self-hosted/joplin
1
0
Fork 0
mirror of https://github.com/laurent22/joplin.git synced 2025-05-22 22:10:14 +02:00
Code Issues Releases Activity
joplin/ReactNativeClient/lib/vendor/sjcl-rn.js
Laurent Cozic c4f19465a6 Applied prettier to code base
2018-03-09 17:49:35 +00:00

1095 lines
33 KiB
JavaScript
Raw Blame History

// https://github.com/bitwiseshiftleft/sjcl
// Commit: 4fc74ff92fd6b836cc596cc0ee940ef6cc8db7c6
//
// NOTE: Need a special version of this lib for React Native. The following patch has been applied to the below code:
//
// - try{H=require('crypto')}catch(a){H=null}
// + try{H=null}catch(a){H=null}
//
// This is because crypto is not part of React Native and that code will throw an exception.
// The crypto module is apparently used only for random number generation - https://github.com/pouchdb/pouchdb/issues/3787
"use strict";
var sjcl = {
cipher: {},
hash: {},
keyexchange: {},
mode: {},
misc: {},
codec: {},
exception: {
corrupt: function(a) {
this.toString = function() {
return "CORRUPT: " + this.message;
};
this.message = a;
},
invalid: function(a) {
this.toString = function() {
return "INVALID: " + this.message;
};
this.message = a;
},
bug: function(a) {
this.toString = function() {
return "BUG: " + this.message;
};
this.message = a;
},
notReady: function(a) {
this.toString = function() {
return "NOT READY: " + this.message;
};
this.message = a;
},
},
};
sjcl.cipher.aes = function(a) {
this.s[0][0][0] || this.O();
var b,
c,
d,
e,
f = this.s[0][4],
g = this.s[1];
b = a.length;
var h = 1;
if (4 !== b && 6 !== b && 8 !== b) throw new sjcl.exception.invalid("invalid aes key size");
this.b = [(d = a.slice(0)), (e = [])];
for (a = b; a < 4 * b + 28; a++) {
c = d[a - 1];
if (0 === a % b || (8 === b && 4 === a % b))
(c = (f[c >>> 24] << 24) ^ (f[(c >> 16) & 255] << 16) ^ (f[(c >> 8) & 255] << 8) ^ f[c & 255]), 0 === a % b && ((c = (c << 8) ^ (c >>> 24) ^ (h << 24)), (h = (h << 1) ^ (283 * (h >> 7))));
d[a] = d[a - b] ^ c;
}
for (b = 0; a; b++, a--) (c = d[b & 3 ? a : a - 4]), (e[b] = 4 >= a || 4 > b ? c : g[0][f[c >>> 24]] ^ g[1][f[(c >> 16) & 255]] ^ g[2][f[(c >> 8) & 255]] ^ g[3][f[c & 255]]);
};
sjcl.cipher.aes.prototype = {
encrypt: function(a) {
return t(this, a, 0);
},
decrypt: function(a) {
return t(this, a, 1);
},
s: [[[], [], [], [], []], [[], [], [], [], []]],
O: function() {
var a = this.s[0],
b = this.s[1],
c = a[4],
d = b[4],
e,
f,
g,
h = [],
k = [],
l,
n,
m,
p;
for (e = 0; 0x100 > e; e++) k[(h[e] = (e << 1) ^ (283 * (e >> 7))) ^ e] = e;
for (f = g = 0; !c[f]; f ^= l || 1, g = k[g] || 1)
for (
m = g ^ (g << 1) ^ (g << 2) ^ (g << 3) ^ (g << 4),
m = (m >> 8) ^ (m & 255) ^ 99,
c[f] = m,
d[m] = f,
n = h[(e = h[(l = h[f])])],
p = (0x1010101 * n) ^ (0x10001 * e) ^ (0x101 * l) ^ (0x1010100 * f),
n = (0x101 * h[m]) ^ (0x1010100 * m),
e = 0;
4 > e;
e++
)
(a[e][f] = n = (n << 24) ^ (n >>> 8)), (b[e][m] = p = (p << 24) ^ (p >>> 8));
for (e = 0; 5 > e; e++) (a[e] = a[e].slice(0)), (b[e] = b[e].slice(0));
},
};
function t(a, b, c) {
if (4 !== b.length) throw new sjcl.exception.invalid("invalid aes block size");
var d = a.b[c],
e = b[0] ^ d[0],
f = b[c ? 3 : 1] ^ d[1],
g = b[2] ^ d[2];
b = b[c ? 1 : 3] ^ d[3];
var h,
k,
l,
n = d.length / 4 - 2,
m,
p = 4,
r = [0, 0, 0, 0];
h = a.s[c];
a = h[0];
var q = h[1],
v = h[2],
w = h[3],
x = h[4];
for (m = 0; m < n; m++)
(h = a[e >>> 24] ^ q[(f >> 16) & 255] ^ v[(g >> 8) & 255] ^ w[b & 255] ^ d[p]),
(k = a[f >>> 24] ^ q[(g >> 16) & 255] ^ v[(b >> 8) & 255] ^ w[e & 255] ^ d[p + 1]),
(l = a[g >>> 24] ^ q[(b >> 16) & 255] ^ v[(e >> 8) & 255] ^ w[f & 255] ^ d[p + 2]),
(b = a[b >>> 24] ^ q[(e >> 16) & 255] ^ v[(f >> 8) & 255] ^ w[g & 255] ^ d[p + 3]),
(p += 4),
(e = h),
(f = k),
(g = l);
for (m = 0; 4 > m; m++) (r[c ? 3 & -m : m] = (x[e >>> 24] << 24) ^ (x[(f >> 16) & 255] << 16) ^ (x[(g >> 8) & 255] << 8) ^ x[b & 255] ^ d[p++]), (h = e), (e = f), (f = g), (g = b), (b = h);
return r;
}
sjcl.bitArray = {
bitSlice: function(a, b, c) {
a = sjcl.bitArray.$(a.slice(b / 32), 32 - (b & 31)).slice(1);
return void 0 === c ? a : sjcl.bitArray.clamp(a, c - b);
