n      0,\n      encrypted.length - this.authTagLength,\n    );\n    const actualTag = encrypted.subarray(encrypted.length - this.authTagLength);\n    const expectedTag = this.generateSrtcpAuthTag(authenticatedPortion);\n    assertAuthTag(\n      actualTag,\n      expectedTag,\n      \"Failed to authenticate SRTCP packet\",\n    );\n\n    const out = Buffer.from(encrypted).slice(0, tailOffset);\n\n    const isEncrypted = encrypted[tailOffset] >>> 7;\n    if (isEncrypted === 0) return [out, header];\n\n    let srtcpIndex = encrypted.readUInt32BE(tailOffset);\n    srtcpIndex &= ~(1 << 31);\n\n    const ssrc = encrypted.readUInt32BE(4);\n\n    const counter = this.generateCounter(\n      srtcpIndex & 0xffff,\n      srtcpIndex >> 16,\n      ssrc,\n      this.srtcpSessionSalt,\n    );\n    const cipher = createDecipheriv(\n      \"aes-128-ctr\",\n      this.srtcpSessionKey,\n      counter,\n    );\n    const buf = cipher.update(out.subarray(8));\n    buf.copy(out, 8);\n    return [out, header];\n  }\n\n  generateSrtcpAuthTag(buf: Buffer) {\n    const srtcpSessionAuth = createHmac(\"sha1\", this.srtcpSessionAuthTag);\n    return srtcpSessionAuth.update(buf).digest().slice(0, 10);\n  }\n\n  generateCounter(\n    sequenceNumber: number,\n    rolloverCounter: number,\n    ssrc: number,\n    sessionSalt: Buffer,\n  ) {\n    const counter = Buffer.alloc(16);\n    counter.writeUInt32BE(ssrc, 4);\n    counter.writeUInt32BE(rolloverCounter, 8);\n    counter.writeUInt32BE(Number(BigInt(sequenceNumber) << 16n), 12);\n\n    for (let i = 0; i < sessionSalt.length; i++) {\n      counter[i] ^= sessionSalt[i];\n    }\n    return counter;\n  }\n\n  generateSrtpAuthTag(roc: number, ...buffers: Buffer[]) {\n    const srtpSessionAuth = createHmac(\"sha1\", this.srtpSessionAuthTag);\n    const rocRaw = Buffer.alloc(4);\n    rocRaw.writeUInt32BE(roc);\n\n    for (const buf of buffers) {\n      srtpSessionAuth.update(buf);\n    }\n    return srtpSessionAuth.update(rocRaw).digest().subarray(0, 10);\n  }\n}\n\nconst srtcpIndexSize = 4;\n\nfunction assertAuthTag(actual: Buffer, expected: Buffer, message: string) {\n  if (actual.length !== expected.length || !timingSafeEqual(actual, expected)) {\n    throw new SrtpAuthenticationError(message);\n  }\n}\n"]}

package/lib/rtp/src/srtp/cipher/gcm.d.ts

@@ -1,6 +1,6 @@
 import { CipherAesBase } from ".";
-import { RtcpHeader } from "../../rtcp/header";
-import { RtpHeader } from "../../rtp/rtp";
+import type { RtcpHeader } from "../../rtcp/header";
+import type { RtpHeader } from "../../rtp/rtp";
 export declare class CipherAesGcm extends CipherAesBase {
     readonly aeadAuthTagLen = 16;
     readonly rtpIvWriter: (values: (number | bigint)[]) => Buffer<ArrayBuffer>;
@@ -8,7 +8,7 @@ export declare class CipherAesGcm extends CipherAesBase {
     readonly aadWriter: (values: (number | bigint)[]) => Buffer<ArrayBuffer>;
     constructor(srtpSessionKey: Buffer, srtpSessionSalt: Buffer, srtcpSessionKey: Buffer, srtcpSessionSalt: Buffer);
     encryptRtp(header: RtpHeader, payload: Buffer, rolloverCounter: number): Buffer<ArrayBuffer>;
-    decryptRtp(cipherText: Buffer, rolloverCounter: number): [Buffer, RtpHeader];
+    decryptRtp(cipherText: Buffer, rolloverCounter: number, header?: RtpHeader): [Buffer, RtpHeader];
     encryptRTCP(rtcpPacket: Buffer, srtcpIndex: number): Buffer;
     decryptRTCP(encrypted: Buffer): [Buffer, RtcpHeader];
     private rtpInitializationVector;

