mirror of
http://git.whoc.org.uk/git/password-manager.git
synced 2024-11-14 19:39:03 +01:00
511 lines
16 KiB
JavaScript
511 lines
16 KiB
JavaScript
/*
|
|
|
|
Copyright 2008-2011 Clipperz Srl
|
|
|
|
This file is part of Clipperz Community Edition.
|
|
Clipperz Community Edition is an online password manager.
|
|
For further information about its features and functionalities please
|
|
refer to http://www.clipperz.com.
|
|
|
|
* Clipperz Community Edition is free software: you can redistribute
|
|
it and/or modify it under the terms of the GNU Affero General Public
|
|
License as published by the Free Software Foundation, either version
|
|
3 of the License, or (at your option) any later version.
|
|
|
|
* Clipperz Community Edition is distributed in the hope that it will
|
|
be useful, but WITHOUT ANY WARRANTY; without even the implied
|
|
warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
|
|
See the GNU Affero General Public License for more details.
|
|
|
|
* You should have received a copy of the GNU Affero General Public
|
|
License along with Clipperz Community Edition. If not, see
|
|
<http://www.gnu.org/licenses/>.
|
|
|
|
*/
|
|
|
|
if (typeof(Clipperz) == 'undefined') { Clipperz = {}; }
|
|
if (typeof(Clipperz.PM) == 'undefined') { Clipperz.PM = {}; }
|
|
if (typeof(Clipperz.PM.Crypto) == 'undefined') { Clipperz.PM.Crypto = {}; }
|
|
|
|
Clipperz.PM.Crypto.VERSION = "0.2";
|
|
Clipperz.PM.Crypto.NAME = "Clipperz.PM.Crypto";
|
|
|
|
Clipperz.PM.Crypto.encryptingFunctions = {};
|
|
|
|
MochiKit.Base.update(Clipperz.PM.Crypto, {
|
|
|
|
'__repr__': function () {
|
|
return "[" + this.NAME + " " + this.VERSION + "]";
|
|
},
|
|
|
|
//-------------------------------------------------------------------------
|
|
|
|
'toString': function () {
|
|
return this.__repr__();
|
|
},
|
|
|
|
//-------------------------------------------------------------------------
|
|
/*
|
|
'communicationProtocol': {
|
|
'currentVersion': '0.2',
|
|
'versions': {
|
|
'0.1': Clipperz.PM.Connection.SRP['1.0'], //Clipperz.Crypto.SRP.versions['1.0'].Connection,
|
|
'0.2': Clipperz.PM.Connection.SRP['1.1'] //Clipperz.Crypto.SRP.versions['1.1'].Connection
|
|
},
|
|
'fallbackVersions': {
|
|
'current': '0.1',
|
|
'0.2': '0.1',
|
|
'0.1': null
|
|
}
|
|
},
|
|
*/
|
|
//-------------------------------------------------------------------------
|
|
|
|
'encryptingFunctions': {
|
|
'currentVersion': '0.3',
|
|
'versions': {
|
|
|
|
//#####################################################################
|
|
|
|
'0.1': {
|
|
'encrypt': function(aKey, aValue) {
|
|
return Clipperz.Crypto.Base.encryptUsingSecretKey(aKey, Clipperz.Base.serializeJSON(aValue));
|
|
},
|
|
|
|
'deferredEncrypt': function(aKey, aValue) {
|
|
var deferredResult;
|
|
|
|
deferredResult = new Clipperz.Async.Deferred("Crypto[0.1].deferredEncrypt");
|
|
deferredResult.addCallback(Clipperz.PM.Crypto.encryptingFunctions.versions['0.1'].encrypt, aKey, aValue);
|
|
deferredResult.callback();
|
|
|
|
return deferredResult;
|
|
},
|
|
|
|
'decrypt': function(aKey, aValue) {
|
|
var result;
|
|
|
|
if (aValue != null) {
|
|
result = Clipperz.Base.evalJSON(Clipperz.Crypto.Base.decryptUsingSecretKey(aKey, aValue));
|
|
} else {
|
|
result = null;
|
|
}
|
|
|
|
return result;
|
|
},
|
|
|
|
'deferredDecrypt': function(aKey, aValue) {
|
|
var deferredResult;
|
|
|
|
deferredResult = new Clipperz.Async.Deferred("Crypto.[0.1].deferredDecrypt");
|
|
deferredResult.addCallback(Clipperz.PM.Crypto.encryptingFunctions.versions['0.1'].decrypt, aKey, aValue);
|
|
deferredResult.callback();
|
|
|
|
return deferredResult;
|
|
},
|
|
|
|
'hash': function(aValue) {
|
|
var result;
|
|
var strngResult;
|
|
|
|
stringResult = Clipperz.Crypto.Base.computeHashValue(aValue.asString()); // !!!!!!!