},
extract: function(a, b, c) {
var d = Math.floor((-b - c) & 31);
return (((b + c - 1) ^ b) & -32 ? (a[(b / 32) | 0] << (32 - d)) ^ (a[(b / 32 + 1) | 0] >>> d) : a[(b / 32) | 0] >>> d) & ((1 << c) - 1);
},
concat: function(a, b) {
if (0 === a.length || 0 === b.length) return a.concat(b);
var c = a[a.length - 1],
d = sjcl.bitArray.getPartial(c);
return 32 === d ? a.concat(b) : sjcl.bitArray.$(b, d, c | 0, a.slice(0, a.length - 1));
},
bitLength: function(a) {
var b = a.length;
return 0 === b ? 0 : 32 * (b - 1) + sjcl.bitArray.getPartial(a[b - 1]);
},
clamp: function(a, b) {
if (32 * a.length < b) return a;
a = a.slice(0, Math.ceil(b / 32));
var c = a.length;
b = b & 31;
0 < c && b && (a[c - 1] = sjcl.bitArray.partial(b, a[c - 1] & (2147483648 >> (b - 1)), 1));
return a;
},
partial: function(a, b, c) {
return 32 === a ? b : (c ? b | 0 : b << (32 - a)) + 0x10000000000 * a;
},
getPartial: function(a) {
return Math.round(a / 0x10000000000) || 32;
},
equal: function(a, b) {
if (sjcl.bitArray.bitLength(a) !== sjcl.bitArray.bitLength(b)) return !1;
var c = 0,
d;
for (d = 0; d < a.length; d++) c |= a[d] ^ b[d];
return 0 === c;
},
$: function(a, b, c, d) {
var e;
e = 0;
for (void 0 === d && (d = []); 32 <= b; b -= 32) d.push(c), (c = 0);
if (0 === b) return d.concat(a);
for (e = 0; e < a.length; e++) d.push(c | (a[e] >>> b)), (c = a[e] << (32 - b));
e = a.length ? a[a.length - 1] : 0;
a = sjcl.bitArray.getPartial(e);
d.push(sjcl.bitArray.partial((b + a) & 31, 32 < b + a ? c : d.pop(), 1));
return d;
},
i: function(a, b) {
return [a[0] ^ b[0], a[1] ^ b[1], a[2] ^ b[2], a[3] ^ b[3]];
},
byteswapM: function(a) {
var b, c;
for (b = 0; b < a.length; ++b) (c = a[b]), (a[b] = (c >>> 24) | ((c >>> 8) & 0xff00) | ((c & 0xff00) << 8) | (c << 24));
return a;
},
};
sjcl.codec.utf8String = {
fromBits: function(a) {
var b = "",
c = sjcl.bitArray.bitLength(a),
d,
e;
for (d = 0; d < c / 8; d++) 0 === (d & 3) && (e = a[d / 4]), (b += String.fromCharCode(((e >>> 8) >>> 8) >>> 8)), (e <<= 8);
return decodeURIComponent(escape(b));
},
toBits: function(a) {
a = unescape(encodeURIComponent(a));
var b = [],
c,
d = 0;
for (c = 0; c < a.length; c++) (d = (d << 8) | a.charCodeAt(c)), 3 === (c & 3) && (b.push(d), (d = 0));
c & 3 && b.push(sjcl.bitArray.partial(8 * (c & 3), d));
return b;
},
};
sjcl.codec.hex = {
fromBits: function(a) {
var b = "",
c;
for (c = 0; c < a.length; c++) b += ((a[c] | 0) + 0xf00000000000).toString(16).substr(4);
return b.substr(0, sjcl.bitArray.bitLength(a) / 4);
},
toBits: function(a) {
var b,
c = [],
d;
a = a.replace(/\s|0x/g, "");
d = a.length;
a = a + "00000000";
for (b = 0; b < a.length; b += 8) c.push(parseInt(a.substr(b, 8), 16) ^ 0);
return sjcl.bitArray.clamp(c, 4 * d);
},
};
sjcl.codec.base32 = {
B: "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",
X: "0123456789ABCDEFGHIJKLMNOPQRSTUV",
BITS: 32,
BASE: 5,
REMAINING: 27,
fromBits: function(a, b, c) {
var d = sjcl.codec.base32.BASE,
e = sjcl.codec.base32.REMAINING,
f = "",
g = 0,
h = sjcl.codec.base32.B,
k = 0,
l = sjcl.bitArray.bitLength(a);
c && (h = sjcl.codec.base32.X);
for (c = 0; f.length * d < l; ) (f += h.charAt((k ^ (a[c] >>> g)) >>> e)), g < d ? ((k = a[c] << (d - g)), (g += e), c++) : ((k <<= d), (g -= d));
for (; f.length & 7 && !b; ) f += "=";
return f;
},
toBits: function(a, b) {
a = a.replace(/\s|=/g, "").toUpperCase();
var c = sjcl.codec.base32.BITS,
d = sjcl.codec.base32.BASE,
e = sjcl.codec.base32.REMAINING,
f = [],
g,
h = 0,
k = sjcl.codec.base32.B,
l = 0,
n,
m = "base32";
b && ((k = sjcl.codec.base32.X), (m = "base32hex"));
for (g = 0; g < a.length; g++) {
n = k.indexOf(a.charAt(g));
if (0 > n) {
if (!b)
try {
return sjcl.codec.base32hex.toBits(a);
} catch (p) {}
throw new sjcl.exception.invalid("this isn't " + m + "!");
}
h > e ? ((h -= e), f.push(l ^ (n >>> h)), (l = n << (c - h))) : ((h += d), (l ^= n << (c - h)));
}
h & 56 && f.push(sjcl.bitArray.partial(h & 56, l, 1));
return f;
},
};
sjcl.codec.base32hex = {
fromBits: function(a, b) {
return sjcl.codec.base32.fromBits(a, b, 1);