package/lib/rtp/src/srtp/cipher/gcm.js

@@ -5,8 +5,8 @@ const crypto_1 = require("crypto");
 const _1 = require(".");
 const src_1 = require("../../../../common/src");
 const helper_1 = require("../../helper");
-const header_1 = require("../../rtcp/header");
-const rtp_1 = require("../../rtp/rtp");
+const error_1 = require("../error");
+const packet_1 = require("../packet");
 class CipherAesGcm extends _1.CipherAesBase {
     constructor(srtpSessionKey, srtpSessionSalt, srtcpSessionKey, srtcpSessionSalt) {
         super(srtpSessionKey, srtpSessionSalt, srtcpSessionKey, srtcpSessionSalt);
@@ -46,17 +46,25 @@ class CipherAesGcm extends _1.CipherAesBase {
         const dst = Buffer.concat([hdr, enc, authTag]);
         return dst;
     }
-    decryptRtp(cipherText, rolloverCounter) {
-        const header = rtp_1.RtpHeader.deSerialize(cipherText);
+    decryptRtp(cipherText, rolloverCounter, header = (0, packet_1.parseSrtpRtpHeader)(cipherText, this.aeadAuthTagLen)) {
+        const headerBuffer = cipherText.subarray(0, header.payloadOffset);
+        const authTagOffset = cipherText.length - this.aeadAuthTagLen;
+        const authTag = cipherText.subarray(authTagOffset);
         let dst = Buffer.from([]);
         dst = (0, helper_1.growBufferSize)(dst, cipherText.length - this.aeadAuthTagLen);
-        cipherText.slice(0, header.payloadOffset).copy(dst);
+        headerBuffer.copy(dst);
         const iv = this.rtpInitializationVector(header, rolloverCounter);
-        const enc = cipherText.slice(header.payloadOffset, cipherText.length - this.aeadAuthTagLen);
-        const cipher = (0, crypto_1.createDecipheriv)("aes-128-gcm", this.srtpSessionKey, iv);
-        const dec = cipher.update(enc);
+        const enc = cipherText.slice(header.payloadOffset, authTagOffset);
+        const decipher = (0, crypto_1.createDecipheriv)("aes-128-gcm", this.srtpSessionKey, iv);
+        decipher.setAAD(headerBuffer);
+        decipher.setAuthTag(authTag);
+        const dec = decipher.update(enc);
+        finalizeAuthenticatedDecryption(decipher, "SRTP");
         dec.copy(dst, header.payloadOffset);
-        return [dst, header];
+        return [
+            dst,
+            (0, packet_1.finalizeSrtpRtpHeader)(header, dst, "Failed to authenticate SRTP packet"),
+        ];
     }
     encryptRTCP(rtcpPacket, srtcpIndex) {
         const ssrc = rtcpPacket.readUInt32BE(4);
@@ -77,19 +85,40 @@ class CipherAesGcm extends _1.CipherAesBase {
         return dst;
     }
     decryptRTCP(encrypted) {
-        const header = header_1.RtcpHeader.deSerialize(encrypted);
-        const aadPos = encrypted.length - srtcpIndexSize;
-        const dst = Buffer.alloc(aadPos - this.aeadAuthTagLen);
-        encrypted.slice(0, 8).copy(dst);
+        const header = (0, packet_1.parseSrtcpHeader)(encrypted, this.aeadAuthTagLen, srtcpIndexSize);
+        const srtcpIndexOffset = encrypted.length - srtcpIndexSize;
+        const authTagOffset = srtcpIndexOffset - this.aeadAuthTagLen;
         const ssrc = encrypted.readUInt32BE(4);
-        let srtcpIndex = encrypted.readUInt32BE(encrypted.length - 4);
-        srtcpIndex &= ~(rtcpEncryptionFlag << 24);
+        const encodedSrtcpIndex = encrypted.readUInt32BE(srtcpIndexOffset);
+        const isEncrypted = encodedSrtcpIndex >>> 31 === 1;
+        const srtcpIndex = encodedSrtcpIndex & ~(rtcpEncryptionFlag << 24);
         const iv = this.rtcpInitializationVector(ssrc, srtcpIndex);
-        const aad = this.rtcpAdditionalAuthenticatedData(encrypted, srtcpIndex);
-        const cipher = (0, crypto_1.createDecipheriv)("aes-128-gcm", this.srtcpSessionKey, iv);
-        cipher.setAAD(aad);
-        const dec = cipher.update(encrypted.slice(8, aadPos));
-        dec.copy(dst, 8);
+        const aad = isEncrypted
+            ? Buffer.concat([
+                encrypted.subarray(0, 8),
+                encrypted.subarray(srtcpIndexOffset),
+            ])
+            : Buffer.concat([
+                encrypted.subarray(0, authTagOffset),
+                encrypted.subarray(srtcpIndexOffset),
+            ]);
+        const cipherText = isEncrypted
+            ? encrypted.slice(8, authTagOffset)
+            : Buffer.alloc(0);
+        const dst = isEncrypted
+            ? Buffer.alloc(authTagOffset)
+            : Buffer.from(encrypted.subarray(0, authTagOffset));
+        if (isEncrypted) {
+            encrypted.slice(0, 8).copy(dst);
+        }
+        const decipher = (0, crypto_1.createDecipheriv)("aes-128-gcm", this.srtcpSessionKey, iv);
+        decipher.setAAD(aad);
+        decipher.setAuthTag(encrypted.subarray(authTagOffset, srtcpIndexOffset));
+        const dec = decipher.update(cipherText);
+        finalizeAuthenticatedDecryption(decipher, "SRTCP");
+        if (isEncrypted) {
+            dec.copy(dst, 8);
+        }
         return [dst, header];
     }
     // https://tools.ietf.org/html/rfc7714#section-8.1
@@ -126,4 +155,12 @@ class CipherAesGcm extends _1.CipherAesBase {
 exports.CipherAesGcm = CipherAesGcm;
 const srtcpIndexSize = 4;
 const rtcpEncryptionFlag = 0x80;
+function finalizeAuthenticatedDecryption(decipher, packetType) {
+    try {
+        decipher.final();
+    }
+    catch {
+        throw new error_1.SrtpAuthenticationError(`Failed to authenticate ${packetType} packet`);
+    }
+}
 //# sourceMappingURL=gcm.js.map