|
|
result = new Clipperz.ByteArray("0x" + stringResult);
|
|
|
|
return result;
|
|
},
|
|
|
|
'deriveKey': function(aStringValue) {
|
|
return Clipperz.Crypto.Base.computeHashValue(aStringValue);
|
|
}
|
|
},
|
|
|
|
//#####################################################################
|
|
|
|
'0.2': {
|
|
'encrypt': function(aKey, aValue, aNonce) {
|
|
var result;
|
|
var key, value;
|
|
var dataToEncrypt;
|
|
var encryptedData;
|
|
|
|
key = Clipperz.Crypto.SHA.sha_d256(new Clipperz.ByteArray(aKey));
|
|
value = new Clipperz.ByteArray(Clipperz.Base.serializeJSON(aValue));
|
|
dataToEncrypt = Clipperz.Crypto.SHA.sha_d256(value).appendBlock(value);
|
|
encryptedData = Clipperz.Crypto.AES.encrypt(key, dataToEncrypt, aNonce);
|
|
result = encryptedData.toBase64String();
|
|
|
|
return result;
|
|
},
|
|
|
|
'deferredEncrypt': function(aKey, aValue, aNonce) {
|
|
var deferredResult;
|
|
var key, value;
|
|
var dataToEncrypt;
|
|
// var encryptedData;
|
|
|
|
key = Clipperz.Crypto.SHA.sha_d256(new Clipperz.ByteArray(aKey));
|
|
value = new Clipperz.ByteArray(Clipperz.Base.serializeJSON(aValue));
|
|
dataToEncrypt = Clipperz.Crypto.SHA.sha_d256(value).appendBlock(value);
|
|
|
|
deferredResult = new Clipperz.Async.Deferred("Crypto[0.2].deferredEncrypt")
|
|
deferredResult.addCallback(Clipperz.Crypto.AES.deferredEncrypt, key, dataToEncrypt, aNonce);
|
|
deferredResult.addCallback(function(aResult) {
|
|
return aResult.toBase64String();
|
|
})
|
|
deferredResult.callback();
|
|
|
|
return deferredResult;
|
|
},
|
|
|
|
'decrypt': function(aKey, aValue) {
|
|
var result;
|
|
|
|
if (aValue != null) {
|
|
var key, value;
|
|
var decryptedData;
|
|
var decryptedValue;
|
|
|
|
key = Clipperz.Crypto.SHA.sha_d256(new Clipperz.ByteArray(aKey));
|
|
value = new Clipperz.ByteArray().appendBase64String(aValue);
|
|
|
|
decryptedData = Clipperz.Crypto.AES.decrypt(key, value);
|
|
decryptedValue = decryptedData.split((256/8));
|
|
|
|
try {
|
|
result = Clipperz.Base.evalJSON(decryptedValue.asString());
|
|
} catch (exception) {
|
|
MochiKit.Logging.logError("Error while decrypting data [1]");
|
|
throw Clipperz.Crypto.Base.exception.CorruptedMessage;
|
|
}
|
|
} else {
|
|
result = null;
|
|
}
|
|
|
|
return result;
|
|
},
|
|
|
|
'deferredDecrypt': function(aKey, aValue) {
|
|
var result;
|
|
|
|
if (aValue != null) {
|
|
var deferredResult;
|
|
var key, value;
|
|
// var decryptedData;
|
|
|
|
key = Clipperz.Crypto.SHA.sha_d256(new Clipperz.ByteArray(aKey));
|
|
value = new Clipperz.ByteArray().appendBase64String(aValue);
|
|
|
|
deferredResult = new Clipperz.Async.Deferred("Crypto.[0.2].deferredDecrypt");
|
|
deferredResult.addCallback(Clipperz.Crypto.AES.deferredDecrypt, key, value);
|
|
deferredResult.addCallback(function(aResult) {
|
|
var result;
|
|
var decryptedData;
|
|
|
|
decryptedData = aResult.split((256/8));
|
|
|
|
try {
|
|
result = Clipperz.Base.evalJSON(decryptedData.asString());
|
|
} catch (exception) {
|
|
MochiKit.Logging.logError("Error while decrypting data [2]");
|
|
throw Clipperz.Crypto.Base.exception.CorruptedMessage;
|
|
}
|
|
|
|
return result;
|
|
})
|
|
deferredResult.callback();
|
|
|
|