},
toBits: function(a) {
return sjcl.codec.base32.toBits(a, 1);
},
};
sjcl.codec.base64 = {
B: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",
fromBits: function(a, b, c) {
var d = "",
e = 0,
f = sjcl.codec.base64.B,
g = 0,
h = sjcl.bitArray.bitLength(a);
c && (f = f.substr(0, 62) + "-_");
for (c = 0; 6 * d.length < h; ) (d += f.charAt((g ^ (a[c] >>> e)) >>> 26)), 6 > e ? ((g = a[c] << (6 - e)), (e += 26), c++) : ((g <<= 6), (e -= 6));
for (; d.length & 3 && !b; ) d += "=";
return d;
},
toBits: function(a, b) {
a = a.replace(/\s|=/g, "");
var c = [],
d,
e = 0,
f = sjcl.codec.base64.B,
g = 0,
h;
b && (f = f.substr(0, 62) + "-_");
for (d = 0; d < a.length; d++) {
h = f.indexOf(a.charAt(d));
if (0 > h) throw new sjcl.exception.invalid("this isn't base64!");
26 < e ? ((e -= 26), c.push(g ^ (h >>> e)), (g = h << (32 - e))) : ((e += 6), (g ^= h << (32 - e)));
}
e & 56 && c.push(sjcl.bitArray.partial(e & 56, g, 1));
return c;
},
};
sjcl.codec.base64url = {
fromBits: function(a) {
return sjcl.codec.base64.fromBits(a, 1, 1);
},
toBits: function(a) {
return sjcl.codec.base64.toBits(a, 1);
},
};
sjcl.hash.sha256 = function(a) {
this.b[0] || this.O();
a ? ((this.F = a.F.slice(0)), (this.A = a.A.slice(0)), (this.l = a.l)) : this.reset();
};
sjcl.hash.sha256.hash = function(a) {
return new sjcl.hash.sha256().update(a).finalize();
};
sjcl.hash.sha256.prototype = {
blockSize: 512,
reset: function() {
this.F = this.Y.slice(0);
this.A = [];
this.l = 0;
return this;
},
update: function(a) {
"string" === typeof a && (a = sjcl.codec.utf8String.toBits(a));
var b,
c = (this.A = sjcl.bitArray.concat(this.A, a));
b = this.l;
a = this.l = b + sjcl.bitArray.bitLength(a);
if (0x1fffffffffffff < a) throw new sjcl.exception.invalid("Cannot hash more than 2^53 - 1 bits");
if ("undefined" !== typeof Uint32Array) {
var d = new Uint32Array(c),
e = 0;
for (b = 512 + b - ((512 + b) & 0x1ff); b <= a; b += 512) u(this, d.subarray(16 * e, 16 * (e + 1))), (e += 1);
c.splice(0, 16 * e);
} else for (b = 512 + b - ((512 + b) & 0x1ff); b <= a; b += 512) u(this, c.splice(0, 16));
return this;
},
finalize: function() {
var a,
b = this.A,
c = this.F,
b = sjcl.bitArray.concat(b, [sjcl.bitArray.partial(1, 1)]);
for (a = b.length + 2; a & 15; a++) b.push(0);
b.push(Math.floor(this.l / 0x100000000));
for (b.push(this.l | 0); b.length; ) u(this, b.splice(0, 16));
this.reset();
return c;
},
Y: [],
b: [],
O: function() {
function a(a) {
return (0x100000000 * (a - Math.floor(a))) | 0;
}
for (var b = 0, c = 2, d, e; 64 > b; c++) {
e = !0;
for (d = 2; d * d <= c; d++)
if (0 === c % d) {
e = !1;
break;
}
e && (8 > b && (this.Y[b] = a(Math.pow(c, 0.5))), (this.b[b] = a(Math.pow(c, 1 / 3))), b++);
}
},
};
function u(a, b) {
var c,
d,
e,
f = a.F,
g = a.b,
h = f[0],
k = f[1],
l = f[2],
n = f[3],
m = f[4],
p = f[5],
r = f[6],
q = f[7];
for (c = 0; 64 > c; c++)
16 > c
? (d = b[c])
: ((d = b[(c + 1) & 15]),
(e = b[(c + 14) & 15]),
(d = b[c & 15] = (((d >>> 7) ^ (d >>> 18) ^ (d >>> 3) ^ (d << 25) ^ (d << 14)) + ((e >>> 17) ^ (e >>> 19) ^ (e >>> 10) ^ (e << 15) ^ (e << 13)) + b[c & 15] + b[(c + 9) & 15]) | 0)),
(d = d + q + ((m >>> 6) ^ (m >>> 11) ^ (m >>> 25) ^ (m << 26) ^ (m << 21) ^ (m << 7)) + (r ^ (m & (p ^ r))) + g[c]),
(q = r),
(r = p),
(p = m),
(m = (n + d) | 0),
(n = l),
(l = k),
(k = h),
(h = (d + ((k & l) ^ (n & (k ^ l))) + ((k >>> 2) ^ (k >>> 13) ^ (k >>> 22) ^ (k << 30) ^ (k << 19) ^ (k << 10))) | 0);
f[0] = (f[0] + h) | 0;
f[1] = (f[1] + k) | 0;
f[2] = (f[2] + l) | 0;
f[3] = (f[3] + n) | 0;
f[4] = (f[4] + m) | 0;
f[5] = (f[5] + p) | 0;
f[6] = (f[6] + r) | 0;
f[7] = (f[7] + q) | 0;
}
sjcl.mode.ccm = {
name: "ccm",
G: [],
listenProgress: function(a) {
sjcl.mode.ccm.G.push(a);
},
unListenProgress: function(a) {
a = sjcl.mode.ccm.G.indexOf(a);
-1 < a && sjcl.mode.ccm.G.splice(a, 1);
},
fa: function(a) {
var b = sjcl.mode.ccm.G.slice(),
c;
for (c = 0; c < b.length; c += 1) b[c](a);
},
encrypt: function(a, b, c, d, e) {
var f,
g = b.slice(0),
h = sjcl.bitArray,
k = h.bitLength(c) / 8,
l = h.bitLength(g) / 8;
e = e || 64;
d = d || [];
