api-console-assets

<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"> <style> .KEYW {color: #933;} .COMM {color: #bbb; font-style: italic;} .NUMB {color: #393;} .STRN {color: #393;} .REGX {color: #339;} .line {border-right: 1px dotted #666; color: #666; font-style: normal;} </style></head><body><pre> 1 /* keyutil-1.2.0.js (c) 2013-2017 Kenji Urushima | kjur.github.com/jsrsasign/license 2 */ 3 /* 4 * keyutil.js - key utility for PKCS#1/5/8 PEM, RSA/DSA/ECDSA key object 5 * 6 * Copyright (c) 2013-2017 Kenji Urushima (kenji.urushima@gmail.com) 7 * 8 * This software is licensed under the terms of the MIT License. 9 * https://kjur.github.io/jsrsasign/license 10 * 11 * The above copyright and license notice shall be 12 * included in all copies or substantial portions of the Software. 13 */ 14 /** 15 * @fileOverview 16 * @name keyutil-1.0.js 17 * @author Kenji Urushima kenji.urushima@gmail.com 18 * @version jsrsasign 8.0.0 keyutil 1.2.0 (2017-Jun-26) 19 * @since jsrsasign 4.1.4 20 * @license <a href="https://kjur.github.io/jsrsasign/license/">MIT License</a> 21 */ 22 23 /** 24 * @name KEYUTIL 25 * @class class for RSA/ECC/DSA key utility 26 * @description 27 * 28 * {@link KEYUTIL} class is an update of former {@link PKCS5PKEY} class. 29 * {@link KEYUTIL} class has following features: 30 * <dl> 31 * <dt>key loading - {@link KEYUTIL.getKey} 32 * <dd> 33 * <ul> 34 * <li>supports RSAKey and KJUR.crypto.{ECDSA,DSA} key object</li> 35 * <li>supports private key and public key</li> 36 * <li>supports encrypted and plain private key</li> 37 * <li>supports PKCS#1, PKCS#5 and PKCS#8 key</li> 38 * <li>supports public key in X.509 certificate</li> 39 * <li>key represented by JSON object</li> 40 * </ul> 41 * NOTE1: Encrypted PKCS#8 only supports PBKDF2/HmacSHA1/3DES 42 * NOTE2: Encrypted PKCS#5 supports DES-CBC, DES-EDE3-CBC, AES-{128,192.256}-CBC 43 * 44 * <dt>exporting key - {@link KEYUTIL.getPEM} 45 * <dd> 46 * {@link KEYUTIL.getPEM} method supports following formats: 47 * <ul> 48 * <li>supports RSA/EC/DSA keys</li> 49 * <li>PKCS#1 plain RSA/EC/DSA private key</li> 50 * <li>PKCS#5 encrypted RSA/EC/DSA private key with DES-CBC, DES-EDE3-CBC, AES-{128,192.256}-CBC</li> 51 * <li>PKCS#8 plain RSA/EC/DSA private key</li> 52 * <li>PKCS#8 encrypted RSA/EC/DSA private key with PBKDF2_HmacSHA1_3DES</li> 53 * </ul> 54 * 55 * <dt>keypair generation - {@link KEYUTIL.generateKeypair} 56 * <ul> 57 * <li>generate key pair of {@link RSAKey} or {@link KJUR.crypto.ECDSA}.</li> 58 * <li>generate private key and convert it to PKCS#5 encrypted private key.</li> 59 * </ul> 60 * NOTE: {@link KJUR.crypto.DSA} is not yet supported. 61 * </dl> 62 * 63 * @example 64 * // 1. loading PEM private key 65 * var key = KEYUTIL.getKey(pemPKCS1PrivateKey); 66 * var key = KEYUTIL.getKey(pemPKCS5EncryptedPrivateKey, "passcode"); 67 * var key = KEYUTIL.getKey(pemPKC85PlainPrivateKey); 68 * var key = KEYUTIL.getKey(pemPKC85EncryptedPrivateKey, "passcode"); 69 * // 2. loading PEM public key 70 * var key = KEYUTIL.getKey(pemPKCS8PublicKey); 71 * var key = KEYUTIL.getKey(pemX509Certificate); 72 * // 3. exporting private key 73 * var pem = KEYUTIL.getPEM(privateKeyObj, "PKCS1PRV"); 74 * var pem = KEYUTIL.getPEM(privateKeyObj, "PKCS5PRV", "passcode"); // DES-EDE3-CBC by default 75 * var pem = KEYUTIL.getPEM(privateKeyObj, "PKCS5PRV", "passcode", "DES-CBC"); 76 * var pem = KEYUTIL.getPEM(privateKeyObj, "PKCS8PRV"); 77 * var pem = KEYUTIL.getPEM(privateKeyObj, "PKCS8PRV", "passcode"); 78 * // 4. exporting public key 79 * var pem = KEYUTIL.getPEM(publicKeyObj); 80 */ 81 var KEYUTIL = function() { 82 // ***************************************************************** 83 // *** PRIVATE PROPERTIES AND METHODS ******************************* 84 // ***************************************************************** 85 // shared key decryption ------------------------------------------ 86 var decryptAES = function(dataHex, keyHex, ivHex) { 87 return decryptGeneral(CryptoJS.AES, dataHex, keyHex, ivHex); 88 }; 89 90 var decrypt3DES = function(dataHex, keyHex, ivHex) { 91 return decryptGeneral(CryptoJS.TripleDES, dataHex, keyHex, ivHex); 