package/lib/rtp/src/srtp/cipher/gcm.js.map

@@ -1 +1 @@
-{"version":3,"file":"gcm.js","sourceRoot":"","sources":["../../../../../../rtp/src/srtp/cipher/gcm.ts"],"names":[],"mappings":";;;AAAA,mCAA0D;AAE1D,wBAAkC;AAClC,gDAA4D;AAC5D,yCAA8C;AAC9C,8CAA+C;AAC/C,uCAA0C;AAE1C,MAAa,YAAa,SAAQ,gBAAa;IAM7C,YACE,cAAsB,EACtB,eAAuB,EACvB,eAAuB,EACvB,gBAAwB;QAExB,KAAK,CAAC,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;QAXnE;;;;mBAAiB,EAAE;WAAC;QACpB;;;;mBAAc,IAAA,wBAAkB,EAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;WAAC;QACrD;;;;mBAAe,IAAA,wBAAkB,EAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;WAAC;QACtD;;;;mBAAY,IAAA,wBAAkB,EAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;WAAC;IASnD,CAAC;IAED,UAAU,CAAC,MAAiB,EAAE,OAAe,EAAE,eAAuB;QACpE,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAEnD,MAAM,EAAE,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,EAAE,CAAC;QAEf,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEpC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,UAAU,CAAC,UAAkB,EAAE,eAAuB;QACpD,MAAM,MAAM,GAAG,eAAS,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEjD,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,GAAG,GAAG,IAAA,uBAAc,EAAC,GAAG,EAAE,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;QACnE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpD,MAAM,EAAE,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAEjE,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAC1B,MAAM,CAAC,aAAa,EACpB,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,CACxC,CAAC;QAEF,MAAM,MAAM,GAAG,IAAA,yBAAgB,EAAC,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE/B,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAEpC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,WAAW,CAAC,UAAkB,EAAE,UAAkB;QAChD,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAExC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC;QACvD,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,GAAG,GAAG,IAAA,uBAAc,EAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC;QACnD,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEjC,MAAM,EAAE,GAAG,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,+BAA+B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAEzE,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAEjB,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEnC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,WAAW,CAAC,SAAiB;QAC3B,MAAM,MAAM,GAAG,mBAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,GAAG,cAAc,CAAC;QAEjD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;QACvD,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEhC,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAEvC,IAAI,UAAU,GAAG,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC9D,UAAU,IAAI,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QAE1C,MAAM,EAAE,GAAG,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,+BAA+B,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG,IAAA,yBAAgB,EAAC,aAAa,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAEtD,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAEjB,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,kDAAkD;IAC1C,uBAAuB,CAAC,MAAiB,EAAE,eAAuB;QACxE,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC;YAC1B,CAAC;YACD,MAAM,CAAC,IAAI;YACX,eAAe;YACf,MAAM,CAAC,cAAc;SACtB,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,kDAAkD;IAC1C,wBAAwB,CAAC,IAAY,EAAE,UAAkB;QAC/D,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;QACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,2DAA2D;IACnD,+BAA+B,CACrC,UAAkB,EAClB,UAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;YACxB,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAAC;SAC7B,CAAC,CAAC;QACH,GAAG,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC;QAC7B,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAxID,oCAwIC;AAED,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,kBAAkB,GAAG,IAAI,CAAC","sourcesContent":["import { createCipheriv, createDecipheriv } from \"crypto\";\n\nimport { CipherAesBase } from \".\";\nimport { createBufferWriter } from \"../../../../common/src\";\nimport { growBufferSize } from \"../../helper\";\nimport { RtcpHeader } from \"../../rtcp/header\";\nimport { RtpHeader } from \"../../rtp/rtp\";\n\nexport class CipherAesGcm extends CipherAesBase {\n  readonly aeadAuthTagLen = 16;\n  readonly rtpIvWriter = createBufferWriter([2, 4, 4, 2], true);\n  readonly rtcpIvWriter = createBufferWriter([2, 4, 2, 4], true);\n  readonly aadWriter = createBufferWriter([4], true);\n\n  constructor(\n    srtpSessionKey: Buffer,\n    srtpSessionSalt: Buffer,\n    srtcpSessionKey: Buffer,\n    srtcpSessionSalt: Buffer,\n  ) {\n    super(srtpSessionKey, srtpSessionSalt, srtcpSessionKey, srtcpSessionSalt);\n  }\n\n  encryptRtp(header: RtpHeader, payload: Buffer, rolloverCounter: number) {\n    const hdr = header.serialize(header.serializeSize);\n\n    const iv = this.rtpInitializationVector(header, rolloverCounter);\n\n    const cipher = createCipheriv(\"aes-128-gcm\", this.srtpSessionKey, iv);\n    cipher.setAAD(hdr);\n    const enc = cipher.update(payload);\n    cipher.final();\n\n    const authTag = cipher.getAuthTag();\n\n    const dst = Buffer.concat([hdr, enc, authTag]);\n    return dst;\n  }\n\n  decryptRtp(cipherText: Buffer, rolloverCounter: number): [Buffer, RtpHeader] {\n    const header = RtpHeader.deSerialize(cipherText);\n\n    let dst = Buffer.from([]);\n    dst = growBufferSize(dst, cipherText.length - this.aeadAuthTagLen);\n    cipherText.slice(0, header.payloadOffset).copy(dst);\n\n    const iv = this.rtpInitializationVector(header, rolloverCounter);\n\n    const enc = cipherText.slice(\n      header.payloadOffset,\n      cipherText.length - this.aeadAuthTagLen,\n    );\n\n    const cipher = createDecipheriv(\"aes-128-gcm\", this.srtpSessionKey, iv);\n    const dec = cipher.update(enc);\n\n    dec.copy(dst, header.payloadOffset);\n\n    return [dst, header];\n  }\n\n  encryptRTCP(rtcpPacket: Buffer, srtcpIndex: number): Buffer {\n    const ssrc = rtcpPacket.readUInt32BE(4);\n\n    const addPos = rtcpPacket.length + this.aeadAuthTagLen;\n    let dst = Buffer.from([]);\n    dst = growBufferSize(dst, addPos + srtcpIndexSize);\n    rtcpPacket.slice(0, 8).copy(dst);\n\n    const iv = this.rtcpInitializationVector(ssrc, srtcpIndex);\n    const aad = this.rtcpAdditionalAuthenticatedData(rtcpPacket, srtcpIndex);\n\n    const cipher = createCipheriv(\"aes-128-gcm\", this.srtcpSessionKey, iv);\n    cipher.setAAD(aad);\n    const enc = cipher.update(rtcpPacket.slice(8));\n    cipher.final();\n    enc.copy(dst, 8);\n\n    const authTag = cipher.getAuthTag();\n    authTag.copy(dst, 8 + enc.length);\n    aad.slice(8, 12).copy(dst, addPos);\n\n    return dst;\n  }\n\n  decryptRTCP(encrypted: Buffer): [Buffer, RtcpHeader] {\n    const header = RtcpHeader.deSerialize(encrypted);\n    const aadPos = encrypted.length - srtcpIndexSize;\n\n    const dst = Buffer.alloc(aadPos - this.aeadAuthTagLen);\n    encrypted.slice(0, 8).copy(dst);\n\n    const ssrc = encrypted.readUInt32BE(4);\n\n    let srtcpIndex = encrypted.readUInt32BE(encrypted.length - 4);\n    srtcpIndex &= ~(rtcpEncryptionFlag << 24);\n\n    const iv = this.rtcpInitializationVector(ssrc, srtcpIndex);\n    const aad = this.rtcpAdditionalAuthenticatedData(encrypted, srtcpIndex);\n\n    const cipher = createDecipheriv(\"aes-128-gcm\", this.srtcpSessionKey, iv);\n    cipher.setAAD(aad);\n    const dec = cipher.update(encrypted.slice(8, aadPos));\n\n    dec.copy(dst, 8);\n\n    return [dst, header];\n  }\n\n  // https://tools.ietf.org/html/rfc7714#section-8.1\n  private rtpInitializationVector(header: RtpHeader, rolloverCounter: number) {\n    const iv = this.rtpIvWriter([\n      0,\n      header.ssrc,\n      rolloverCounter,\n      header.sequenceNumber,\n    ]);\n    for (let i = 0; i < iv.length; i++) {\n      iv[i] ^= this.srtpSessionSalt[i];\n    }\n    return iv;\n  }\n\n  // https://tools.ietf.org/html/rfc7714#section-9.1\n  private rtcpInitializationVector(ssrc: number, srtcpIndex: number) {\n    const iv = this.rtcpIvWriter([0, ssrc, 0, srtcpIndex]);\n    for (let i = 0; i < iv.length; i++) {\n      iv[i] ^= this.srtcpSessionSalt[i];\n    }\n    return iv;\n  }\n\n  // https://datatracker.ietf.org/doc/html/rfc7714#section-17\n  private rtcpAdditionalAuthenticatedData(\n    rtcpPacket: Buffer,\n    srtcpIndex: number,\n  ) {\n    const aad = Buffer.concat([\n      rtcpPacket.subarray(0, 8),\n      this.aadWriter([srtcpIndex]),\n    ]);\n    aad[8] |= rtcpEncryptionFlag;\n    return aad;\n  }\n}\n\nconst srtcpIndexSize = 4;\nconst rtcpEncryptionFlag = 0x80;\n"]}