result = deferredResult;
|
|
} else {
|
|
result = MochiKit.Async.succeed(null);
|
|
}
|
|
|
|
return result;
|
|
},
|
|
|
|
'hash': Clipperz.Crypto.SHA.sha_d256,
|
|
|
|
'deriveKey': function(aStringValue) {
|
|
var byteData;
|
|
var result;
|
|
|
|
byteData = new Clipperz.ByteArray(aStringValue);
|
|
result = Clipperz.Crypto.SHA.sha_d256(byteData);
|
|
|
|
return result;
|
|
}
|
|
},
|
|
|
|
//#####################################################################
|
|
|
|
'0.3': {
|
|
'encrypt': function(aKey, aValue, aNonce) {
|
|
var result;
|
|
var key, value;
|
|
var data;
|
|
var dataToEncrypt;
|
|
var encryptedData;
|
|
|
|
key = Clipperz.Crypto.SHA.sha_d256(new Clipperz.ByteArray(aKey));
|
|
value = Clipperz.Base.serializeJSON(aValue);
|
|
data = new Clipperz.ByteArray(value);
|
|
encryptedData = Clipperz.Crypto.AES.encrypt(key, data, aNonce);
|
|
result = encryptedData.toBase64String();
|
|
|
|
return result;
|
|
},
|
|
|
|
'deferredEncrypt': function(aKey, aValue, aNonce) {
|
|
var deferredResult;
|
|
var key, value;
|
|
var data;
|
|
var dataToEncrypt;
|
|
var encryptedData;
|
|
|
|
key = Clipperz.Crypto.SHA.sha_d256(new Clipperz.ByteArray(aKey));
|
|
value = Clipperz.Base.serializeJSON(aValue);
|
|
data = new Clipperz.ByteArray(value);
|
|
|
|
deferredResult = new Clipperz.Async.Deferred("Crypto[0.3].deferredEncrypt")
|
|
deferredResult.addCallback(Clipperz.Crypto.AES.deferredEncrypt, key, data, aNonce);
|
|
deferredResult.addCallback(function(aResult) {
|
|
return aResult.toBase64String();
|
|
})
|
|
deferredResult.callback();
|
|
|
|
return deferredResult;
|
|
},
|
|
|
|
'decrypt': function(aKey, aValue) {
|
|
var result;
|
|
|
|
if (aValue != null) {
|
|
var key, value;
|
|
var decryptedData;
|
|
|
|
key = Clipperz.Crypto.SHA.sha_d256(new Clipperz.ByteArray(aKey));
|
|
value = new Clipperz.ByteArray().appendBase64String(aValue);
|
|
|
|
decryptedData = Clipperz.Crypto.AES.decrypt(key, value);
|
|
|
|
value = decryptedData.asString();
|
|
try {
|
|
result = Clipperz.Base.evalJSON(value);
|
|
} catch (exception) {
|
|
MochiKit.Logging.logError("Error while decrypting data [3]");
|
|
throw Clipperz.Crypto.Base.exception.CorruptedMessage;
|
|
}
|
|
} else {
|
|
result = null;
|
|
}
|
|
|
|
return result;
|
|
},
|
|
|
|
'deferredDecrypt': function(aKey, aValue) {
|
|
var deferredResult;
|
|
|
|
deferredResult = new Clipperz.Async.Deferred("Crypto[0.3].deferredDecrypt", {trace: false});
|
|
// now = new Date;
|
|
|
|
if (aValue != null) {
|
|
var key, value;
|
|
// var decryptedData;
|
|
|
|
key = Clipperz.Crypto.SHA.sha_d256(new Clipperz.ByteArray(aKey));
|
|
value = new Clipperz.ByteArray().appendBase64String(aValue);
|
|
|
|
deferredResult.addCallback(Clipperz.Crypto.AES.deferredDecrypt, key, value);
|
|
deferredResult.addCallback(MochiKit.Async.wait, 0.1);
|
|
deferredResult.addCallback(function(aResult) {
|
|
return aResult.asString();
|
|
});
|
|
deferredResult.addCallback(MochiKit.Async.wait, 0.1);
|
|
deferredResult.addCallback(Clipperz.Base.evalJSON);
|
|
deferredResult.addErrback(function(anError) {
|
|
MochiKit.Logging.logError("Error while decrypting data [4]");
|
|
throw Clipperz.Crypto.Base.exception.CorruptedMessage;