if (7 > k) throw new sjcl.exception.invalid("ccm: iv must be at least 7 bytes");
for (f = 2; 4 > f && l >>> (8 * f); f++);
f < 15 - k && (f = 15 - k);
c = h.clamp(c, 8 * (15 - f));
b = sjcl.mode.ccm.V(a, b, c, d, e, f);
g = sjcl.mode.ccm.C(a, g, c, b, e, f);
return h.concat(g.data, g.tag);
},
decrypt: function(a, b, c, d, e) {
e = e || 64;
d = d || [];
var f = sjcl.bitArray,
g = f.bitLength(c) / 8,
h = f.bitLength(b),
k = f.clamp(b, h - e),
l = f.bitSlice(b, h - e),
h = (h - e) / 8;
if (7 > g) throw new sjcl.exception.invalid("ccm: iv must be at least 7 bytes");
for (b = 2; 4 > b && h >>> (8 * b); b++);
b < 15 - g && (b = 15 - g);
c = f.clamp(c, 8 * (15 - b));
k = sjcl.mode.ccm.C(a, k, c, l, e, b);
a = sjcl.mode.ccm.V(a, k.data, c, d, e, b);
if (!f.equal(k.tag, a)) throw new sjcl.exception.corrupt("ccm: tag doesn't match");
return k.data;
},
na: function(a, b, c, d, e, f) {
var g = [],
h = sjcl.bitArray,
k = h.i;
d = [h.partial(8, (b.length ? 64 : 0) | ((d - 2) << 2) | (f - 1))];
d = h.concat(d, c);
d[3] |= e;
d = a.encrypt(d);
if (b.length)
for (c = h.bitLength(b) / 8, 65279 >= c ? (g = [h.partial(16, c)]) : 0xffffffff >= c && (g = h.concat([h.partial(16, 65534)], [c])), g = h.concat(g, b), b = 0; b < g.length; b += 4)
d = a.encrypt(k(d, g.slice(b, b + 4).concat([0, 0, 0])));
return d;
},
V: function(a, b, c, d, e, f) {
var g = sjcl.bitArray,
h = g.i;
e /= 8;
if (e % 2 || 4 > e || 16 < e) throw new sjcl.exception.invalid("ccm: invalid tag length");
if (0xffffffff < d.length || 0xffffffff < b.length) throw new sjcl.exception.bug("ccm: can't deal with 4GiB or more data");
c = sjcl.mode.ccm.na(a, d, c, e, g.bitLength(b) / 8, f);
for (d = 0; d < b.length; d += 4) c = a.encrypt(h(c, b.slice(d, d + 4).concat([0, 0, 0])));
return g.clamp(c, 8 * e);
},
C: function(a, b, c, d, e, f) {
var g,
h = sjcl.bitArray;
g = h.i;
var k = b.length,
l = h.bitLength(b),
n = k / 50,
m = n;
c = h
.concat([h.partial(8, f - 1)], c)
.concat([0, 0, 0])
.slice(0, 4);
d = h.bitSlice(g(d, a.encrypt(c)), 0, e);
if (!k) return { tag: d, data: [] };
for (g = 0; g < k; g += 4) g > n && (sjcl.mode.ccm.fa(g / k), (n += m)), c[3]++, (e = a.encrypt(c)), (b[g] ^= e[0]), (b[g + 1] ^= e[1]), (b[g + 2] ^= e[2]), (b[g + 3] ^= e[3]);
return { tag: d, data: h.clamp(b, l) };
},
};
sjcl.mode.ocb2 = {
name: "ocb2",
encrypt: function(a, b, c, d, e, f) {
if (128 !== sjcl.bitArray.bitLength(c)) throw new sjcl.exception.invalid("ocb iv must be 128 bits");
var g,
h = sjcl.mode.ocb2.S,
k = sjcl.bitArray,
l = k.i,
n = [0, 0, 0, 0];
c = h(a.encrypt(c));
var m,
p = [];
d = d || [];
e = e || 64;
for (g = 0; g + 4 < b.length; g += 4) (m = b.slice(g, g + 4)), (n = l(n, m)), (p = p.concat(l(c, a.encrypt(l(c, m))))), (c = h(c));
m = b.slice(g);
b = k.bitLength(m);
g = a.encrypt(l(c, [0, 0, 0, b]));
m = k.clamp(l(m.concat([0, 0, 0]), g), b);
n = l(n, l(m.concat([0, 0, 0]), g));
n = a.encrypt(l(n, l(c, h(c))));
d.length && (n = l(n, f ? d : sjcl.mode.ocb2.pmac(a, d)));
return p.concat(k.concat(m, k.clamp(n, e)));
},
decrypt: function(a, b, c, d, e, f) {
if (128 !== sjcl.bitArray.bitLength(c)) throw new sjcl.exception.invalid("ocb iv must be 128 bits");
e = e || 64;
var g = sjcl.mode.ocb2.S,
h = sjcl.bitArray,
k = h.i,
l = [0, 0, 0, 0],
n = g(a.encrypt(c)),
m,
p,
r = sjcl.bitArray.bitLength(b) - e,
q = [];
d = d || [];
for (c = 0; c + 4 < r / 32; c += 4) (m = k(n, a.decrypt(k(n, b.slice(c, c + 4))))), (l = k(l, m)), (q = q.concat(m)), (n = g(n));
p = r - 32 * c;
m = a.encrypt(k(n, [0, 0, 0, p]));
m = k(m, h.clamp(b.slice(c), p).concat([0, 0, 0]));
l = k(l, m);
l = a.encrypt(k(l, k(n, g(n))));
d.length && (l = k(l, f ? d : sjcl.mode.ocb2.pmac(a, d)));
if (!h.equal(h.clamp(l, e), h.bitSlice(b, r))) throw new sjcl.exception.corrupt("ocb: tag doesn't match");
return q.concat(h.clamp(m, p));
},
pmac: function(a, b) {
var c,
d = sjcl.mode.ocb2.S,
e = sjcl.bitArray,
f = e.i,
g = [0, 0, 0, 0],
h = a.encrypt([0, 0, 0, 0]),
h = f(h, d(d(h)));
for (c = 0; c + 4 < b.length; c += 4) (h = d(h)), (g = f(g, a.encrypt(f(h, b.slice(c, c + 4)))));
