mirror of
https://github.com/denoland/deno.git
synced 2024-12-22 15:24:46 -05:00
dda0f1c343
`ZeroCopyBuf` was convenient to use, but sometimes it did hide details that some copies were necessary in certain cases. Also it made it way to easy for the caller to pass around and convert into different values. This commit splits `ZeroCopyBuf` into `JsBuffer` (an array buffer coming from V8) and `ToJsBuffer` (a Rust buffer that will be converted into a V8 array buffer). As a result some magical conversions were removed (they were never used) limiting the API surface and preparing for changes in #19534.
365 lines
9.7 KiB
Rust
365 lines
9.7 KiB
Rust
// Copyright 2018-2023 the Deno authors. All rights reserved. MIT license.
|
|
|
|
use aes::cipher::block_padding::Pkcs7;
|
|
use aes::cipher::BlockDecryptMut;
|
|
use aes::cipher::KeyIvInit;
|
|
use aes_gcm::aead::generic_array::typenum::U12;
|
|
use aes_gcm::aead::generic_array::typenum::U16;
|
|
use aes_gcm::aead::generic_array::ArrayLength;
|
|
use aes_gcm::aes::Aes128;
|
|
use aes_gcm::aes::Aes192;
|
|
use aes_gcm::aes::Aes256;
|
|
use aes_gcm::AeadInPlace;
|
|
use aes_gcm::KeyInit;
|
|
use aes_gcm::Nonce;
|
|
use ctr::cipher::StreamCipher;
|
|
use ctr::Ctr128BE;
|
|
use ctr::Ctr32BE;
|
|
use ctr::Ctr64BE;
|
|
use deno_core::error::custom_error;
|
|
use deno_core::error::type_error;
|
|
use deno_core::error::AnyError;
|
|
use deno_core::op;
|
|
use deno_core::task::spawn_blocking;
|
|
use deno_core::JsBuffer;
|
|
use deno_core::ToJsBuffer;
|
|
use rsa::pkcs1::DecodeRsaPrivateKey;
|
|
use rsa::PaddingScheme;
|
|
use serde::Deserialize;
|
|
use sha1::Digest;
|
|
use sha1::Sha1;
|
|
use sha2::Sha256;
|
|
use sha2::Sha384;
|
|
use sha2::Sha512;
|
|
|
|
use crate::shared::*;
|
|
|
|
#[derive(Deserialize)]
|
|
#[serde(rename_all = "camelCase")]
|
|
pub struct DecryptOptions {
|
|
key: V8RawKeyData,
|
|
#[serde(flatten)]
|
|
algorithm: DecryptAlgorithm,
|
|
}
|
|
|
|
#[derive(Deserialize)]
|
|
#[serde(rename_all = "camelCase", tag = "algorithm")]
|
|
pub enum DecryptAlgorithm {
|
|
#[serde(rename = "RSA-OAEP")]
|
|
RsaOaep {
|
|
hash: ShaHash,
|
|
#[serde(with = "serde_bytes")]
|
|
label: Vec<u8>,
|
|
},
|
|
#[serde(rename = "AES-CBC", rename_all = "camelCase")]
|
|
AesCbc {
|
|
#[serde(with = "serde_bytes")]
|
|
iv: Vec<u8>,
|
|
length: usize,
|
|
},
|
|
#[serde(rename = "AES-CTR", rename_all = "camelCase")]
|
|
AesCtr {
|
|
#[serde(with = "serde_bytes")]
|
|
counter: Vec<u8>,
|
|
ctr_length: usize,
|
|
key_length: usize,
|
|
},
|
|
#[serde(rename = "AES-GCM", rename_all = "camelCase")]
|
|
AesGcm {
|
|
#[serde(with = "serde_bytes")]
|
|
iv: Vec<u8>,
|
|
#[serde(with = "serde_bytes")]
|
|
