Desktop/ts/context/Crypto.node.ts

// Copyright 2021 Signal Messenger, LLC
// SPDX-License-Identifier: AGPL-3.0-only

import { Buffer } from 'node:buffer';
import type { Decipheriv } from 'node:crypto';
import crypto from 'node:crypto';

import { strictAssert } from '../util/assert.std.js';
import type { HashType } from '../types/Crypto.std.js';
import { CipherType } from '../types/Crypto.std.js';

const AUTH_TAG_SIZE = 16;

export class Crypto {
  public sign(
    key: Uint8Array<ArrayBuffer>,
    data: Uint8Array<ArrayBuffer>
  ): Uint8Array<ArrayBuffer> {
    return crypto
      .createHmac('sha256', Buffer.from(key))
      .update(Buffer.from(data))
      .digest();
  }

  public hash(
    type: HashType,
    data: Uint8Array<ArrayBuffer>
  ): Uint8Array<ArrayBuffer> {
    return crypto.createHash(type).update(Buffer.from(data)).digest();
  }

  public encrypt(
    cipherType: CipherType,
    {
      key,
      plaintext,
      iv,
      aad,
    }: Readonly<{
      key: Uint8Array<ArrayBuffer>;
      plaintext: Uint8Array<ArrayBuffer>;
      iv: Uint8Array<ArrayBuffer>;
      aad?: Uint8Array<ArrayBuffer>;
    }>
  ): Uint8Array<ArrayBuffer> {
    if (cipherType === CipherType.AES256GCM) {
      const gcm = crypto.createCipheriv(
        cipherType,
        Buffer.from(key),
        Buffer.from(iv)
      );

      if (aad) {
        gcm.setAAD(aad);
      }

      const first = gcm.update(Buffer.from(plaintext));
      const last = gcm.final();
      const tag = gcm.getAuthTag();
      strictAssert(tag.length === AUTH_TAG_SIZE, 'Invalid auth tag size');

      return Buffer.concat([first, last, tag]);
    }

    strictAssert(aad === undefined, `AAD is not supported for: ${cipherType}`);
    const cipher = crypto.createCipheriv(
      cipherType,
      Buffer.from(key),
      Buffer.from(iv)
    );
    return Buffer.concat([
      cipher.update(Buffer.from(plaintext)),
      cipher.final(),
    ]);
  }

  public decrypt(
    cipherType: CipherType,
    {
      key,
      ciphertext,
      iv,
      aad,
    }: Readonly<{
      key: Uint8Array<ArrayBuffer>;
      ciphertext: Uint8Array<ArrayBuffer>;
      iv: Uint8Array<ArrayBuffer>;
      aad?: Uint8Array<ArrayBuffer>;
    }>
  ): Uint8Array<ArrayBuffer> {
    let decipher: Decipheriv;
    let input = Buffer.from(ciphertext);
    if (cipherType === CipherType.AES256GCM) {
      const gcm = crypto.createDecipheriv(
        cipherType,
        Buffer.from(key),
        Buffer.from(iv)
      );

      if (input.length < AUTH_TAG_SIZE) {
        throw new Error('Invalid GCM ciphertext');
      }

      const tag = input.subarray(input.length - AUTH_TAG_SIZE);
      input = input.subarray(0, input.length - AUTH_TAG_SIZE);

      gcm.setAuthTag(tag);

      if (aad) {
        gcm.setAAD(aad);
      }

      decipher = gcm;
    } else {
      strictAssert(
        aad === undefined,
        `AAD is not supported for: ${cipherType}`
      );
      decipher = crypto.createDecipheriv(
        cipherType,
        Buffer.from(key),
        Buffer.from(iv)
      );
    }
    return Buffer.concat([decipher.update(input), decipher.final()]);
  }

  public randomInt(min: number, max: number): number {
    return crypto.randomInt(min, max);
  }

  public getRandomBytes(size: number): Uint8Array<ArrayBuffer> {
    return crypto.randomBytes(size);
  }

  public constantTimeEqual(
    left: Uint8Array<ArrayBuffer>,
    right: Uint8Array<ArrayBuffer>
  ): boolean {
    return crypto.timingSafeEqual(Buffer.from(left), Buffer.from(right));
  }
}