c = b.slice(c);
128 > e.bitLength(c) && ((h = f(h, d(h))), (c = e.concat(c, [-2147483648, 0, 0, 0])));
g = f(g, c);
return a.encrypt(f(d(f(h, d(h))), g));
},
S: function(a) {
return [(a[0] << 1) ^ (a[1] >>> 31), (a[1] << 1) ^ (a[2] >>> 31), (a[2] << 1) ^ (a[3] >>> 31), (a[3] << 1) ^ (135 * (a[0] >>> 31))];
},
};
sjcl.mode.gcm = {
name: "gcm",
encrypt: function(a, b, c, d, e) {
var f = b.slice(0);
b = sjcl.bitArray;
d = d || [];
a = sjcl.mode.gcm.C(!0, a, f, d, c, e || 128);
return b.concat(a.data, a.tag);
},
decrypt: function(a, b, c, d, e) {
var f = b.slice(0),
g = sjcl.bitArray,
h = g.bitLength(f);
e = e || 128;
d = d || [];
e <= h ? ((b = g.bitSlice(f, h - e)), (f = g.bitSlice(f, 0, h - e))) : ((b = f), (f = []));
a = sjcl.mode.gcm.C(!1, a, f, d, c, e);
if (!g.equal(a.tag, b)) throw new sjcl.exception.corrupt("gcm: tag doesn't match");
return a.data;
},
ka: function(a, b) {
var c,
d,
e,
f,
g,
h = sjcl.bitArray.i;
e = [0, 0, 0, 0];
f = b.slice(0);
for (c = 0; 128 > c; c++) {
(d = 0 !== (a[Math.floor(c / 32)] & (1 << (31 - c % 32)))) && (e = h(e, f));
g = 0 !== (f[3] & 1);
for (d = 3; 0 < d; d--) f[d] = (f[d] >>> 1) | ((f[d - 1] & 1) << 31);
f[0] >>>= 1;
g && (f[0] ^= -0x1f000000);
}
return e;
},
j: function(a, b, c) {
var d,
e = c.length;
b = b.slice(0);
for (d = 0; d < e; d += 4) (b[0] ^= 0xffffffff & c[d]), (b[1] ^= 0xffffffff & c[d + 1]), (b[2] ^= 0xffffffff & c[d + 2]), (b[3] ^= 0xffffffff & c[d + 3]), (b = sjcl.mode.gcm.ka(b, a));
return b;
},
C: function(a, b, c, d, e, f) {
var g,
h,
k,
l,
n,
m,
p,
r,
q = sjcl.bitArray;
m = c.length;
p = q.bitLength(c);
r = q.bitLength(d);
h = q.bitLength(e);
g = b.encrypt([0, 0, 0, 0]);
96 === h ? ((e = e.slice(0)), (e = q.concat(e, [1]))) : ((e = sjcl.mode.gcm.j(g, [0, 0, 0, 0], e)), (e = sjcl.mode.gcm.j(g, e, [0, 0, Math.floor(h / 0x100000000), h & 0xffffffff])));
h = sjcl.mode.gcm.j(g, [0, 0, 0, 0], d);
n = e.slice(0);
d = h.slice(0);
a || (d = sjcl.mode.gcm.j(g, h, c));
for (l = 0; l < m; l += 4) n[3]++, (k = b.encrypt(n)), (c[l] ^= k[0]), (c[l + 1] ^= k[1]), (c[l + 2] ^= k[2]), (c[l + 3] ^= k[3]);
c = q.clamp(c, p);
a && (d = sjcl.mode.gcm.j(g, h, c));
a = [Math.floor(r / 0x100000000), r & 0xffffffff, Math.floor(p / 0x100000000), p & 0xffffffff];
d = sjcl.mode.gcm.j(g, d, a);
k = b.encrypt(e);
d[0] ^= k[0];
d[1] ^= k[1];
d[2] ^= k[2];
d[3] ^= k[3];
return { tag: q.bitSlice(d, 0, f), data: c };
},
};
sjcl.misc.hmac = function(a, b) {
this.W = b = b || sjcl.hash.sha256;
var c = [[], []],
d,
e = b.prototype.blockSize / 32;
this.w = [new b(), new b()];
a.length > e && (a = b.hash(a));
for (d = 0; d < e; d++) (c[0][d] = a[d] ^ 909522486), (c[1][d] = a[d] ^ 1549556828);
this.w[0].update(c[0]);
this.w[1].update(c[1]);
this.R = new b(this.w[0]);
};
sjcl.misc.hmac.prototype.encrypt = sjcl.misc.hmac.prototype.mac = function(a) {
if (this.aa) throw new sjcl.exception.invalid("encrypt on already updated hmac called!");
this.update(a);
return this.digest(a);
};
sjcl.misc.hmac.prototype.reset = function() {
this.R = new this.W(this.w[0]);
this.aa = !1;
};
sjcl.misc.hmac.prototype.update = function(a) {
this.aa = !0;
this.R.update(a);
};
sjcl.misc.hmac.prototype.digest = function() {
var a = this.R.finalize(),
a = new this.W(this.w[1]).update(a).finalize();
this.reset();
return a;
};
sjcl.misc.pbkdf2 = function(a, b, c, d, e) {
c = c || 1e4;
if (0 > d || 0 > c) throw new sjcl.exception.invalid("invalid params to pbkdf2");
"string" === typeof a && (a = sjcl.codec.utf8String.toBits(a));
"string" === typeof b && (b = sjcl.codec.utf8String.toBits(b));
e = e || sjcl.misc.hmac;
a = new e(a);
var f,
g,
h,
k,
l = [],
n = sjcl.bitArray;
for (k = 1; 32 * l.length < (d || 1); k++) {
e = f = a.encrypt(n.concat(b, [k]));
for (g = 1; g < c; g++) for (f = a.encrypt(f), h = 0; h < f.length; h++) e[h] ^= f[h];
l = l.concat(e);
}
d && (l = n.clamp(l, d));
return l;
};
sjcl.prng = function(a) {
this.c = [new sjcl.hash.sha256()];
this.m = [0];
this.P = 0;
this.H = {};
this.N = 0;
this.U = {};
this.Z = this.f = this.o = this.ha = 0;
this.b = [0, 0, 0, 0, 0, 0, 0, 0];