additional_data: Option<Vec<u8>>,
|
|
length: usize,
|
|
tag_length: usize,
|
|
},
|
|
}
|
|
|
|
#[op]
|
|
pub async fn op_crypto_decrypt(
|
|
opts: DecryptOptions,
|
|
data: JsBuffer,
|
|
) -> Result<ToJsBuffer, AnyError> {
|
|
let key = opts.key;
|
|
let fun = move || match opts.algorithm {
|
|
DecryptAlgorithm::RsaOaep { hash, label } => {
|
|
decrypt_rsa_oaep(key, hash, label, &data)
|
|
}
|
|
DecryptAlgorithm::AesCbc { iv, length } => {
|
|
decrypt_aes_cbc(key, length, iv, &data)
|
|
}
|
|
DecryptAlgorithm::AesCtr {
|
|
counter,
|
|
ctr_length,
|
|
key_length,
|
|
} => decrypt_aes_ctr(key, key_length, &counter, ctr_length, &data),
|
|
DecryptAlgorithm::AesGcm {
|
|
iv,
|
|
additional_data,
|
|
length,
|
|
tag_length,
|
|
} => decrypt_aes_gcm(key, length, tag_length, iv, additional_data, &data),
|
|
};
|
|
let buf = spawn_blocking(fun).await.unwrap()?;
|
|
Ok(buf.into())
|
|
}
|
|
|
|
fn decrypt_rsa_oaep(
|
|
key: V8RawKeyData,
|
|
hash: ShaHash,
|
|
label: Vec<u8>,
|
|
data: &[u8],
|
|
) -> Result<Vec<u8>, deno_core::anyhow::Error> {
|
|
let key = key.as_rsa_private_key()?;
|
|
|
|
let private_key = rsa::RsaPrivateKey::from_pkcs1_der(key)?;
|
|
let label = Some(String::from_utf8_lossy(&label).to_string());
|
|
|
|
let padding = match hash {
|
|
ShaHash::Sha1 => PaddingScheme::OAEP {
|
|
digest: Box::new(Sha1::new()),
|
|
mgf_digest: Box::new(Sha1::new()),
|
|
label,
|
|
},
|
|
ShaHash::Sha256 => PaddingScheme::OAEP {
|
|
digest: Box::new(Sha256::new()),
|
|
mgf_digest: Box::new(Sha256::new()),
|
|
label,
|
|
},
|
|
ShaHash::Sha384 => PaddingScheme::OAEP {
|
|
digest: Box::new(Sha384::new()),
|
|
mgf_digest: Box::new(Sha384::new()),
|
|
label,
|
|
},
|
|
ShaHash::Sha512 => PaddingScheme::OAEP {
|
|
digest: Box::new(Sha512::new()),
|
|
mgf_digest: Box::new(Sha512::new()),
|
|
label,
|
|
},
|
|
};
|
|
|
|
private_key
|
|
.decrypt(padding, data)
|
|
.map_err(|e| custom_error("DOMExceptionOperationError", e.to_string()))
|
|
}
|
|
|
|
fn decrypt_aes_cbc(
|
|
key: V8RawKeyData,
|
|
length: usize,
|
|
iv: Vec<u8>,
|
|
data: &[u8],
|
|
) -> Result<Vec<u8>, deno_core::anyhow::Error> {
|
|
let key = key.as_secret_key()?;
|
|
|
|
// 2.
|
|
let plaintext = match length {
|
|
128 => {
|
|
// Section 10.3 Step 2 of RFC 2315 https://www.rfc-editor.org/rfc/rfc2315
|
|
type Aes128CbcDec = cbc::Decryptor<aes::Aes128>;
|
|
let cipher = Aes128CbcDec::new_from_slices(key, &iv).map_err(|_| {
|
|
custom_error(
|
|
"DOMExceptionOperationError",
|
|
"Invalid key or iv".to_string(),
|
|
)
|
|
})?;
|
|
|
|
cipher.decrypt_padded_vec_mut::<Pkcs7>(data).map_err(|_| {
|
|
custom_error(
|
|
"DOMExceptionOperationError",
|
|
"Decryption failed".to_string(),
|
|
)
|
|
})?
