@telios/nebula/lib/crypto.js

Real-time distributed file and data storage.

const sodium = require('sodium-native');
const stream = require('stream');
const pump = require('pump');
const blake = require('blakejs');
const bip39 = require('bip39');

exports.signSeedKeypair = (mnemonic) => {
  let pk = Buffer.alloc(sodium.crypto_sign_PUBLICKEYBYTES);
  let sk = Buffer.alloc(sodium.crypto_sign_SECRETKEYBYTES);
  let seed = Buffer.alloc(sodium.crypto_sign_SEEDBYTES);

  if (!mnemonic) {
    sodium.randombytes_buf(seed);
    mnemonic = bip39.entropyToMnemonic(seed.toString('hex'));
  } else {
    buf = Buffer.from(bip39.mnemonicToEntropy(mnemonic), 'hex');
    seed.fill(buf);
  }

  sodium.crypto_sign_seed_keypair(pk, sk, seed);

  return {
    publicKey: pk.toString('hex'),
    privateKey: sk.toString('hex'),
    seedKey: seed.toString('hex'),
    mnemonic
  }
}

exports.boxSeedKeypair = (mnemonic) => {
  let pk = Buffer.alloc(sodium.crypto_box_PUBLICKEYBYTES);
  let sk = Buffer.alloc(sodium.crypto_box_SECRETKEYBYTES);
  let seed = Buffer.alloc(sodium.crypto_box_SEEDBYTES);

  if (!mnemonic) {
    sodium.randombytes_buf(seed);
    mnemonic = bip39.entropyToMnemonic(seed.toString('hex'));
  } else {
    buf = Buffer.from(bip39.mnemonicToEntropy(mnemonic), 'hex');
    seed.fill(buf);
  }

  sodium.crypto_box_seed_keypair(pk, sk, seed);

  return {
    publicKey: pk.toString('hex'),
    privateKey: sk.toString('hex'),
    seedKey: seed.toString('hex'),
    mnemonic
  }
}

exports.boxKeypairFromStr = (str) => {
  let pk = Buffer.alloc(sodium.crypto_box_PUBLICKEYBYTES);
  let sk = Buffer.alloc(sodium.crypto_box_SECRETKEYBYTES);
  let seed = Buffer.alloc(sodium.crypto_box_SEEDBYTES);

  const buf = Buffer.from(blake.blake2sHex(str));

  seed.fill(buf);

  sodium.crypto_box_seed_keypair(pk, sk, seed);

  return {
    publicKey: pk.toString('hex'),
    privateKey: sk.toString('hex')
  }
}

exports.verifySig = (sig, publicKey, msg) => {
  let m = Buffer.from(JSON.stringify(msg));
  let signature = Buffer.alloc(sodium.crypto_sign_BYTES);
  let pk = Buffer.alloc(sodium.crypto_sign_PUBLICKEYBYTES);

  pk.fill(Buffer.from(publicKey, 'hex'));
  signature.fill(Buffer.from(sig, 'hex'));

  return sodium.crypto_sign_verify_detached(signature, m, pk);
};

exports.generateSigKeypair = () => {
  let pk = Buffer.alloc(sodium.crypto_sign_PUBLICKEYBYTES);
  let sk = Buffer.alloc(sodium.crypto_sign_SECRETKEYBYTES);

  sodium.crypto_sign_keypair(pk, sk);

  return {
    publicKey: pk.toString('hex'),
    privateKey: sk.toString('hex')
  }
}

exports.generateBoxKeypair = () => {
  let pk = Buffer.alloc(sodium.crypto_box_PUBLICKEYBYTES);
  let sk = Buffer.alloc(sodium.crypto_box_SECRETKEYBYTES);

  sodium.crypto_box_keypair(pk, sk);

  return {
    publicKey: pk.toString('hex'),
    privateKey: sk.toString('hex')
  }
}