+{"version":3,"file":"gcm.js","sourceRoot":"","sources":["../../../../../../rtp/src/srtp/cipher/gcm.ts"],"names":[],"mappings":";;;AAAA,mCAA0D;AAE1D,wBAAkC;AAClC,gDAA4D;AAC5D,yCAA8C;AAG9C,oCAAmD;AACnD,sCAImB;AAEnB,MAAa,YAAa,SAAQ,gBAAa;IAM7C,YACE,cAAsB,EACtB,eAAuB,EACvB,eAAuB,EACvB,gBAAwB;QAExB,KAAK,CAAC,cAAc,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;QAXnE;;;;mBAAiB,EAAE;WAAC;QACpB;;;;mBAAc,IAAA,wBAAkB,EAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;WAAC;QACrD;;;;mBAAe,IAAA,wBAAkB,EAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC;WAAC;QACtD;;;;mBAAY,IAAA,wBAAkB,EAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;WAAC;IASnD,CAAC;IAED,UAAU,CAAC,MAAiB,EAAE,OAAe,EAAE,eAAuB;QACpE,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAEnD,MAAM,EAAE,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,EAAE,CAAC;QAEf,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEpC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,UAAU,CACR,UAAkB,EAClB,eAAuB,EACvB,MAAM,GAAG,IAAA,2BAAkB,EAAC,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC;QAE5D,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAClE,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC;QAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QAEnD,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,GAAG,GAAG,IAAA,uBAAc,EAAC,GAAG,EAAE,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;QACnE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEvB,MAAM,EAAE,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;QAEjE,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QAElE,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC1E,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC9B,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,+BAA+B,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAElD,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAEpC,OAAO;YACL,GAAG;YACH,IAAA,8BAAqB,EAAC,MAAM,EAAE,GAAG,EAAE,oCAAoC,CAAC;SACzE,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,UAAkB,EAAE,UAAkB;QAChD,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAExC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC;QACvD,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1B,GAAG,GAAG,IAAA,uBAAc,EAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAAC,CAAC;QACnD,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEjC,MAAM,EAAE,GAAG,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,+BAA+B,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAEzE,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAEjB,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEnC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,WAAW,CAAC,SAAiB;QAC3B,MAAM,MAAM,GAAG,IAAA,yBAAgB,EAC7B,SAAS,EACT,IAAI,CAAC,cAAc,EACnB,cAAc,CACf,CAAC;QACF,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,GAAG,cAAc,CAAC;QAC3D,MAAM,aAAa,GAAG,gBAAgB,GAAG,IAAI,CAAC,cAAc,CAAC;QAE7D,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,iBAAiB,GAAG,SAAS,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QACnE,MAAM,WAAW,GAAG,iBAAiB,KAAK,EAAE,KAAK,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,iBAAiB,GAAG,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QAEnE,MAAM,EAAE,GAAG,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,WAAW;YACrB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;gBACZ,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;gBACxB,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC;aACrC,CAAC;YACJ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;gBACZ,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC;gBACpC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC;aACrC,CAAC,CAAC;QACP,MAAM,UAAU,GAAG,WAAW;YAC5B,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC;YACnC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACpB,MAAM,GAAG,GAAG,WAAW;YACrB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;YAC7B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;QACtD,IAAI,WAAW,EAAE,CAAC;YAChB,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,aAAa,EAAE,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC3E,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACxC,+BAA+B,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEnD,IAAI,WAAW,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACnB,CAAC;QAED,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,kDAAkD;IAC1C,uBAAuB,CAAC,MAAiB,EAAE,eAAuB;QACxE,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC;YAC1B,CAAC;YACD,MAAM,CAAC,IAAI;YACX,eAAe;YACf,MAAM,CAAC,cAAc;SACtB,CAAC,CAAC;QACH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,kDAAkD;IAC1C,wBAAwB,CAAC,IAAY,EAAE,UAAkB;QAC/D,MAAM,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;QACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,2DAA2D;IACnD,+BAA+B,CACrC,UAAkB,EAClB,UAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC;YACxB,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAAC;SAC7B,CAAC,CAAC;QACH,GAAG,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC;QAC7B,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAxKD,oCAwKC;AAED,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,SAAS,+BAA+B,CACtC,QAA6C,EAC7C,UAA4B;IAE5B,IAAI,CAAC;QACH,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,+BAAuB,CAC/B,0BAA0B,UAAU,SAAS,CAC9C,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import { createCipheriv, createDecipheriv } from \"crypto\";\n\nimport { CipherAesBase } from \".\";\nimport { createBufferWriter } from \"../../../../common/src\";\nimport { growBufferSize } from \"../../helper\";\nimport type { RtcpHeader } from \"../../rtcp/header\";\nimport type { RtpHeader } from \"../../rtp/rtp\";\nimport { SrtpAuthenticationError } from \"../error\";\nimport {\n  finalizeSrtpRtpHeader,\n  parseSrtcpHeader,\n  parseSrtpRtpHeader,\n} from \"../packet\";\n\nexport class CipherAesGcm extends CipherAesBase {\n  readonly aeadAuthTagLen = 16;\n  readonly rtpIvWriter = createBufferWriter([2, 4, 4, 2], true);\n  readonly rtcpIvWriter = createBufferWriter([2, 4, 2, 4], true);\n  readonly aadWriter = createBufferWriter([4], true);\n\n  constructor(\n    srtpSessionKey: Buffer,\n    srtpSessionSalt: Buffer,\n    srtcpSessionKey: Buffer,\n    srtcpSessionSalt: Buffer,\n  ) {\n    super(srtpSessionKey, srtpSessionSalt, srtcpSessionKey, srtcpSessionSalt);\n  }\n\n  encryptRtp(header: RtpHeader, payload: Buffer, rolloverCounter: number) {\n    const hdr = header.serialize(header.serializeSize);\n\n    const iv = this.rtpInitializationVector(header, rolloverCounter);\n\n    const cipher = createCipheriv(\"aes-128-gcm\", this.srtpSessionKey, iv);\n    cipher.setAAD(hdr);\n    const enc = cipher.update(payload);\n    cipher.final();\n\n    const authTag = cipher.getAuthTag();\n\n    const dst = Buffer.concat([hdr, enc, authTag]);\n    return dst;\n  }\n\n  decryptRtp(\n    cipherText: Buffer,\n    rolloverCounter: number,\n    header = parseSrtpRtpHeader(cipherText, this.aeadAuthTagLen),\n  ): [Buffer, RtpHeader] {\n    const headerBuffer = cipherText.subarray(0, header.payloadOffset);\n    const authTagOffset = cipherText.length - this.aeadAuthTagLen;\n    const authTag = cipherText.subarray(authTagOffset);\n\n    let dst = Buffer.from([]);\n    dst = growBufferSize(dst, cipherText.length - this.aeadAuthTagLen);\n    headerBuffer.copy(dst);\n\n    const iv = this.rtpInitializationVector(header, rolloverCounter);\n\n    const enc = cipherText.slice(header.payloadOffset, authTagOffset);\n\n    const decipher = createDecipheriv(\"aes-128-gcm\", this.srtpSessionKey, iv);\n    decipher.setAAD(headerBuffer);\n    decipher.setAuthTag(authTag);\n    const dec = decipher.update(enc);\n    finalizeAuthenticatedDecryption(decipher, \"SRTP\");\n\n    dec.copy(dst, header.payloadOffset);\n\n    return [\n      dst,\n      finalizeSrtpRtpHeader(header, dst, \"Failed to authenticate SRTP packet\"),\n    ];\n  }\n\n  encryptRTCP(rtcpPacket: Buffer, srtcpIndex: number): Buffer {\n    const ssrc = rtcpPacket.readUInt32BE(4);\n\n    const addPos = rtcpPacket.length + this.aeadAuthTagLen;\n    let dst = Buffer.from([]);\n    dst = growBufferSize(dst, addPos + srtcpIndexSize);\n    rtcpPacket.slice(0, 8).copy(dst);\n\n    const iv = this.rtcpInitializationVector(ssrc, srtcpIndex);\n    const aad = this.rtcpAdditionalAuthenticatedData(rtcpPacket, srtcpIndex);\n\n    const cipher = createCipheriv(\"aes-128-gcm\", this.srtcpSessionKey, iv);\n    cipher.setAAD(aad);\n    const enc = cipher.update(rtcpPacket.slice(8));\n    cipher.final();\n    enc.copy(dst, 8);\n\n    const authTag = cipher.getAuthTag();\n    authTag.copy(dst, 8 + enc.length);\n    aad.slice(8, 12).copy(dst, addPos);\n\n    return dst;\n  }\n\n  decryptRTCP(encrypted: Buffer): [Buffer, RtcpHeader] {\n    const header = parseSrtcpHeader(\n      encrypted,\n      this.aeadAuthTagLen,\n      srtcpIndexSize,\n    );\n    const srtcpIndexOffset = encrypted.length - srtcpIndexSize;\n    const authTagOffset = srtcpIndexOffset - this.aeadAuthTagLen;\n\n    const ssrc = encrypted.readUInt32BE(4);\n    const encodedSrtcpIndex = encrypted.readUInt32BE(srtcpIndexOffset);\n    const isEncrypted = encodedSrtcpIndex >>> 31 === 1;\n    const srtcpIndex = encodedSrtcpIndex & ~(rtcpEncryptionFlag << 24);\n\n    const iv = this.rtcpInitializationVector(ssrc, srtcpIndex);\n    const aad = isEncrypted\n      ? Buffer.concat([\n          encrypted.subarray(0, 8),\n          encrypted.subarray(srtcpIndexOffset),\n        ])\n      : Buffer.concat([\n          encrypted.subarray(0, authTagOffset),\n          encrypted.subarray(srtcpIndexOffset),\n        ]);\n    const cipherText = isEncrypted\n      ? encrypted.slice(8, authTagOffset)\n      : Buffer.alloc(0);\n    const dst = isEncrypted\n      ? Buffer.alloc(authTagOffset)\n      : Buffer.from(encrypted.subarray(0, authTagOffset));\n    if (isEncrypted) {\n      encrypted.slice(0, 8).copy(dst);\n    }\n\n    const decipher = createDecipheriv(\"aes-128-gcm\", this.srtcpSessionKey, iv);\n    decipher.setAAD(aad);\n    decipher.setAuthTag(encrypted.subarray(authTagOffset, srtcpIndexOffset));\n    const dec = decipher.update(cipherText);\n    finalizeAuthenticatedDecryption(decipher, \"SRTCP\");\n\n    if (isEncrypted) {\n      dec.copy(dst, 8);\n    }\n\n    return [dst, header];\n  }\n\n  // https://tools.ietf.org/html/rfc7714#section-8.1\n  private rtpInitializationVector(header: RtpHeader, rolloverCounter: number) {\n    const iv = this.rtpIvWriter([\n      0,\n      header.ssrc,\n      rolloverCounter,\n      header.sequenceNumber,\n    ]);\n    for (let i = 0; i < iv.length; i++) {\n      iv[i] ^= this.srtpSessionSalt[i];\n    }\n    return iv;\n  }\n\n  // https://tools.ietf.org/html/rfc7714#section-9.1\n  private rtcpInitializationVector(ssrc: number, srtcpIndex: number) {\n    const iv = this.rtcpIvWriter([0, ssrc, 0, srtcpIndex]);\n    for (let i = 0; i < iv.length; i++) {\n      iv[i] ^= this.srtcpSessionSalt[i];\n    }\n    return iv;\n  }\n\n  // https://datatracker.ietf.org/doc/html/rfc7714#section-17\n  private rtcpAdditionalAuthenticatedData(\n    rtcpPacket: Buffer,\n    srtcpIndex: number,\n  ) {\n    const aad = Buffer.concat([\n      rtcpPacket.subarray(0, 8),\n      this.aadWriter([srtcpIndex]),\n    ]);\n    aad[8] |= rtcpEncryptionFlag;\n    return aad;\n  }\n}\n\nconst srtcpIndexSize = 4;\nconst rtcpEncryptionFlag = 0x80;\n\nfunction finalizeAuthenticatedDecryption(\n  decipher: ReturnType<typeof createDecipheriv>,\n  packetType: \"SRTP\" | \"SRTCP\",\n) {\n  try {\n    decipher.final();\n  } catch {\n    throw new SrtpAuthenticationError(\n      `Failed to authenticate ${packetType} packet`,\n    );\n  }\n}\n"]}