92 }; 93 94 var decryptDES = function(dataHex, keyHex, ivHex) { 95 return decryptGeneral(CryptoJS.DES, dataHex, keyHex, ivHex); 96 }; 97 98 var decryptGeneral = function(f, dataHex, keyHex, ivHex) { 99 var data = CryptoJS.enc.Hex.parse(dataHex); 100 var key = CryptoJS.enc.Hex.parse(keyHex); 101 var iv = CryptoJS.enc.Hex.parse(ivHex); 102 var encrypted = {}; 103 encrypted.key = key; 104 encrypted.iv = iv; 105 encrypted.ciphertext = data; 106 var decrypted = f.decrypt(encrypted, key, { iv: iv }); 107 return CryptoJS.enc.Hex.stringify(decrypted); 108 }; 109 110 // shared key decryption ------------------------------------------ 111 var encryptAES = function(dataHex, keyHex, ivHex) { 112 return encryptGeneral(CryptoJS.AES, dataHex, keyHex, ivHex); 113 }; 114 115 var encrypt3DES = function(dataHex, keyHex, ivHex) { 116 return encryptGeneral(CryptoJS.TripleDES, dataHex, keyHex, ivHex); 117 }; 118 119 var encryptDES = function(dataHex, keyHex, ivHex) { 120 return encryptGeneral(CryptoJS.DES, dataHex, keyHex, ivHex); 121 }; 122 123 var encryptGeneral = function(f, dataHex, keyHex, ivHex) { 124 var data = CryptoJS.enc.Hex.parse(dataHex); 125 var key = CryptoJS.enc.Hex.parse(keyHex); 126 var iv = CryptoJS.enc.Hex.parse(ivHex); 127 var encryptedHex = f.encrypt(data, key, { iv: iv }); 128 var encryptedWA = CryptoJS.enc.Hex.parse(encryptedHex.toString()); 129 var encryptedB64 = CryptoJS.enc.Base64.stringify(encryptedWA); 130 return encryptedB64; 131 }; 132 133 // other methods and properties ---------------------------------------- 134 var ALGLIST = { 135 'AES-256-CBC': { 'proc': decryptAES, 'eproc': encryptAES, keylen: 32, ivlen: 16 }, 136 'AES-192-CBC': { 'proc': decryptAES, 'eproc': encryptAES, keylen: 24, ivlen: 16 }, 137 'AES-128-CBC': { 'proc': decryptAES, 'eproc': encryptAES, keylen: 16, ivlen: 16 }, 138 'DES-EDE3-CBC': { 'proc': decrypt3DES, 'eproc': encrypt3DES, keylen: 24, ivlen: 8 }, 139 'DES-CBC': { 'proc': decryptDES, 'eproc': encryptDES, keylen: 8, ivlen: 8 } 140 }; 141 142 var getFuncByName = function(algName) { 143 return ALGLIST[algName]['proc']; 144 }; 145 146 var _generateIvSaltHex = function(numBytes) { 147 var wa = CryptoJS.lib.WordArray.random(numBytes); 148 var hex = CryptoJS.enc.Hex.stringify(wa); 149 return hex; 150 }; 151 152 var _parsePKCS5PEM = function(sPKCS5PEM) { 153 var info = {}; 154 var matchResult1 = sPKCS5PEM.match(new RegExp("DEK-Info: ([^,]+),([0-9A-Fa-f]+)", "m")); 155 if (matchResult1) { 156 info.cipher = matchResult1[1]; 157 info.ivsalt = matchResult1[2]; 158 } 159 var matchResult2 = sPKCS5PEM.match(new RegExp("-----BEGIN ([A-Z]+) PRIVATE KEY-----")); 160 if (matchResult2) { 161 info.type = matchResult2[1]; 162 } 163 var i1 = -1; 164 var lenNEWLINE = 0; 165 if (sPKCS5PEM.indexOf("\r\n\r\n") != -1) { 166 i1 = sPKCS5PEM.indexOf("\r\n\r\n"); 167 lenNEWLINE = 2; 168 } 169 if (sPKCS5PEM.indexOf("\n\n") != -1) { 170 i1 = sPKCS5PEM.indexOf("\n\n"); 171 lenNEWLINE = 1; 172 } 173 var i2 = sPKCS5PEM.indexOf("-----END"); 174 if (i1 != -1 && i2 != -1) { 175 var s = sPKCS5PEM.substring(i1 + lenNEWLINE * 2, i2 - lenNEWLINE); 176 s = s.replace(/\s+/g, ''); 177 info.data = s; 178 } 179 return info; 180 }; 181 182 var _getKeyAndUnusedIvByPasscodeAndIvsalt = function(algName, passcode, ivsaltHex) { 183 //alert("ivsaltHex(2) = " + ivsaltHex); 184 var saltHex = ivsaltHex.substring(0, 16); 185 //alert("salt = " + saltHex); 186 187 var salt = CryptoJS.enc.Hex.parse(saltHex); 188 var data = CryptoJS.enc.Utf8.parse(passcode); 189 //alert("salt = " + salt); 190 //alert("data = " + data); 191 192 var nRequiredBytes = ALGLIST[algName]['keylen'] + ALGLIST[algName]['ivlen']; 193 var hHexValueJoined = ''; 194 var hLastValue = null; 195 //alert("nRequiredBytes = " + nRequiredBytes); 196 for (;;) { 197 var h = CryptoJS.algo.MD5.create(); 198 if (hLastValue != null) { 199 h.update(hLastValue); 200 } 201 h.update(data); 202 h.update(salt); 203 hLastValue = h.finalize(); 204 hHexValueJoined = hHexValueJoined + CryptoJS.enc.Hex.stringify(hLastValue); 205 //alert("joined = " + hHexValueJoined); 206 if (hHexValueJoined.length >= nRequiredBytes * 2) { <span class='li