48 lines
1.7 KiB
TypeScript
48 lines
1.7 KiB
TypeScript
/*
|
|
Copyright 2020 The Matrix.org Foundation C.I.C.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
import {Key} from "./common";
|
|
import type {KeyDescription} from "./common";
|
|
import type {Platform} from "../../platform/web/Platform.js";
|
|
|
|
const DEFAULT_ITERATIONS = 500000;
|
|
const DEFAULT_BITSIZE = 256;
|
|
|
|
/**
|
|
* @param {KeyDescription} keyDescription
|
|
* @param {string} passphrase
|
|
* @param {Platform} platform
|
|
* @return {Key}
|
|
*/
|
|
export async function keyFromPassphrase(keyDescription: KeyDescription, passphrase: string, platform: Platform): Promise<Key> {
|
|
const {passphraseParams} = keyDescription;
|
|
if (!passphraseParams) {
|
|
throw new Error("not a passphrase key");
|
|
}
|
|
if (passphraseParams.algorithm !== "m.pbkdf2") {
|
|
throw new Error(`Unsupported passphrase algorithm: ${passphraseParams.algorithm}`);
|
|
}
|
|
const {utf8} = platform.encoding;
|
|
const keyBits = await platform.crypto.derive.pbkdf2(
|
|
utf8.encode(passphrase),
|
|
passphraseParams.iterations || DEFAULT_ITERATIONS,
|
|
// salt is just a random string, not encoded in any way
|
|
utf8.encode(passphraseParams.salt),
|
|
"SHA-512",
|
|
passphraseParams.bits || DEFAULT_BITSIZE);
|
|
return new Key(keyDescription, keyBits);
|
|
}
|