|
|
})
|
|
} else {
|
|
deferredResult.addCallback(function() {
|
|
return null;
|
|
});
|
|
}
|
|
deferredResult.callback();
|
|
|
|
return deferredResult;
|
|
},
|
|
|
|
'hash': Clipperz.Crypto.SHA.sha_d256,
|
|
|
|
'deriveKey': function(aStringValue) {
|
|
var byteData;
|
|
var result;
|
|
|
|
byteData = new Clipperz.ByteArray(aStringValue);
|
|
result = Clipperz.Crypto.SHA.sha_d256(byteData);
|
|
|
|
return result;
|
|
}
|
|
|
|
},
|
|
|
|
//#####################################################################
|
|
/*
|
|
'0.4': {
|
|
'encrypt': function(aKey, aValue, aNonce) {
|
|
var result;
|
|
var key, value;
|
|
var data;
|
|
var dataToEncrypt;
|
|
var encryptedData;
|
|
|
|
//MochiKit.Logging.logDebug(">>> [" + (new Date()).valueOf() + "] Clipperz.PM.Crypto.versions[0.3].encrypt");
|
|
key = Clipperz.Crypto.SHA.sha_d256(new Clipperz.ByteArray(aKey));
|
|
//MochiKit.Logging.logDebug("--- [" + (new Date()).valueOf() + "] Clipperz.PM.Crypto.versions[0.3].encrypt - 1");
|
|
value = Clipperz.Base.serializeJSON(aValue);
|
|
//MochiKit.Logging.logDebug("--- [" + (new Date()).valueOf() + "] Clipperz.PM.Crypto.versions[0.3].encrypt - 2");
|
|
/ *
|
|
//MochiKit.Logging.logDebug("--> encrypt.fullSize: " + value.length);
|
|
value = value.replace(/":{"label":"/g, '":{l:"');
|
|
value = value.replace(/":{"key":"/g, '":{k:"');
|
|
value = value.replace(/":{"notes":"/g, '":{n:"');
|
|
value = value.replace(/":{"record":"/g, '":{r:"');
|
|
value = value.replace(/", "label":"/g, '",l:"');
|
|
value = value.replace(/", "favicon":"/g, '",f:"');
|
|
//MochiKit.Logging.logDebug("<-- encrypt.compressed: " + value.length);
|
|
* /
|
|
data = new Clipperz.ByteArray(value);
|
|
//MochiKit.Logging.logDebug("--- [" + (new Date()).valueOf() + "] Clipperz.PM.Crypto.versions[0.3].encrypt - 3");
|
|
encryptedData = Clipperz.Crypto.AES.encrypt(key, data, aNonce);
|
|
//MochiKit.Logging.logDebug("--- [" + (new Date()).valueOf() + "] Clipperz.PM.Crypto.versions[0.3].encrypt - 4");
|
|
result = encryptedData.toBase64String();
|
|
//MochiKit.Logging.logDebug("<<< [" + (new Date()).valueOf() + "] Clipperz.PM.Crypto.versions[0.3].encrypt");
|
|
|
|
return result;
|
|
},
|
|
|
|
'decrypt': function(aKey, aValue) {
|
|
var result;
|
|
|
|
if (aValue != null) {
|
|
var key, value;
|
|
var decryptedData;
|
|
|
|
key = Clipperz.Crypto.SHA.sha_d256(new Clipperz.ByteArray(aKey));
|
|
value = new Clipperz.ByteArray().appendBase64String(aValue);
|
|
|
|
decryptedData = Clipperz.Crypto.AES.decrypt(key, value);
|
|
|
|
value = decryptedData.asString();
|
|
/ *
|
|
value = value.replace(/":{l:"/g, '":{"label":"');
|
|
value = value.replace(/":{k:"/g, '":{"key":"');
|
|
value = value.replace(/":{n:"/g, '":{"notes":"');
|
|
value = value.replace(/":{r:"/g, '":{"record":"');
|
|
value = value.replace(/",l:"/g, '", "label":"');
|
|
value = value.replace(/",f:"/g, '", "favicon":"');
|
|
* /
|
|
try {
|
|
result = Clipperz.Base.evalJSON(value);
|
|
} catch (exception) {
|
|
MochiKit.Logging.logError("Error while decrypting data");
|
|
throw Clipperz.Crypto.Base.exception.CorruptedMessage;
|
|
}
|
|
|
|
|
|
} else {
|
|
result = null;