exports.encryptPubSecretBoxMessage = (msg, sbpkey, privKey) => {
  const m = Buffer.from(msg, 'utf-8');
  const c = Buffer.alloc(m.length + sodium.crypto_box_MACBYTES);
  const n = Buffer.alloc(sodium.crypto_box_NONCEBYTES);
  const pk = Buffer.alloc(sodium.crypto_box_PUBLICKEYBYTES);
  const sk = Buffer.alloc(sodium.crypto_box_SECRETKEYBYTES);

  pk.fill(Buffer.from(sbpkey, 'hex'));
  sk.fill(Buffer.from(privKey, 'hex'));

  sodium.crypto_box_easy(c, m, n, pk, sk);

  return c.toString('hex');
}

exports.decryptPubSecretBoxMessage = (msg, sbpkey, privKey) => {
  const c = Buffer.from(msg, 'hex');
  const m = Buffer.alloc(c.length - sodium.crypto_box_MACBYTES);
  const n = Buffer.alloc(sodium.crypto_box_NONCEBYTES);
  const pk = Buffer.alloc(sodium.crypto_box_PUBLICKEYBYTES);
  const sk = Buffer.alloc(sodium.crypto_box_SECRETKEYBYTES);

  pk.fill(Buffer.from(sbpkey, 'hex'));
  sk.fill(Buffer.from(privKey, 'hex'));

  const bool = sodium.crypto_box_open_easy(m, c, n, pk, sk);

  if (!bool) throw new Error('Unable to decrypt message.');

  return m.toString('utf-8');
}

exports.signDetached = (msg, privKey) => {
  let sig = Buffer.alloc(sodium.crypto_sign_BYTES);
  let m = Buffer.from(JSON.stringify(msg));
  let sk = Buffer.alloc(sodium.crypto_sign_SECRETKEYBYTES);

  sk.fill(Buffer.from(privKey, 'hex'));

  sodium.crypto_sign_detached(sig, m, sk);

  const signature = sig.toString('hex');

  return signature;
};

exports.encryptSealedBox = (msg, pubKey) => {
  let m = Buffer.from(msg, 'utf-8');
  let c = Buffer.alloc(m.length + sodium.crypto_box_SEALBYTES);
  let pk = Buffer.from(pubKey, 'hex');

  sodium.crypto_box_seal(c, m, pk);

  return c;
}

exports.decryptSealedBox = (msg, privKey, pubKey) => {
  let c = Buffer.from(msg, 'hex');
  let m = Buffer.alloc(c.length - sodium.crypto_box_SEALBYTES);
  let sk = Buffer.from(privKey, 'hex');
  let pk = Buffer.from(pubKey, 'hex');

  var bool = sodium.crypto_box_seal_open(m, c, pk, sk);

  if (!bool) throw new Error('Unable to decrypt message.');

  return m.toString('utf-8');
}

exports.hash = (str, k) => {
  let out = Buffer.alloc(sodium.crypto_generichash_BYTES);
  let txt = Buffer.from(str);

  if(k) {
    k = Buffer.from(k, 'hex');
    sodium.crypto_generichash(out, txt, k);
  } else {
    sodium.crypto_generichash(out, txt);
  }

  return out.toString('hex');
};


exports.hashPassword = str => {
  let out = Buffer.alloc(sodium.crypto_pwhash_STRBYTES);
  let passwd = Buffer.from(str, 'utf-8');
  let opslimit = sodium.crypto_pwhash_OPSLIMIT_MODERATE;
  let memlimit = sodium.crypto_pwhash_MEMLIMIT_MODERATE;

  sodium.crypto_pwhash_str(out, passwd, opslimit, memlimit);

  return out;
};

exports.generateMasterKey = () => {
  let key = Buffer.alloc(sodium.crypto_kdf_KEYBYTES);
  sodium.crypto_kdf_keygen(key);
  return key;
};

