58 lines
1.7 KiB
TypeScript
58 lines
1.7 KiB
TypeScript
import { Buffer } from "buffer";
|
|
import crypto from "crypto";
|
|
import * as core from "webcrypto-core";
|
|
import { PbkdfCryptoKey } from "./key";
|
|
import { setCryptoKey, getCryptoKey } from "../storage";
|
|
|
|
export class Pbkdf2Provider extends core.Pbkdf2Provider {
|
|
public async onDeriveBits(
|
|
algorithm: Pbkdf2Params,
|
|
baseKey: PbkdfCryptoKey,
|
|
length: number
|
|
): Promise<ArrayBuffer> {
|
|
return new Promise<ArrayBuffer>((resolve, reject) => {
|
|
const salt = core.BufferSourceConverter.toArrayBuffer(algorithm.salt);
|
|
const hash = (algorithm.hash as Algorithm).name.replace("-", "");
|
|
crypto.pbkdf2(
|
|
getCryptoKey(baseKey).data,
|
|
Buffer.from(salt),
|
|
algorithm.iterations,
|
|
length >> 3,
|
|
hash,
|
|
(err, derivedBits) => {
|
|
if (err) {
|
|
reject(err);
|
|
} else {
|
|
resolve(new Uint8Array(derivedBits).buffer);
|
|
}
|
|
}
|
|
);
|
|
});
|
|
}
|
|
|
|
public async onImportKey(
|
|
format: KeyFormat,
|
|
keyData: JsonWebKey | ArrayBuffer,
|
|
algorithm: Algorithm,
|
|
extractable: boolean,
|
|
keyUsages: KeyUsage[]
|
|
): Promise<CryptoKey> {
|
|
if (format === "raw") {
|
|
const key = new PbkdfCryptoKey();
|
|
key.data = Buffer.from(keyData as ArrayBuffer);
|
|
key.algorithm = { name: this.name };
|
|
key.extractable = false;
|
|
key.usages = keyUsages;
|
|
return setCryptoKey(key);
|
|
}
|
|
throw new core.OperationError("format: Must be 'raw'");
|
|
}
|
|
|
|
public override checkCryptoKey(key: CryptoKey, keyUsage?: KeyUsage) {
|
|
super.checkCryptoKey(key, keyUsage);
|
|
if (!(getCryptoKey(key) instanceof PbkdfCryptoKey)) {
|
|
throw new TypeError("key: Is not PBKDF CryptoKey");
|
|
}
|
|
}
|
|
}
|