this.h = [0, 0, 0, 0];
this.L = void 0;
this.M = a;
this.D = !1;
this.K = { progress: {}, seeded: {} };
this.u = this.ga = 0;
this.I = 1;
this.J = 2;
this.ca = 0x10000;
this.T = [0, 48, 64, 96, 128, 192, 0x100, 384, 512, 768, 1024];
this.da = 3e4;
this.ba = 80;
};
sjcl.prng.prototype = {
randomWords: function(a, b) {
var c = [],
d;
d = this.isReady(b);
var e;
if (d === this.u) throw new sjcl.exception.notReady("generator isn't seeded");
if (d & this.J) {
d = !(d & this.I);
e = [];
var f = 0,
g;
this.Z = e[0] = new Date().valueOf() + this.da;
for (g = 0; 16 > g; g++) e.push((0x100000000 * Math.random()) | 0);
for (g = 0; g < this.c.length && ((e = e.concat(this.c[g].finalize())), (f += this.m[g]), (this.m[g] = 0), d || !(this.P & (1 << g))); g++);
this.P >= 1 << this.c.length && (this.c.push(new sjcl.hash.sha256()), this.m.push(0));
this.f -= f;
f > this.o && (this.o = f);
this.P++;
this.b = sjcl.hash.sha256.hash(this.b.concat(e));
this.L = new sjcl.cipher.aes(this.b);
for (d = 0; 4 > d && ((this.h[d] = (this.h[d] + 1) | 0), !this.h[d]); d++);
}
for (d = 0; d < a; d += 4) 0 === (d + 1) % this.ca && y(this), (e = z(this)), c.push(e[0], e[1], e[2], e[3]);
y(this);
return c.slice(0, a);
},
setDefaultParanoia: function(a, b) {
if (0 === a && "Setting paranoia=0 will ruin your security; use it only for testing" !== b) throw new sjcl.exception.invalid("Setting paranoia=0 will ruin your security; use it only for testing");
this.M = a;
},
addEntropy: function(a, b, c) {
c = c || "user";
var d,
e,
f = new Date().valueOf(),
g = this.H[c],
h = this.isReady(),
k = 0;
d = this.U[c];
void 0 === d && (d = this.U[c] = this.ha++);
void 0 === g && (g = this.H[c] = 0);
this.H[c] = (this.H[c] + 1) % this.c.length;
switch (typeof a) {
case "number":
void 0 === b && (b = 1);
this.c[g].update([d, this.N++, 1, b, f, 1, a | 0]);
break;
case "object":
c = Object.prototype.toString.call(a);
if ("[object Uint32Array]" === c) {
e = [];
for (c = 0; c < a.length; c++) e.push(a[c]);
a = e;
} else for ("[object Array]" !== c && (k = 1), c = 0; c < a.length && !k; c++) "number" !== typeof a[c] && (k = 1);
if (!k) {
if (void 0 === b) for (c = b = 0; c < a.length; c++) for (e = a[c]; 0 < e; ) b++, (e = e >>> 1);
this.c[g].update([d, this.N++, 2, b, f, a.length].concat(a));
}
break;
case "string":
void 0 === b && (b = a.length);
this.c[g].update([d, this.N++, 3, b, f, a.length]);
this.c[g].update(a);
break;
default:
k = 1;
}
if (k) throw new sjcl.exception.bug("random: addEntropy only supports number, array of numbers or string");
this.m[g] += b;
this.f += b;
h === this.u && (this.isReady() !== this.u && A("seeded", Math.max(this.o, this.f)), A("progress", this.getProgress()));
},
isReady: function(a) {
a = this.T[void 0 !== a ? a : this.M];
return this.o && this.o >= a ? (this.m[0] > this.ba && new Date().valueOf() > this.Z ? this.J | this.I : this.I) : this.f >= a ? this.J | this.u : this.u;
},
getProgress: function(a) {
a = this.T[a ? a : this.M];
return this.o >= a ? 1 : this.f > a ? 1 : this.f / a;
},
startCollectors: function() {
if (!this.D) {
this.a = {
loadTimeCollector: B(this, this.ma),
mouseCollector: B(this, this.oa),
keyboardCollector: B(this, this.la),
accelerometerCollector: B(this, this.ea),
touchCollector: B(this, this.qa),
};
if (window.addEventListener)
window.addEventListener("load", this.a.loadTimeCollector, !1),
window.addEventListener("mousemove", this.a.mouseCollector, !1),
window.addEventListener("keypress", this.a.keyboardCollector, !1),
window.addEventListener("devicemotion", this.a.accelerometerCollector, !1),
window.addEventListener("touchmove", this.a.touchCollector, !1);
else if (document.attachEvent)
document.attachEvent("onload", this.a.loadTimeCollector), document.attachEvent("onmousemove", this.a.mouseCollector), document.attachEvent("keypress", this.a.keyboardCollector);
else throw new sjcl.exception.bug("can't attach event");
this.D = !0;
}
},
stopCollectors: function() {
this.D &&
(window.removeEventListener
? (window.removeEventListener("load", this.a.loadTimeCollector, !1),