package/lib/rtp/src/srtp/cipher/index.d.ts

@@ -7,7 +7,7 @@ export declare abstract class CipherAesBase {
     srtcpSessionSalt: Buffer;
     constructor(srtpSessionKey: Buffer, srtpSessionSalt: Buffer, srtcpSessionKey: Buffer, srtcpSessionSalt: Buffer);
     encryptRtp(header: RtpHeader, payload: Buffer, rolloverCounter: number): Buffer;
-    decryptRtp(cipherText: Buffer, rolloverCounter: number): [Buffer, RtpHeader];
+    decryptRtp(cipherText: Buffer, rolloverCounter: number, header?: RtpHeader): [Buffer, RtpHeader];
     encryptRTCP(rawRtcp: Buffer, srtcpIndex: number): Buffer;
     decryptRTCP(encrypted: Buffer): [Buffer, RtcpHeader];
 }

package/lib/rtp/src/srtp/cipher/index.js

@@ -31,7 +31,7 @@ class CipherAesBase {
     encryptRtp(header, payload, rolloverCounter) {
         return Buffer.from([]);
     }
-    decryptRtp(cipherText, rolloverCounter) {
+    decryptRtp(cipherText, rolloverCounter, header) {
         return [];
     }
     encryptRTCP(rawRtcp, srtcpIndex) {

package/lib/rtp/src/srtp/cipher/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../rtp/src/srtp/cipher/index.ts"],"names":[],"mappings":";;;AAGA,MAAsB,aAAa;IACjC,YACS,cAAsB,EACtB,eAAuB,EACvB,eAAuB,EACvB,gBAAwB;QAH/B;;;;mBAAO,cAAc;WAAQ;QAC7B;;;;mBAAO,eAAe;WAAQ;QAC9B;;;;mBAAO,eAAe;WAAQ;QAC9B;;;;mBAAO,gBAAgB;WAAQ;IAC9B,CAAC;IAEJ,UAAU,CACR,MAAiB,EACjB,OAAe,EACf,eAAuB;QAEvB,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,UAAU,CAAC,UAAkB,EAAE,eAAuB;QACpD,OAAO,EAAS,CAAC;IACnB,CAAC;IAED,WAAW,CAAC,OAAe,EAAE,UAAkB;QAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,WAAW,CAAC,SAAiB;QAC3B,OAAO,EAAS,CAAC;IACnB,CAAC;CACF;AA3BD,sCA2BC","sourcesContent":["import type { RtcpHeader } from \"../../rtcp/header\";\nimport type { RtpHeader } from \"../../rtp/rtp\";\n\nexport abstract class CipherAesBase {\n  constructor(\n    public srtpSessionKey: Buffer,\n    public srtpSessionSalt: Buffer,\n    public srtcpSessionKey: Buffer,\n    public srtcpSessionSalt: Buffer,\n  ) {}\n\n  encryptRtp(\n    header: RtpHeader,\n    payload: Buffer,\n    rolloverCounter: number,\n  ): Buffer {\n    return Buffer.from([]);\n  }\n\n  decryptRtp(cipherText: Buffer, rolloverCounter: number): [Buffer, RtpHeader] {\n    return [] as any;\n  }\n\n  encryptRTCP(rawRtcp: Buffer, srtcpIndex: number): Buffer {\n    return Buffer.from([]);\n  }\n\n  decryptRTCP(encrypted: Buffer): [Buffer, RtcpHeader] {\n    return [] as any;\n  }\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../rtp/src/srtp/cipher/index.ts"],"names":[],"mappings":";;;AAGA,MAAsB,aAAa;IACjC,YACS,cAAsB,EACtB,eAAuB,EACvB,eAAuB,EACvB,gBAAwB;QAH/B;;;;mBAAO,cAAc;WAAQ;QAC7B;;;;mBAAO,eAAe;WAAQ;QAC9B;;;;mBAAO,eAAe;WAAQ;QAC9B;;;;mBAAO,gBAAgB;WAAQ;IAC9B,CAAC;IAEJ,UAAU,CACR,MAAiB,EACjB,OAAe,EACf,eAAuB;QAEvB,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,UAAU,CACR,UAAkB,EAClB,eAAuB,EACvB,MAAkB;QAElB,OAAO,EAAS,CAAC;IACnB,CAAC;IAED,WAAW,CAAC,OAAe,EAAE,UAAkB;QAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,WAAW,CAAC,SAAiB;QAC3B,OAAO,EAAS,CAAC;IACnB,CAAC;CACF;AA/BD,sCA+BC","sourcesContent":["import type { RtcpHeader } from \"../../rtcp/header\";\nimport type { RtpHeader } from \"../../rtp/rtp\";\n\nexport abstract class CipherAesBase {\n  constructor(\n    public srtpSessionKey: Buffer,\n    public srtpSessionSalt: Buffer,\n    public srtcpSessionKey: Buffer,\n    public srtcpSessionSalt: Buffer,\n  ) {}\n\n  encryptRtp(\n    header: RtpHeader,\n    payload: Buffer,\n    rolloverCounter: number,\n  ): Buffer {\n    return Buffer.from([]);\n  }\n\n  decryptRtp(\n    cipherText: Buffer,\n    rolloverCounter: number,\n    header?: RtpHeader,\n  ): [Buffer, RtpHeader] {\n    return [] as any;\n  }\n\n  encryptRTCP(rawRtcp: Buffer, srtcpIndex: number): Buffer {\n    return Buffer.from([]);\n  }\n\n  decryptRTCP(encrypted: Buffer): [Buffer, RtcpHeader] {\n    return [] as any;\n  }\n}\n"]}

