@waku/rln/dist/keystore/cipher.js

RLN (Rate Limiting Nullifier) implementation for Waku

import { cipherDecrypt } from "@chainsafe/bls-keystore/lib/cipher";
import { kdf } from "@chainsafe/bls-keystore/lib/kdf";
import { normalizePassword } from "@chainsafe/bls-keystore/lib/password";
import { keccak256 } from "ethereum-cryptography/keccak";
import { bytesToHex, concatBytes, hexToBytes } from "ethereum-cryptography/utils";
// eipKeystore supports only sha256 checksum so we just make an assumption it is keccak256
const validateChecksum = async (password, eipKeystore) => {
    const computedChecksum = await keccak256Checksum(password, eipKeystore);
    return computedChecksum === eipKeystore.crypto.checksum.message;
};
// decrypt from @chainsafe/bls-keystore supports only sha256
// but nwaku uses keccak256
// https://github.com/waku-org/nwaku/blob/25d6e52e3804d15f9b61bc4cc6dd448540c072a1/waku/waku_keystore/keyfile.nim#L367
export const decryptEipKeystore = async (password, eipKeystore) => {
    const decryptionKey = await kdf(eipKeystore.crypto.kdf, normalizePassword(password));
    const isChecksumValid = await validateChecksum(password, eipKeystore);
    if (!isChecksumValid) {
        throw Error("Password is invalid.");
    }
    return cipherDecrypt(eipKeystore.crypto.cipher, decryptionKey.slice(0, 16));
};
export const keccak256Checksum = async (password, eipKeystore) => {
    const key = await kdf(eipKeystore.crypto.kdf, normalizePassword(password));
    const payload = concatBytes(key.slice(16), hexToBytes(eipKeystore.crypto.cipher.message));
    const ciphertext = keccak256(payload);
    return bytesToHex(ciphertext);
};
//# sourceMappingURL=cipher.js.map