|
|
}
|
|
192 => {
|
|
// Section 10.3 Step 2 of RFC 2315 https://www.rfc-editor.org/rfc/rfc2315
|
|
type Aes192CbcDec = cbc::Decryptor<aes::Aes192>;
|
|
let cipher = Aes192CbcDec::new_from_slices(key, &iv).map_err(|_| {
|
|
custom_error(
|
|
"DOMExceptionOperationError",
|
|
"Invalid key or iv".to_string(),
|
|
)
|
|
})?;
|
|
|
|
cipher.decrypt_padded_vec_mut::<Pkcs7>(data).map_err(|_| {
|
|
custom_error(
|
|
"DOMExceptionOperationError",
|
|
"Decryption failed".to_string(),
|
|
)
|
|
})?
|
|
}
|
|
256 => {
|
|
// Section 10.3 Step 2 of RFC 2315 https://www.rfc-editor.org/rfc/rfc2315
|
|
type Aes256CbcDec = cbc::Decryptor<aes::Aes256>;
|
|
let cipher = Aes256CbcDec::new_from_slices(key, &iv).map_err(|_| {
|
|
custom_error(
|
|
"DOMExceptionOperationError",
|
|
"Invalid key or iv".to_string(),
|
|
)
|
|
})?;
|
|
|
|
cipher.decrypt_padded_vec_mut::<Pkcs7>(data).map_err(|_| {
|
|
custom_error(
|
|
"DOMExceptionOperationError",
|
|
"Decryption failed".to_string(),
|
|
)
|
|
})?
|
|
}
|
|
_ => unreachable!(),
|
|
};
|
|
|
|
// 6.
|
|
Ok(plaintext)
|
|
}
|
|
|
|
fn decrypt_aes_ctr_gen<B>(
|
|
key: &[u8],
|
|
counter: &[u8],
|
|
data: &[u8],
|
|
) -> Result<Vec<u8>, AnyError>
|
|
where
|
|
B: KeyIvInit + StreamCipher,
|
|
{
|
|
let mut cipher = B::new(key.into(), counter.into());
|
|
|
|
let mut plaintext = data.to_vec();
|
|
cipher
|
|
.try_apply_keystream(&mut plaintext)
|
|
.map_err(|_| operation_error("tried to decrypt too much data"))?;
|
|
|
|
Ok(plaintext)
|
|
}
|
|
|
|
fn decrypt_aes_gcm_gen<N: ArrayLength<u8>>(
|
|
key: &[u8],
|
|
tag: &aes_gcm::Tag,
|
|
nonce: &[u8],
|
|
length: usize,
|
|
additional_data: Vec<u8>,
|
|
plaintext: &mut [u8],
|
|
) -> Result<(), AnyError> {
|
|
let nonce = Nonce::from_slice(nonce);
|
|
match length {
|
|
128 => {
|
|
let cipher = aes_gcm::AesGcm::<Aes128, N>::new_from_slice(key)
|
|
.map_err(|_| operation_error("Decryption failed"))?;
|
|
cipher
|
|
.decrypt_in_place_detached(
|
|
nonce,
|
|
additional_data.as_slice(),
|
|
plaintext,
|
|
tag,
|
|
)
|
|
.map_err(|_| operation_error("Decryption failed"))?
|
|
}
|
|
192 => {
|
|
let cipher = aes_gcm::AesGcm::<Aes192, N>::new_from_slice(key)
|
|
.map_err(|_| operation_error("Decryption failed"))?;
|
|
cipher
|
|
.decrypt_in_place_detached(
|
|
nonce,
|
|
additional_data.as_slice(),
|
|
plaintext,
|
|
tag,
|
|
)
|
|
.map_err(|_| operation_error("Decryption failed"))?
|
|
}
|
|
256 => {
|
|
let cipher = aes_gcm::AesGcm::<Aes256, N>::new_from_slice(key)
|
|
.map_err(|_| operation_error("Decryption failed"))?;
|
|
cipher
|
|
.decrypt_in_place_detached(
|
|
nonce,
|
|
additional_data.as_slice(),
|
|
plaintext,
|
|
tag,
|
|
)
|
|
.map_err(|_| operation_error("Decryption failed"))?