package/lib/rtp/src/srtp/context/srtp.d.ts

@@ -1,8 +1,9 @@
-import { RtpHeader } from "../../rtp/rtp";
+import type { RtpHeader } from "../../rtp/rtp";
 import type { SrtpProfile } from "../const";
 import { Context } from "./context";
 export declare class SrtpContext extends Context {
     constructor(masterKey: Buffer, masterSalt: Buffer, profile: SrtpProfile);
     encryptRtp(payload: Buffer, header: RtpHeader): Buffer<ArrayBufferLike>;
     decryptRtp(cipherText: Buffer): [Buffer, RtpHeader];
+    private get rtpAuthTagLength();
 }

package/lib/rtp/src/srtp/context/srtp.js

@@ -1,7 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SrtpContext = void 0;
-const rtp_1 = require("../../rtp/rtp");
+const const_1 = require("../const");
+const packet_1 = require("../packet");
 const context_1 = require("./context");
 class SrtpContext extends context_1.Context {
     constructor(masterKey, masterSalt, profile) {
@@ -14,12 +15,28 @@ class SrtpContext extends context_1.Context {
         return enc;
     }
     decryptRtp(cipherText) {
-        const header = rtp_1.RtpHeader.deSerialize(cipherText);
-        const s = this.getSrtpSsrcState(header.ssrc);
-        this.updateRolloverCount(header.sequenceNumber, s);
-        const dec = this.cipher.decryptRtp(cipherText, s.rolloverCounter);
+        const header = (0, packet_1.parseSrtpRtpHeader)(cipherText, this.rtpAuthTagLength);
+        const existingState = this.srtpSSRCStates[header.ssrc];
+        const nextState = existingState
+            ? { ...existingState }
+            : {
+                ssrc: header.ssrc,
+                rolloverCounter: 0,
+                lastSequenceNumber: 0,
+            };
+        this.updateRolloverCount(header.sequenceNumber, nextState);
+        const dec = this.cipher.decryptRtp(cipherText, nextState.rolloverCounter, header);
+        if (existingState) {
+            Object.assign(existingState, nextState);
+        }
+        else {
+            this.srtpSSRCStates[header.ssrc] = nextState;
+        }
         return dec;
     }
+    get rtpAuthTagLength() {
+        return this.profile === const_1.ProtectionProfileAeadAes128Gcm ? 16 : 10;
+    }
 }
 exports.SrtpContext = SrtpContext;
 //# sourceMappingURL=srtp.js.map

package/lib/rtp/src/srtp/context/srtp.js.map

@@ -1 +1 @@
-{"version":3,"file":"srtp.js","sourceRoot":"","sources":["../../../../../../rtp/src/srtp/context/srtp.ts"],"names":[],"mappings":";;;AAAA,uCAA0C;AAE1C,uCAAoC;AAEpC,MAAa,WAAY,SAAQ,iBAAO;IACtC,YAAY,SAAiB,EAAE,UAAkB,EAAE,OAAoB;QACrE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,UAAU,CAAC,OAAe,EAAE,MAAiB;QAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QAEnD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;QACvE,OAAO,GAAG,CAAC;IACb,CAAC;IAED,UAAU,CAAC,UAAkB;QAC3B,MAAM,MAAM,GAAG,eAAS,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAEjD,MAAM,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QAEnD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;QAClE,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAtBD,kCAsBC","sourcesContent":["import { RtpHeader } from \"../../rtp/rtp\";\nimport type { SrtpProfile } from \"../const\";\nimport { Context } from \"./context\";\n\nexport class SrtpContext extends Context {\n  constructor(masterKey: Buffer, masterSalt: Buffer, profile: SrtpProfile) {\n    super(masterKey, masterSalt, profile);\n  }\n\n  encryptRtp(payload: Buffer, header: RtpHeader) {\n    const s = this.getSrtpSsrcState(header.ssrc);\n    this.updateRolloverCount(header.sequenceNumber, s);\n\n    const enc = this.cipher.encryptRtp(header, payload, s.rolloverCounter);\n    return enc;\n  }\n\n  decryptRtp(cipherText: Buffer): [Buffer, RtpHeader] {\n    const header = RtpHeader.deSerialize(cipherText);\n\n    const s = this.getSrtpSsrcState(header.ssrc);\n    this.updateRolloverCount(header.sequenceNumber, s);\n\n    const dec = this.cipher.decryptRtp(cipherText, s.rolloverCounter);\n    return dec;\n  }\n}\n"]}
+{"version":3,"file":"srtp.js","sourceRoot":"","sources":["../../../../../../rtp/src/srtp/context/srtp.ts"],"names":[],"mappings":";;;AACA,oCAA0D;AAE1D,sCAA+C;AAC/C,uCAAoC;AAEpC,MAAa,WAAY,SAAQ,iBAAO;IACtC,YAAY,SAAiB,EAAE,UAAkB,EAAE,OAAoB;QACrE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,UAAU,CAAC,OAAe,EAAE,MAAiB;QAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QAEnD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;QACvE,OAAO,GAAG,CAAC;IACb,CAAC;IAED,UAAU,CAAC,UAAkB;QAC3B,MAAM,MAAM,GAAG,IAAA,2BAAkB,EAAC,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAErE,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,aAAa;YAC7B,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE;YACtB,CAAC,CAAC;gBACE,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,eAAe,EAAE,CAAC;gBAClB,kBAAkB,EAAE,CAAC;aACtB,CAAC;QACN,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QAE3D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAChC,UAAU,EACV,SAAS,CAAC,eAAe,EACzB,MAAM,CACP,CAAC;QACF,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;QAC/C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAY,gBAAgB;QAC1B,OAAO,IAAI,CAAC,OAAO,KAAK,sCAA8B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,CAAC;CACF;AA1CD,kCA0CC","sourcesContent":["import type { RtpHeader } from \"../../rtp/rtp\";\nimport { ProtectionProfileAeadAes128Gcm } from \"../const\";\nimport type { SrtpProfile } from \"../const\";\nimport { parseSrtpRtpHeader } from \"../packet\";\nimport { Context } from \"./context\";\n\nexport class SrtpContext extends Context {\n  constructor(masterKey: Buffer, masterSalt: Buffer, profile: SrtpProfile) {\n    super(masterKey, masterSalt, profile);\n  }\n\n  encryptRtp(payload: Buffer, header: RtpHeader) {\n    const s = this.getSrtpSsrcState(header.ssrc);\n    this.updateRolloverCount(header.sequenceNumber, s);\n\n    const enc = this.cipher.encryptRtp(header, payload, s.rolloverCounter);\n    return enc;\n  }\n\n  decryptRtp(cipherText: Buffer): [Buffer, RtpHeader] {\n    const header = parseSrtpRtpHeader(cipherText, this.rtpAuthTagLength);\n\n    const existingState = this.srtpSSRCStates[header.ssrc];\n    const nextState = existingState\n      ? { ...existingState }\n      : {\n          ssrc: header.ssrc,\n          rolloverCounter: 0,\n          lastSequenceNumber: 0,\n        };\n    this.updateRolloverCount(header.sequenceNumber, nextState);\n\n    const dec = this.cipher.decryptRtp(\n      cipherText,\n      nextState.rolloverCounter,\n      header,\n    );\n    if (existingState) {\n      Object.assign(existingState, nextState);\n    } else {\n      this.srtpSSRCStates[header.ssrc] = nextState;\n    }\n    return dec;\n  }\n\n  private get rtpAuthTagLength() {\n    return this.profile === ProtectionProfileAeadAes128Gcm ? 16 : 10;\n  }\n}\n"]}

