bsrp/dist/utils.js

Secure Remote Password Protocol (SRP-6a) Implementation

"use strict";
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
    return new (P || (P = Promise))(function (resolve, reject) {
        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
        step((generator = generator.apply(thisArg, _arguments || [])).next());
    });
};
var __generator = (this && this.__generator) || function (thisArg, body) {
    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
    function verb(n) { return function (v) { return step([n, v]); }; }
    function step(op) {
        if (f) throw new TypeError("Generator is already executing.");
        while (_) try {
            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
            if (y = 0, t) op = [op[0] & 2, t.value];
            switch (op[0]) {
                case 0: case 1: t = op; break;
                case 4: _.label++; return { value: op[1], done: false };
                case 5: _.label++; y = op[1]; op = [0]; continue;
                case 7: op = _.ops.pop(); _.trys.pop(); continue;
                default:
                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
                    if (t[2]) _.ops.pop();
                    _.trys.pop(); continue;
            }
            op = body.call(thisArg, _);
        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
    }
};
exports.__esModule = true;
exports.calculateM = exports.calculateX = exports.hash = exports.pad = exports.toBigInteger = exports.toBytes = exports.generateRandomBytes = void 0;
var sha256_browser_1 = require("@aws-crypto/sha256-browser");
var jsbn_1 = require("jsbn");
var conversions_1 = require("./conversions");
exports.generateRandomBytes = function (length) {
    var buffer = new Uint8Array(length);
    var randomBytes = crypto.getRandomValues(buffer);
    return randomBytes;
};
exports.toBytes = function (input) {
    if (input instanceof jsbn_1.BigInteger) {
        return conversions_1.bigIntegerToBigEndianBytes(input);
    }
    else {
        return input;
    }
};
exports.toBigInteger = function (input) {
    if (input instanceof Uint8Array) {
        return conversions_1.bigEndianBytesToBigInteger(input);
    }
    else {
        return input;
    }
};
exports.pad = function (input, length) {
    var unpadded = exports.toBytes(input);
    var padding = new Uint8Array(length - unpadded.byteLength);
    var paddedUint8Array = new Uint8Array(length);
    paddedUint8Array.set(padding);
    paddedUint8Array.set(unpadded, padding.byteLength);
    return paddedUint8Array;
};
exports.hash = function () {
    var args = [];
    for (var _i = 0; _i < arguments.length; _i++) {
        args[_i] = arguments[_i];
    }
    return __awaiter(void 0, void 0, void 0, function () {
        var hash, digestHash;
        return __generator(this, function (_a) {
            switch (_a.label) {
                case 0:
                    hash = new sha256_browser_1.Sha256();
                    args.forEach(function (arg) {
                        if (typeof arg === "string") {
                            hash.update(arg, "utf8");
                        }
                        else {
                            hash.update(exports.toBytes(arg));
                        }
                    });
                    return [4, hash.digest()];
                case 1:
                    digestHash = _a.sent();
                    return [2, digestHash];
            }
        });
    });
};
exports.calculateX = function (salt, identity, password) { return __awaiter(void 0, void 0, void 0, function () {
    var preSalt, postSalt;
    return __generator(this, function (_a) {
        switch (_a.label) {
            case 0: return [4, exports.hash(identity, ":", password)];
            case 1:
                preSalt = _a.sent();
                return [4, exports.hash(salt, preSalt)];
            case 2:
                postSalt = _a.sent();
                return [2, exports.toBigInteger(postSalt)];
        }
    });
}); };
exports.calculateM = function (generator, prime, identity, salt, A, B, sessionKey) { return __awaiter(void 0, void 0, void 0, function () {
    var hashGenerator, hashPrime, hashIdentity, xorGeneratorPrime;
    return __generator(this, function (_a) {
        switch (_a.label) {
            case 0: return [4, exports.hash(generator)];
            case 1:
                hashGenerator = _a.sent();
                return [4, exports.hash(prime)];
            case 2:
                hashPrime = _a.sent();
                return [4, exports.hash(identity)];
            case 3:
                hashIdentity = _a.sent();
                xorGeneratorPrime = exports.toBigInteger(hashGenerator).xor(exports.toBigInteger(hashPrime));
                return [2, exports.hash(xorGeneratorPrime, hashIdentity, salt, A, B, sessionKey)];
        }
    });
}); };