awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 02:27:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update srp.ts

Browse Source
This commit is contained in:
Daniel Hougaard
2024-02-22 05:00:25 +01:00
parent f378d6cc2b
commit 5680b984cf
1 changed files with 9 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/lib/crypto/srp.ts
+9 -5
View File
@@ -2,12 +2,16 @@ import argon2 from "argon2";
import crypto from "crypto"; import crypto from "crypto";
import jsrp from "jsrp"; import jsrp from "jsrp";
import nacl from "tweetnacl"; import nacl from "tweetnacl";
import { encodeBase64 } from "tweetnacl-util"; import * as tweetnacl from "tweetnacl-util";
import { TUserEncryptionKeys } from "@app/db/schemas"; import { TUserEncryptionKeys } from "@app/db/schemas";
import { decryptSymmetric, encryptAsymmetric, encryptSymmetric } from "./encryption"; import { decryptSymmetric, encryptAsymmetric, encryptSymmetric } from "./encryption";
// Importing the argon2 constants from the argon2 module fails due to an issue with importing commonjs modules.
// Read more: https://stackoverflow.com/questions/70605320/named-export-types-not-found-the-requested-module-mongoose-is-a-commonjs-mo
const ARGON_2_ID = 2;
export const generateSrpServerKey = async (salt: string, verifier: string) => { export const generateSrpServerKey = async (salt: string, verifier: string) => {
// eslint-disable-next-line new-cap // eslint-disable-next-line new-cap
const server = new jsrp.server(); const server = new jsrp.server();
@@ -38,8 +42,8 @@ export const generateUserSrpKeys = async (email: string, password: string) => {
const pair = nacl.box.keyPair(); const pair = nacl.box.keyPair();
const secretKeyUint8Array = pair.secretKey; const secretKeyUint8Array = pair.secretKey;
const publicKeyUint8Array = pair.publicKey; const publicKeyUint8Array = pair.publicKey;
const privateKey = encodeBase64(secretKeyUint8Array); const privateKey = tweetnacl.encodeBase64(secretKeyUint8Array);
const publicKey = encodeBase64(publicKeyUint8Array); const publicKey = tweetnacl.encodeBase64(publicKeyUint8Array);
// eslint-disable-next-line // eslint-disable-next-line
const client = new jsrp.client(); const client = new jsrp.client();
@@ -58,7 +62,7 @@ export const generateUserSrpKeys = async (email: string, password: string) => {
timeCost: 3, timeCost: 3,
parallelism: 1, parallelism: 1,
hashLength: 32, hashLength: 32,
type: 2, type: ARGON_2_ID,
raw: true raw: true
}); });
if (!derivedKey) throw new Error("Failed to derive key from password"); if (!derivedKey) throw new Error("Failed to derive key from password");
@@ -102,7 +106,7 @@ export const getUserPrivateKey = async (password: string, user: TUserEncryptionK
timeCost: 3, timeCost: 3,
parallelism: 1, parallelism: 1,
hashLength: 32, hashLength: 32,
type: 2, type: ARGON_2_ID,
raw: true raw: true
}); });
if (!derivedKey) throw new Error("Failed to derive key from password"); if (!derivedKey) throw new Error("Failed to derive key from password");