package/lib/rtp/src/srtp/error.d.ts

@@ -0,0 +1,3 @@
+export declare class SrtpAuthenticationError extends Error {
+    constructor(message: string);
+}

package/lib/rtp/src/srtp/error.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SrtpAuthenticationError = void 0;
+class SrtpAuthenticationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "SrtpAuthenticationError";
+    }
+}
+exports.SrtpAuthenticationError = SrtpAuthenticationError;
+//# sourceMappingURL=error.js.map

package/lib/rtp/src/srtp/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../../../../rtp/src/srtp/error.ts"],"names":[],"mappings":";;;AAAA,MAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC","sourcesContent":["export class SrtpAuthenticationError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"SrtpAuthenticationError\";\n  }\n}\n"]}

package/lib/rtp/src/srtp/packet.d.ts

@@ -0,0 +1,5 @@
+import { RtcpHeader } from "../rtcp/header";
+import { RtpHeader } from "../rtp/rtp";
+export declare function parseSrtpRtpHeader(packet: Buffer, authTagLength: number, message?: string): RtpHeader;
+export declare function parseSrtcpHeader(packet: Buffer, authTagLength: number, srtcpIndexSize: number, message?: string): RtcpHeader;
+export declare function finalizeSrtpRtpHeader(header: RtpHeader, packet: Buffer, message?: string): RtpHeader;

package/lib/rtp/src/srtp/packet.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseSrtpRtpHeader = parseSrtpRtpHeader;
+exports.parseSrtcpHeader = parseSrtcpHeader;
+exports.finalizeSrtpRtpHeader = finalizeSrtpRtpHeader;
+const header_1 = require("../rtcp/header");
+const rtp_1 = require("../rtp/rtp");
+const error_1 = require("./error");
+const minRtpHeaderSize = 12;
+const minRtcpPacketSize = 8;
+function parseSrtpRtpHeader(packet, authTagLength, message = "Failed to authenticate SRTP packet") {
+    const authTagOffset = packet.length - authTagLength;
+    assertAuthenticatedPacketLength(packet.length >= minRtpHeaderSize + authTagLength, message);
+    const header = wrapAuthenticationError(() => rtp_1.RtpHeader.deSerialize(packet.subarray(0, authTagOffset)), message);
+    header.paddingSize = 0;
+    assertAuthenticatedPacketLength(header.payloadOffset >= minRtpHeaderSize &&
+        header.payloadOffset <= authTagOffset, message);
+    return header;
+}
+function parseSrtcpHeader(packet, authTagLength, srtcpIndexSize, message = "Failed to authenticate SRTCP packet") {
+    assertAuthenticatedPacketLength(packet.length >= minRtcpPacketSize + authTagLength + srtcpIndexSize, message);
+    return wrapAuthenticationError(() => header_1.RtcpHeader.deSerialize(packet.subarray(0, header_1.RTCP_HEADER_SIZE)), message);
+}
+function assertAuthenticatedPacketLength(condition, message) {
+    if (!condition) {
+        throw new error_1.SrtpAuthenticationError(message);
+    }
+}
+function wrapAuthenticationError(parse, message) {
+    try {
+        return parse();
+    }
+    catch {
+        throw new error_1.SrtpAuthenticationError(message);
+    }
+}
+function finalizeSrtpRtpHeader(header, packet, message = "Failed to authenticate SRTP packet") {
+    if (!header.padding) {
+        header.paddingSize = 0;
+        return header;
+    }
+    assertAuthenticatedPacketLength(packet.length > header.payloadOffset, message);
+    const paddingSize = packet[packet.length - 1];
+    assertAuthenticatedPacketLength(paddingSize > 0 && paddingSize <= packet.length - header.payloadOffset, message);
+    header.paddingSize = paddingSize;
+    return header;
+}
+//# sourceMappingURL=packet.js.map

