58 lines
2.2 KiB
JavaScript
58 lines
2.2 KiB
JavaScript
import { xchacha20poly1305 } from './chacha.js';
|
|
import { xsalsa20poly1305 } from './salsa.js';
|
|
import { concatBytes, ensureBytes, utf8ToBytes } from './utils.js';
|
|
import { aes_256_gcm } from './webcrypto/aes.js';
|
|
import { randomBytes } from './webcrypto/utils.js';
|
|
export { utf8ToBytes };
|
|
/**
|
|
* Alias to xsalsa20poly1305, for compatibility with libsodium / nacl
|
|
*/
|
|
export function secretbox(key, nonce) {
|
|
ensureBytes(key);
|
|
ensureBytes(nonce);
|
|
const xs = xsalsa20poly1305(key, nonce);
|
|
return { seal: xs.encrypt, open: xs.decrypt };
|
|
}
|
|
export function randomKey() {
|
|
return randomBytes(32);
|
|
}
|
|
/**
|
|
* Encrypt plaintext under key with random nonce, using xchacha20poly1305.
|
|
* User never touches nonce: it is prepended to ciphertext.
|
|
*/
|
|
export function encrypt(key, plaintext) {
|
|
ensureBytes(key);
|
|
const nonce = randomBytes(24);
|
|
const ciphertext = xchacha20poly1305(key, nonce).encrypt(plaintext);
|
|
return concatBytes(nonce, ciphertext);
|
|
}
|
|
/**
|
|
* Decrypt plaintext under key with random nonce, using xchacha20poly1305.
|
|
* User never touches nonce: it is prepended to ciphertext.
|
|
*/
|
|
export function decrypt(key, ciphertext) {
|
|
const nonceLength = 24;
|
|
ensureBytes(ciphertext);
|
|
if (ciphertext.length <= nonceLength)
|
|
throw new Error('invalid ciphertext length');
|
|
const nonce = ciphertext.subarray(0, nonceLength);
|
|
const ciphertextWithoutNonce = ciphertext.subarray(nonceLength);
|
|
return xchacha20poly1305(key, nonce).decrypt(ciphertextWithoutNonce);
|
|
}
|
|
export async function aes_encrypt(key, plaintext) {
|
|
const nonceLength = 12;
|
|
ensureBytes(key);
|
|
const nonce = randomBytes(nonceLength);
|
|
const ciphertext = await aes_256_gcm(key, nonce).encrypt(plaintext);
|
|
return concatBytes(nonce, ciphertext);
|
|
}
|
|
export async function aes_decrypt(key, ciphertext) {
|
|
const nonceLength = 12;
|
|
ensureBytes(ciphertext);
|
|
if (ciphertext.length <= nonceLength)
|
|
throw new Error('invalid ciphertext length');
|
|
const nonce = ciphertext.subarray(0, nonceLength);
|
|
const ciphertextWithoutNonce = ciphertext.subarray(nonceLength);
|
|
return aes_256_gcm(key, nonce).decrypt(ciphertextWithoutNonce);
|
|
}
|
|
//# sourceMappingURL=simple.js.map
|