exports.deriveKeyFromMaster = (masterKey, skId) => {
  let subkey = Buffer.alloc(sodium.crypto_kdf_BYTES_MAX);
  let subkeyId = skId;
  let ctx = Buffer.alloc(sodium.crypto_kdf_CONTEXTBYTES);
  let key = Buffer.from(masterKey, 'hex');

  sodium.crypto_kdf_derive_from_key(subkey, subkeyId, ctx, key);

  return subkey;
};

exports.randomBytes = data => {
  let buf = Buffer.alloc(sodium.randombytes_SEEDBYTES);
  let seed = Buffer.from(data, 'utf-8');

  sodium.randombytes_buf_deterministic(buf, seed);

  return buf.toString('hex');
};

exports.generateAEDKey = () => {
  let k = Buffer.alloc(sodium.crypto_aead_xchacha20poly1305_ietf_KEYBYTES);
  sodium.crypto_aead_xchacha20poly1305_ietf_keygen(k);
  return k.toString('hex');
}

exports.encryptAED = (msg, key) => {
  let m = Buffer.from(msg, 'utf-8');
  let c = Buffer.alloc(m.length + sodium.crypto_aead_xchacha20poly1305_ietf_ABYTES);
  let nonce = Buffer.alloc(sodium.crypto_aead_xchacha20poly1305_ietf_NPUBBYTES);
  let k = Buffer.from(key, 'hex');

  sodium.randombytes_buf(nonce);

  sodium.crypto_aead_xchacha20poly1305_ietf_encrypt(c, m, null, null, nonce, k);

  let encrypted = Buffer.from([]);
  encrypted = Buffer.concat([nonce, c], sodium.crypto_aead_xchacha20poly1305_ietf_NPUBBYTES + c.length);

  return encrypted;
}

exports.decryptAED = (c, key) => {
  // slice nonce out of the encrypted message
  nonce = c.slice(0, sodium.crypto_aead_xchacha20poly1305_ietf_NPUBBYTES);
  let cipher = c.slice(sodium.crypto_aead_xchacha20poly1305_ietf_NPUBBYTES, c.length);

  let m = Buffer.alloc(cipher.length - sodium.crypto_aead_xchacha20poly1305_ietf_ABYTES);
  let k = Buffer.from(key, 'hex');

  sodium.crypto_aead_xchacha20poly1305_ietf_decrypt(m, null, cipher, null, nonce, k);

  return m.toString();
}

exports.generateStreamKey = () => {
  let k = Buffer.alloc(sodium.crypto_secretstream_xchacha20poly1305_KEYBYTES);
  sodium.crypto_secretstream_xchacha20poly1305_keygen(k);
  return k;
}

exports.initStreamPushState = (k) => {
  let state = Buffer.alloc(sodium.crypto_secretstream_xchacha20poly1305_STATEBYTES);
  let header = Buffer.alloc(sodium.crypto_secretstream_xchacha20poly1305_HEADERBYTES);
  sodium.crypto_secretstream_xchacha20poly1305_init_push(state, header, k);

  return { state: state, header: header };
}

exports.secretStreamPush = (chunk, state) => {
  let c = Buffer.alloc(chunk.length + sodium.crypto_secretstream_xchacha20poly1305_ABYTES);
  let tag = Buffer.alloc(sodium.crypto_secretstream_xchacha20poly1305_TAGBYTES);

  sodium.crypto_secretstream_xchacha20poly1305_push(state, c, chunk, null, tag);

  return c;
}

exports.initStreamPullState = (header, k) => {
  let state = Buffer.alloc(sodium.crypto_secretstream_xchacha20poly1305_STATEBYTES);
  sodium.crypto_secretstream_xchacha20poly1305_init_pull(state, header, k);
  return state;
}

exports.secretStreamPull = (chunk, state) => {
  let m = Buffer.alloc(chunk.length - sodium.crypto_secretstream_xchacha20poly1305_ABYTES);
  let tag = Buffer.alloc(sodium.crypto_secretstream_xchacha20poly1305_TAGBYTES);