window.removeEventListener("mousemove", this.a.mouseCollector, !1),
window.removeEventListener("keypress", this.a.keyboardCollector, !1),
window.removeEventListener("devicemotion", this.a.accelerometerCollector, !1),
window.removeEventListener("touchmove", this.a.touchCollector, !1))
: document.detachEvent &&
(document.detachEvent("onload", this.a.loadTimeCollector), document.detachEvent("onmousemove", this.a.mouseCollector), document.detachEvent("keypress", this.a.keyboardCollector)),
(this.D = !1));
},
addEventListener: function(a, b) {
this.K[a][this.ga++] = b;
},
removeEventListener: function(a, b) {
var c,
d,
e = this.K[a],
f = [];
for (d in e) e.hasOwnProperty(d) && e[d] === b && f.push(d);
for (c = 0; c < f.length; c++) (d = f[c]), delete e[d];
},
la: function() {
C(this, 1);
},
oa: function(a) {
var b, c;
try {
(b = a.x || a.clientX || a.offsetX || 0), (c = a.y || a.clientY || a.offsetY || 0);
} catch (d) {
c = b = 0;
}
0 != b && 0 != c && this.addEntropy([b, c], 2, "mouse");
C(this, 0);
},
qa: function(a) {
a = a.touches[0] || a.changedTouches[0];
this.addEntropy([a.pageX || a.clientX, a.pageY || a.clientY], 1, "touch");
C(this, 0);
},
ma: function() {
C(this, 2);
},
ea: function(a) {
a = a.accelerationIncludingGravity.x || a.accelerationIncludingGravity.y || a.accelerationIncludingGravity.z;
if (window.orientation) {
var b = window.orientation;
"number" === typeof b && this.addEntropy(b, 1, "accelerometer");
}
a && this.addEntropy(a, 2, "accelerometer");
C(this, 0);
},
};
function A(a, b) {
var c,
d = sjcl.random.K[a],
e = [];
for (c in d) d.hasOwnProperty(c) && e.push(d[c]);
for (c = 0; c < e.length; c++) e[c](b);
}
function C(a, b) {
"undefined" !== typeof window && window.performance && "function" === typeof window.performance.now
? a.addEntropy(window.performance.now(), b, "loadtime")
: a.addEntropy(new Date().valueOf(), b, "loadtime");
}
function y(a) {
a.b = z(a).concat(z(a));
a.L = new sjcl.cipher.aes(a.b);
}
function z(a) {
for (var b = 0; 4 > b && ((a.h[b] = (a.h[b] + 1) | 0), !a.h[b]); b++);
return a.L.encrypt(a.h);
}
function B(a, b) {
return function() {
b.apply(a, arguments);
};
}
sjcl.random = new sjcl.prng(6);
a: try {
var D, E, F, G;
if ((G = "undefined" !== typeof module && module.exports)) {
var H;
try {
H = null;
} catch (a) {
H = null;
}
G = E = H;
}
if (G && E.randomBytes) (D = E.randomBytes(128)), (D = new Uint32Array(new Uint8Array(D).buffer)), sjcl.random.addEntropy(D, 1024, "crypto['randomBytes']");
else if ("undefined" !== typeof window && "undefined" !== typeof Uint32Array) {
F = new Uint32Array(32);
if (window.crypto && window.crypto.getRandomValues) window.crypto.getRandomValues(F);
else if (window.msCrypto && window.msCrypto.getRandomValues) window.msCrypto.getRandomValues(F);
else break a;
sjcl.random.addEntropy(F, 1024, "crypto['getRandomValues']");
}
} catch (a) {
"undefined" !== typeof window && window.console && (console.log("There was an error collecting entropy from the browser:"), console.log(a));
}
sjcl.json = {
defaults: { v: 1, iter: 1e4, ks: 128, ts: 64, mode: "ccm", adata: "", cipher: "aes" },
ja: function(a, b, c, d) {
c = c || {};
d = d || {};
var e = sjcl.json,
f = e.g({ iv: sjcl.random.randomWords(4, 0) }, e.defaults),
g;
e.g(f, c);
c = f.adata;
"string" === typeof f.salt && (f.salt = sjcl.codec.base64.toBits(f.salt));
"string" === typeof f.iv && (f.iv = sjcl.codec.base64.toBits(f.iv));
if (
!sjcl.mode[f.mode] ||
!sjcl.cipher[f.cipher] ||
("string" === typeof a && 100 >= f.iter) ||
(64 !== f.ts && 96 !== f.ts && 128 !== f.ts) ||
(128 !== f.ks && 192 !== f.ks && 0x100 !== f.ks) ||
2 > f.iv.length ||
4 < f.iv.length
)
throw new sjcl.exception.invalid("json encrypt: invalid parameters");
"string" === typeof a
? ((g = sjcl.misc.cachedPbkdf2(a, f)), (a = g.key.slice(0, f.ks / 32)), (f.salt = g.salt))
: sjcl.ecc && a instanceof sjcl.ecc.elGamal.publicKey && ((g = a.kem()), (f.kemtag = g.tag), (a = g.key.slice(0, f.ks / 32)));
"string" === typeof b && (b = sjcl.codec.utf8String.toBits(b));
"string" === typeof c && (f.adata = c = sjcl.codec.utf8String.toBits(c));
