UNPKG

@nfen/webcrypto-ts

Version:
171 lines 5.52 kB
/** * Code related to AES_CTR mode * @module */ import * as proxy from "../proxy.js"; import { getValues } from "../random.js"; import { AesShared, Alg, } from "./shared.js"; /** @hidden */ export const handler = { get(target, prop) { switch (prop) { case "self": return target; case "encrypt": return (algorithm, data) => encrypt(algorithm, target, data); case "decrypt": return (algorithm, data) => decrypt(algorithm, target, data); case "wrapKey": return (format, key, wrapAlgorithm) => wrapKey(format, key, target, wrapAlgorithm); case "unwrapKey": return (format, wrappedKey, wrappedKeyAlgorithm, unwrappingKeyAlgorithm, extractable, keyUsages) => unwrapKey(format, wrappedKey, wrappedKeyAlgorithm, target, unwrappingKeyAlgorithm, extractable, keyUsages); case "exportKey": return (format) => exportKey(format, target); } return Reflect.get(target, prop); }, }; /** * Generates a counter, with the given length, starting from the count of 1. The nonce is randomized. * @see https://developer.mozilla.org/en-US/docs/Web/API/AesCtrParams * @example * ```ts * const counter = await AES_CTR.generateCounter(); * ``` */ export async function generateCounter(counterLength = 8) { const nonce = await getValues(16 - counterLength); const counter = new Uint8Array(16); counter.set([1], 15); counter.set(nonce); return counter; } /** * Generate a new AES_CTR key * @example * ```ts * const key = await AES_CTR.generateKey(); * ``` */ export async function generateKey(algorithm = { length: 256, }, extractable = true, keyUsages) { const key = await AesShared.generateKey({ ...algorithm, name: Alg.Mode.AES_CTR, }, extractable, keyUsages); return proxy.proxifyKey(handler)(key); } /** * Import an AES_CTR key from the specified format * @example * ```ts * const key = await AES_CTR.importKey("jwk", jwk, { length: 256 }); * ``` */ export async function importKey(format, key, algorithm, extractable, keyUsages) { const importedKey = (await AesShared.importKey(format, key, { ...algorithm, name: Alg.Mode.AES_CTR, }, extractable, keyUsages)); return proxy.proxifyKey(handler)(importedKey); } /** * Export an AES_CTR key into the specified format * @example * ```ts * const key = await AES_CTR.generateKey(); * const jwk = await AES_CTR.exportKey("jwk", key.self); * ``` * @example * ```ts * const key = await AES_CTR.generateKey(); * const jwk = await key.exportKey("jwk"); * ``` */ export const exportKey = async (format, key) => AesShared.exportKey(format, key); /** * Encrypt with an AES_CTR key * @example * ```ts * const key = await AES_CTR.generateKey(); * const message = new TextEncoder().encode("a message"); * const length = 8; * const counter = await AES_CTR.generateCounter(length); * const data = await AES_CTR.encrypt({length, counter}, key.self, message); * ``` * @example * ```ts * const key = await AES_CTR.generateKey(); * const message = new TextEncoder().encode("a message"); * const length = 8; * const counter = await AES_CTR.generateCounter(length); * const data = await key.encrypt({length, counter}, message); * ``` */ export async function encrypt(algorithm, key, data) { return await AesShared.encrypt({ ...algorithm, name: Alg.Mode.AES_CTR, }, key, data); } /** * Decrypt with an AES_CTR key * @example * ```ts * const data = await AES_CTR.decrypt({length, counter}, key.self, data); * ``` * @example * ```ts * const data = await key.decrypt({length, counter}, data); * ``` */ export async function decrypt(algorithm, key, data) { return await AesShared.decrypt({ ...algorithm, name: Alg.Mode.AES_CTR, }, key, data); } /** * Wrap another key with an AES_CTR key * @example * ```ts * const kek = await AES_CTR.generateKey({length: 256}, true, ['wrapKey', 'unwrapKey']); * const dek = await AES_CTR.generateKey(); * const length = 8; * const counter = await AES_CTR.generateCounter(length); * const wrappedKey = await AES_CTR.wrapKey("raw", dek.self, kek.self, {length, counter}); * ``` * @example * ```ts * const kek = await AES_CTR.generateKey({length: 256}, true, ['wrapKey', 'unwrapKey']); * const dek = await AES_CTR.generateKey(); * const length = 8; * const counter = await AES_CTR.generateCounter(length); * const wrappedKey = await kek.wrapKey("raw", dek.self, {length, counter}); * ``` */ export async function wrapKey(format, key, wrappingkey, wrapAlgorithm) { return await AesShared.wrapKey(format, key, wrappingkey, { ...wrapAlgorithm, name: Alg.Mode.AES_CTR, }); } /** * Unwrap a wrapped key using the key encryption key * @example * ```ts * const dek = await AES_CTR.unwrapKey("raw", wrappedKey, {name: "AES_CTR"}, kek.self, {length, counter}); * ``` * @example * ```ts * const dek = await kek.unwrapKey("raw", wrappedKey, {name: "AES_CTR"}, {length, counter}); * ``` */ export async function unwrapKey(format, wrappedKey, wrappedKeyAlgorithm, unwrappingKey, unwrappingKeyAlgorithm, extractable = true, keyUsages) { return await AesShared.unwrapKey(format, wrappedKey, wrappedKeyAlgorithm, unwrappingKey, { ...unwrappingKeyAlgorithm, name: Alg.Mode.AES_CTR, }, extractable, keyUsages); } //# sourceMappingURL=aes_ctr.js.map