package/lib/rtp/src/srtp/packet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"packet.js","sourceRoot":"","sources":["../../../../../rtp/src/srtp/packet.ts"],"names":[],"mappings":";;AAOA,gDAwBC;AAED,4CAeC;AAgBD,sDAuBC;AAvFD,2CAA8D;AAC9D,oCAAuC;AACvC,mCAAkD;AAElD,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B,SAAgB,kBAAkB,CAChC,MAAc,EACd,aAAqB,EACrB,OAAO,GAAG,oCAAoC;IAE9C,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,GAAG,aAAa,CAAC;IACpD,+BAA+B,CAC7B,MAAM,CAAC,MAAM,IAAI,gBAAgB,GAAG,aAAa,EACjD,OAAO,CACR,CAAC;IAEF,MAAM,MAAM,GAAG,uBAAuB,CACpC,GAAG,EAAE,CAAC,eAAS,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,EAC9D,OAAO,CACR,CAAC;IACF,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC;IAEvB,+BAA+B,CAC7B,MAAM,CAAC,aAAa,IAAI,gBAAgB;QACtC,MAAM,CAAC,aAAa,IAAI,aAAa,EACvC,OAAO,CACR,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,gBAAgB,CAC9B,MAAc,EACd,aAAqB,EACrB,cAAsB,EACtB,OAAO,GAAG,qCAAqC;IAE/C,+BAA+B,CAC7B,MAAM,CAAC,MAAM,IAAI,iBAAiB,GAAG,aAAa,GAAG,cAAc,EACnE,OAAO,CACR,CAAC;IAEF,OAAO,uBAAuB,CAC5B,GAAG,EAAE,CAAC,mBAAU,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,yBAAgB,CAAC,CAAC,EAClE,OAAO,CACR,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CAAC,SAAkB,EAAE,OAAe;IAC1E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,+BAAuB,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAI,KAAc,EAAE,OAAe;IACjE,IAAI,CAAC;QACH,OAAO,KAAK,EAAE,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,+BAAuB,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAgB,qBAAqB,CACnC,MAAiB,EACjB,MAAc,EACd,OAAO,GAAG,oCAAoC;IAE9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC;QACvB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,+BAA+B,CAC7B,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,EACpC,OAAO,CACR,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9C,+BAA+B,CAC7B,WAAW,GAAG,CAAC,IAAI,WAAW,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,EACtE,OAAO,CACR,CAAC;IAEF,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { RTCP_HEADER_SIZE, RtcpHeader } from \"../rtcp/header\";\nimport { RtpHeader } from \"../rtp/rtp\";\nimport { SrtpAuthenticationError } from \"./error\";\n\nconst minRtpHeaderSize = 12;\nconst minRtcpPacketSize = 8;\n\nexport function parseSrtpRtpHeader(\n  packet: Buffer,\n  authTagLength: number,\n  message = \"Failed to authenticate SRTP packet\",\n) {\n  const authTagOffset = packet.length - authTagLength;\n  assertAuthenticatedPacketLength(\n    packet.length >= minRtpHeaderSize + authTagLength,\n    message,\n  );\n\n  const header = wrapAuthenticationError(\n    () => RtpHeader.deSerialize(packet.subarray(0, authTagOffset)),\n    message,\n  );\n  header.paddingSize = 0;\n\n  assertAuthenticatedPacketLength(\n    header.payloadOffset >= minRtpHeaderSize &&\n      header.payloadOffset <= authTagOffset,\n    message,\n  );\n\n  return header;\n}\n\nexport function parseSrtcpHeader(\n  packet: Buffer,\n  authTagLength: number,\n  srtcpIndexSize: number,\n  message = \"Failed to authenticate SRTCP packet\",\n) {\n  assertAuthenticatedPacketLength(\n    packet.length >= minRtcpPacketSize + authTagLength + srtcpIndexSize,\n    message,\n  );\n\n  return wrapAuthenticationError(\n    () => RtcpHeader.deSerialize(packet.subarray(0, RTCP_HEADER_SIZE)),\n    message,\n  );\n}\n\nfunction assertAuthenticatedPacketLength(condition: boolean, message: string) {\n  if (!condition) {\n    throw new SrtpAuthenticationError(message);\n  }\n}\n\nfunction wrapAuthenticationError<T>(parse: () => T, message: string) {\n  try {\n    return parse();\n  } catch {\n    throw new SrtpAuthenticationError(message);\n  }\n}\n\nexport function finalizeSrtpRtpHeader(\n  header: RtpHeader,\n  packet: Buffer,\n  message = \"Failed to authenticate SRTP packet\",\n) {\n  if (!header.padding) {\n    header.paddingSize = 0;\n    return header;\n  }\n\n  assertAuthenticatedPacketLength(\n    packet.length > header.payloadOffset,\n    message,\n  );\n\n  const paddingSize = packet[packet.length - 1];\n  assertAuthenticatedPacketLength(\n    paddingSize > 0 && paddingSize <= packet.length - header.payloadOffset,\n    message,\n  );\n\n  header.paddingSize = paddingSize;\n  return header;\n}\n"]}

package/lib/webrtc/src/dataChannel.d.ts

@@ -8,10 +8,12 @@ export interface DataChannelStats {
     messagesReceived: number;
     bytesReceived: number;
 }
+export declare function getDataChannelMessageSize(data: Buffer | string): number;
 export declare class RTCDataChannel extends EventTarget implements DataChannelStats {
     readonly sctp: RTCSctpTransport;
     private readonly parameters;
     readonly sendOpen: boolean;
+    readonly statsId: string;
     readonly stateChange: Event<[DCState]>;
     readonly stateChanged: Event<[DCState]>;
     readonly onMessage: Event<[string | Buffer<ArrayBufferLike>]>;
@@ -33,8 +35,8 @@ export declare class RTCDataChannel extends EventTarget implements DataChannelSt
     bytesReceived: number;
     constructor(sctp: RTCSctpTransport, parameters: RTCDataChannelParameters, sendOpen?: boolean);
     get ordered(): boolean;
-    get maxRetransmits(): number | undefined;
-    get maxPacketLifeTime(): number | undefined;
+    get maxRetransmits(): number | null;
+    get maxPacketLifeTime(): number | null;
     get label(): string;
     get protocol(): string;
     get negotiated(): boolean;

package/lib/webrtc/src/dataChannel.js

@@ -1,9 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.RTCDataChannelParameters = exports.RTCDataChannel = void 0;
+exports.getDataChannelMessageSize = getDataChannelMessageSize;
+const crypto_1 = require("crypto");
 const common_1 = require("./imports/common");
 const helper_1 = require("./helper");
 const log = (0, common_1.debug)("werift:packages/webrtc/src/dataChannel.ts");
+function getDataChannelMessageSize(data) {
+    return Buffer.isBuffer(data) ? data.length : Buffer.byteLength(data);
+}
 class RTCDataChannel extends helper_1.EventTarget {
     constructor(sctp, parameters, sendOpen = true) {
         super();
@@ -25,6 +30,12 @@ class RTCDataChannel extends helper_1.EventTarget {
             writable: true,
             value: sendOpen
         });
+        Object.defineProperty(this, "statsId", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: (0, crypto_1.randomUUID)().toString()
+        });
         Object.defineProperty(this, "stateChange", {
             enumerable: true,
             configurable: true,
@@ -160,10 +171,10 @@ class RTCDataChannel extends helper_1.EventTarget {
         return this.parameters.ordered;
     }
     get maxRetransmits() {
-        return this.parameters.maxRetransmits;
+        return this.parameters.maxRetransmits ?? null;
     }
     get maxPacketLifeTime() {
-        return this.parameters.maxPacketLifeTime;
+        return this.parameters.maxPacketLifeTime ?? null;
     }
     get label() {
         return this.parameters.label;
@@ -220,10 +231,9 @@ class RTCDataChannel extends helper_1.EventTarget {
         }
     }
     send(data) {
-        const size = Buffer.isBuffer(data) ? data.length : Buffer.byteLength(data);
+        const size = this.sctp.datachannelSend(this, data);
         this.messagesSent++;
         this.bytesSent += size;
-        this.sctp.datachannelSend(this, data);
     }
     close() {
         this.sctp.dataChannelClose(this);