|
|
}
|
|
|
|
return result;
|
|
},
|
|
|
|
'hash': Clipperz.Crypto.SHA.sha_d256
|
|
},
|
|
*/
|
|
//#####################################################################
|
|
__syntaxFix__: "syntax fix"
|
|
}
|
|
},
|
|
|
|
//-------------------------------------------------------------------------
|
|
|
|
'encrypt': function(aKey, aValue, aVersion) {
|
|
return Clipperz.PM.Crypto.encryptingFunctions.versions[aVersion].encrypt(aKey, aValue);
|
|
},
|
|
|
|
'deferredEncrypt': function(someParameters) {
|
|
return Clipperz.PM.Crypto.encryptingFunctions.versions[someParameters['version']].deferredEncrypt(someParameters['key'], someParameters['value']);
|
|
},
|
|
|
|
//.........................................................................
|
|
|
|
'decrypt': function(aKey, aValue, aVersion) {
|
|
return Clipperz.PM.Crypto.encryptingFunctions.versions[aVersion].decrypt(aKey, aValue);
|
|
},
|
|
|
|
'deferredDecrypt': function(someParameters) {
|
|
return Clipperz.PM.Crypto.encryptingFunctions.versions[someParameters['version']].deferredDecrypt(someParameters['key'], someParameters['value']);
|
|
},
|
|
|
|
//-------------------------------------------------------------------------
|
|
|
|
'hash': function(aValue) {
|
|
return Clipperz.PM.Crypto.encryptingFunctions.versions[Clipperz.PM.Crypto.encryptingFunctions.currentVersion]['hash'](aValue);
|
|
},
|
|
|
|
//-------------------------------------------------------------------------
|
|
|
|
'randomKey': function() {
|
|
return Clipperz.Crypto.PRNG.defaultRandomGenerator().getRandomBytes(32).toHexString().substring(2);
|
|
},
|
|
|
|
//-------------------------------------------------------------------------
|
|
|
|
'deriveKey': function(aValue) {
|
|
return Clipperz.PM.Crypto.encryptingFunctions.versions[Clipperz.PM.Crypto.encryptingFunctions.currentVersion].deriveKey(aValue);
|
|
},
|
|
|
|
//-------------------------------------------------------------------------
|
|
|
|
'passwordEntropy': function(aValue) {
|
|
var result;
|
|
var bitPerChar;
|
|
|
|
bitPerChar = 4;
|
|
if (/[a-z]/.test(aValue)) {
|
|
bitPerChar ++;
|
|
}
|
|
if (/[A-Z]/.test(aValue)) {
|
|
bitPerChar ++;
|
|
}
|
|
if (/[^a-zA-Z0-9]/.test(aValue)) {
|
|
bitPerChar ++;
|
|
}
|
|
|
|
result = aValue.length * bitPerChar;
|
|
|
|
return result;
|
|
},
|
|
|
|
//-------------------------------------------------------------------------
|
|
|
|
'nullValue': '####',
|
|
|
|
//-------------------------------------------------------------------------
|
|
__syntaxFix__: "syntax fix"
|
|
|
|
});
|
|
|
|
//*****************************************************************************
|
|
|
|
//MochiKit.Base.update(Clipperz.PM.Connection.communicationProtocol.versions, {
|
|
// 'current': Clipperz.PM.Connection.communicationProtocol.versions[Clipperz.PM.Connection.communicationProtocol.currentVersion]
|
|
//});
|
|
|
|
MochiKit.Base.update(Clipperz.PM.Crypto.encryptingFunctions.versions, {
|
|
'current': Clipperz.PM.Crypto.encryptingFunctions.versions[Clipperz.PM.Crypto.encryptingFunctions.currentVersion]
|
|
});
|
|
|
|
//*****************************************************************************
|