  sodium.crypto_secretstream_xchacha20poly1305_pull(state, m, tag, chunk, null);

  return m;
}

exports.encryptStream = async (readStream, writeStream) => {
  const OUTPUT_LENGTH = 32 // bytes
  const hash = blake.blake2bInit(OUTPUT_LENGTH, null);
  const key = _generateStreamKey();

  let bytes = 0;
  let { state, header } = _initStreamPushState(key);

  return new Promise((resolve, reject) => {
    const encrypt = _encrypt(header, state);

    pump(readStream, encrypt, writeStream, (err) => {
      if(err) return reject(err);
      const file = {
        hash: Buffer.from(blake.blake2bFinal(hash)).toString('hex'),
        size: bytes
      }
      resolve({ key, header, file });
    })
  });

  function _encrypt(header, state) {
    let message = Buffer.from([]);

    return new stream.Transform({
      transform
    });


    function transform(chunk, encoding, callback) {
      message = _secretStreamPush(chunk, state);
      bytes += message.byteLength;
      blake.blake2bUpdate(hash, message);
      callback(null, message);
    }
  }

  function _generateStreamKey() {
    let k = Buffer.alloc(sodium.crypto_secretstream_xchacha20poly1305_KEYBYTES);
    sodium.crypto_secretstream_xchacha20poly1305_keygen(k);
    return k;
  }

  function _initStreamPushState(k) {
    let state = Buffer.alloc(sodium.crypto_secretstream_xchacha20poly1305_STATEBYTES);
    let header = Buffer.alloc(sodium.crypto_secretstream_xchacha20poly1305_HEADERBYTES);
    sodium.crypto_secretstream_xchacha20poly1305_init_push(state, header, k);

    return { state: state, header: header };
  }

  function _secretStreamPush(chunk, state) {
    let c = Buffer.alloc(chunk.length + sodium.crypto_secretstream_xchacha20poly1305_ABYTES);
    let tag = Buffer.alloc(sodium.crypto_secretstream_xchacha20poly1305_TAGBYTES);

    sodium.crypto_secretstream_xchacha20poly1305_push(state, c, chunk, null, tag);

    return c;
  }
}

exports.decryptStream = (readStream, key, header) => {
  if(!Buffer.isBuffer(key) && typeof key === 'string') {
    key = Buffer.from(key, 'hex');
  }

  if(!Buffer.isBuffer(header) && typeof header === 'string') {
    header = Buffer.from(header, 'hex');
  }

  const decrypt = _decrypt(key, header);

  pump(readStream, decrypt, (err) => {
    if(err) return err;
  });
  
  return decrypt;


  function _decrypt(k, h) {
    let message = Buffer.from([]);
    let state = _initStreamPullState(h, k);

    return new stream.Transform({
      writableObjectMode: true,
      transform
    });

    function transform(chunk, encoding, callback) {
      try {
        message = _secretStreamPull(chunk, state);
        callback(null, message);
      } catch(err) {
        callback(err, null);
      }
    }
  }

  function _initStreamPullState(header, k) {
    let state = Buffer.alloc(sodium.crypto_secretstream_xchacha20poly1305_STATEBYTES);
    sodium.crypto_secretstream_xchacha20poly1305_init_pull(state, header, k);
    return state;
  }

  function _secretStreamPull(chunk, state) {
    try {
      let m = Buffer.alloc(chunk.length - sodium.crypto_secretstream_xchacha20poly1305_ABYTES);
      let tag = Buffer.alloc(sodium.crypto_secretstream_xchacha20poly1305_TAGBYTES);

      sodium.crypto_secretstream_xchacha20poly1305_pull(state, m, tag, chunk, null);

      return m;
    } catch(err) {
      throw err;
    }
  }
}