|
|
}
|
|
_ => return Err(type_error("invalid length")),
|
|
};
|
|
|
|
Ok(())
|
|
}
|
|
|
|
fn decrypt_aes_ctr(
|
|
key: V8RawKeyData,
|
|
key_length: usize,
|
|
counter: &[u8],
|
|
ctr_length: usize,
|
|
data: &[u8],
|
|
) -> Result<Vec<u8>, deno_core::anyhow::Error> {
|
|
let key = key.as_secret_key()?;
|
|
|
|
match ctr_length {
|
|
32 => match key_length {
|
|
128 => decrypt_aes_ctr_gen::<Ctr32BE<aes::Aes128>>(key, counter, data),
|
|
192 => decrypt_aes_ctr_gen::<Ctr32BE<aes::Aes192>>(key, counter, data),
|
|
256 => decrypt_aes_ctr_gen::<Ctr32BE<aes::Aes256>>(key, counter, data),
|
|
_ => Err(type_error("invalid length")),
|
|
},
|
|
64 => match key_length {
|
|
128 => decrypt_aes_ctr_gen::<Ctr64BE<aes::Aes128>>(key, counter, data),
|
|
192 => decrypt_aes_ctr_gen::<Ctr64BE<aes::Aes192>>(key, counter, data),
|
|
256 => decrypt_aes_ctr_gen::<Ctr64BE<aes::Aes256>>(key, counter, data),
|
|
_ => Err(type_error("invalid length")),
|
|
},
|
|
128 => match key_length {
|
|
128 => decrypt_aes_ctr_gen::<Ctr128BE<aes::Aes128>>(key, counter, data),
|
|
192 => decrypt_aes_ctr_gen::<Ctr128BE<aes::Aes192>>(key, counter, data),
|
|
256 => decrypt_aes_ctr_gen::<Ctr128BE<aes::Aes256>>(key, counter, data),
|
|
_ => Err(type_error("invalid length")),
|
|
},
|
|
_ => Err(type_error(
|
|
"invalid counter length. Currently supported 32/64/128 bits",
|
|
)),
|
|
}
|
|
}
|
|
|
|
fn decrypt_aes_gcm(
|
|
key: V8RawKeyData,
|
|
length: usize,
|
|
tag_length: usize,
|
|
iv: Vec<u8>,
|
|
additional_data: Option<Vec<u8>>,
|
|
data: &[u8],
|
|
) -> Result<Vec<u8>, AnyError> {
|
|
let key = key.as_secret_key()?;
|
|
let additional_data = additional_data.unwrap_or_default();
|
|
|
|
// The `aes_gcm` crate only supports 128 bits tag length.
|
|
//
|
|
// Note that encryption won't fail, it instead truncates the tag
|
|
// to the specified tag length as specified in the spec.
|
|
if tag_length != 128 {
|
|
return Err(type_error("tag length not equal to 128"));
|
|
}
|
|
|
|
let sep = data.len() - (tag_length / 8);
|
|
let tag = &data[sep..];
|
|
|
|
// The actual ciphertext, called plaintext because it is reused in place.
|
|
let mut plaintext = data[..sep].to_vec();
|
|
|
|
// Fixed 96-bit or 128-bit nonce
|
|
match iv.len() {
|
|
12 => decrypt_aes_gcm_gen::<U12>(
|
|
key,
|
|
tag.into(),
|
|
&iv,
|
|
length,
|
|
additional_data,
|
|
&mut plaintext,
|
|
)?,
|
|
16 => decrypt_aes_gcm_gen::<U16>(
|
|
key,
|
|
tag.into(),
|
|
&iv,
|
|
length,
|
|
additional_data,
|
|
&mut plaintext,
|
|
)?,
|
|
_ => return Err(type_error("iv length not equal to 12 or 16")),
|
|
}
|
|
|
|
Ok(plaintext)
|
|
}
|