g = new sjcl.cipher[f.cipher](a);
e.g(d, f);
d.key = a;
f.ct =
"ccm" === f.mode && sjcl.arrayBuffer && sjcl.arrayBuffer.ccm && b instanceof ArrayBuffer ? sjcl.arrayBuffer.ccm.encrypt(g, b, f.iv, c, f.ts) : sjcl.mode[f.mode].encrypt(g, b, f.iv, c, f.ts);
return f;
},
encrypt: function(a, b, c, d) {
var e = sjcl.json,
f = e.ja.apply(e, arguments);
return e.encode(f);
},
ia: function(a, b, c, d) {
c = c || {};
d = d || {};
var e = sjcl.json;
b = e.g(e.g(e.g({}, e.defaults), b), c, !0);
var f, g;
f = b.adata;
"string" === typeof b.salt && (b.salt = sjcl.codec.base64.toBits(b.salt));
"string" === typeof b.iv && (b.iv = sjcl.codec.base64.toBits(b.iv));
if (
!sjcl.mode[b.mode] ||
!sjcl.cipher[b.cipher] ||
("string" === typeof a && 100 >= b.iter) ||
(64 !== b.ts && 96 !== b.ts && 128 !== b.ts) ||
(128 !== b.ks && 192 !== b.ks && 0x100 !== b.ks) ||
!b.iv ||
2 > b.iv.length ||
4 < b.iv.length
)
throw new sjcl.exception.invalid("json decrypt: invalid parameters");
"string" === typeof a
? ((g = sjcl.misc.cachedPbkdf2(a, b)), (a = g.key.slice(0, b.ks / 32)), (b.salt = g.salt))
: sjcl.ecc && a instanceof sjcl.ecc.elGamal.secretKey && (a = a.unkem(sjcl.codec.base64.toBits(b.kemtag)).slice(0, b.ks / 32));
"string" === typeof f && (f = sjcl.codec.utf8String.toBits(f));
g = new sjcl.cipher[b.cipher](a);
f =
"ccm" === b.mode && sjcl.arrayBuffer && sjcl.arrayBuffer.ccm && b.ct instanceof ArrayBuffer
? sjcl.arrayBuffer.ccm.decrypt(g, b.ct, b.iv, b.tag, f, b.ts)
: sjcl.mode[b.mode].decrypt(g, b.ct, b.iv, f, b.ts);
e.g(d, b);
d.key = a;
return 1 === c.raw ? f : sjcl.codec.utf8String.fromBits(f);
},
decrypt: function(a, b, c, d) {
var e = sjcl.json;
return e.ia(a, e.decode(b), c, d);
},
encode: function(a) {
var b,
c = "{",
d = "";
for (b in a)
if (a.hasOwnProperty(b)) {
if (!b.match(/^[a-z0-9]+$/i)) throw new sjcl.exception.invalid("json encode: invalid property name");
c += d + '"' + b + '":';
d = ",";
switch (typeof a[b]) {
case "number":
case "boolean":
c += a[b];
break;
case "string":
c += '"' + escape(a[b]) + '"';
break;
case "object":
c += '"' + sjcl.codec.base64.fromBits(a[b], 0) + '"';
break;
default:
throw new sjcl.exception.bug("json encode: unsupported type");
}
}
return c + "}";
},
decode: function(a) {
a = a.replace(/\s/g, "");
if (!a.match(/^\{.*\}$/)) throw new sjcl.exception.invalid("json decode: this isn't json!");
a = a.replace(/^\{|\}$/g, "").split(/,/);
var b = {},
c,
d;
for (c = 0; c < a.length; c++) {
if (!(d = a[c].match(/^\s*(?:(["']?)([a-z][a-z0-9]*)\1)\s*:\s*(?:(-?\d+)|"([a-z0-9+\/%*_.@=\-]*)"|(true|false))$/i))) throw new sjcl.exception.invalid("json decode: this isn't json!");
null != d[3]
? (b[d[2]] = parseInt(d[3], 10))
: null != d[4] ? (b[d[2]] = d[2].match(/^(ct|adata|salt|iv)$/) ? sjcl.codec.base64.toBits(d[4]) : unescape(d[4])) : null != d[5] && (b[d[2]] = "true" === d[5]);
}
return b;
},
g: function(a, b, c) {
void 0 === a && (a = {});
if (void 0 === b) return a;
for (var d in b)
if (b.hasOwnProperty(d)) {
if (c && void 0 !== a[d] && a[d] !== b[d]) throw new sjcl.exception.invalid("required parameter overridden");
a[d] = b[d];
}
return a;
},
sa: function(a, b) {
var c = {},
d;
for (d in a) a.hasOwnProperty(d) && a[d] !== b[d] && (c[d] = a[d]);
return c;
},
ra: function(a, b) {
var c = {},
d;
for (d = 0; d < b.length; d++) void 0 !== a[b[d]] && (c[b[d]] = a[b[d]]);
return c;
},
};
sjcl.encrypt = sjcl.json.encrypt;
sjcl.decrypt = sjcl.json.decrypt;
sjcl.misc.pa = {};
sjcl.misc.cachedPbkdf2 = function(a, b) {
var c = sjcl.misc.pa,
d;
b = b || {};
d = b.iter || 1e3;
c = c[a] = c[a] || {};
d = c[d] = c[d] || { firstSalt: b.salt && b.salt.length ? b.salt.slice(0) : sjcl.random.randomWords(2, 0) };
c = void 0 === b.salt ? d.firstSalt : b.salt;
d[c] = d[c] || sjcl.misc.pbkdf2(a, c, b.iter);
return { key: d[c].slice(0), salt: c.slice(0) };
};
"undefined" !== typeof module && module.exports && (module.exports = sjcl);
"function" === typeof define &&
define([], function() {
return sjcl;
});
Reference in New Issue View Git Blame Copy Permalink