This commit is contained in:
Danny Coates 2017-07-12 10:53:29 -07:00
parent ee8ff3d220
commit b32e63c305
No known key found for this signature in database
GPG Key ID: 4C442633C62E00CB
7 changed files with 133 additions and 112 deletions

View File

@ -37,20 +37,20 @@ $(document).ready(function() {
fileReceiver.on('decrypting', isStillDecrypting => { fileReceiver.on('decrypting', isStillDecrypting => {
// The file is being decrypted // The file is being decrypted
if (isStillDecrypting) { if (isStillDecrypting) {
console.log('Decrypting') console.log('Decrypting');
} else { } else {
console.log('Done decrypting') console.log('Done decrypting');
} }
}) });
fileReceiver.on('hashing', isStillHashing => { fileReceiver.on('hashing', isStillHashing => {
// The file is being hashed to make sure a malicious user hasn't tampered with it // The file is being hashed to make sure a malicious user hasn't tampered with it
if (isStillHashing) { if (isStillHashing) {
console.log('Checking file integrity') console.log('Checking file integrity');
} else { } else {
console.log('Integrity check done') console.log('Integrity check done');
} }
}) });
fileReceiver fileReceiver
.download() .download()

View File

@ -61,10 +61,12 @@ class FileReceiver extends EventEmitter {
true, true,
['encrypt', 'decrypt'] ['encrypt', 'decrypt']
) )
]).then(([fdata, key]) => { ])
.then(([fdata, key]) => {
this.emit('decrypting', true); this.emit('decrypting', true);
return Promise.all([ return Promise.all([
window.crypto.subtle.decrypt( window.crypto.subtle
.decrypt(
{ {
name: 'AES-GCM', name: 'AES-GCM',
iv: hexToArray(fdata.iv), iv: hexToArray(fdata.iv),
@ -72,11 +74,12 @@ class FileReceiver extends EventEmitter {
}, },
key, key,
fdata.data fdata.data
).then(decrypted => { )
.then(decrypted => {
this.emit('decrypting', false); this.emit('decrypting', false);
return new Promise((resolve, reject) => { return new Promise((resolve, reject) => {
resolve(decrypted); resolve(decrypted);
}) });
}), }),
new Promise((resolve, reject) => { new Promise((resolve, reject) => {
resolve(fdata.filename); resolve(fdata.filename);
@ -85,16 +88,21 @@ class FileReceiver extends EventEmitter {
resolve(hexToArray(fdata.aad)); resolve(hexToArray(fdata.aad));
}) })
]); ]);
}).then(([decrypted, fname, proposedHash]) => { })
.then(([decrypted, fname, proposedHash]) => {
this.emit('hashing', true); this.emit('hashing', true);
return window.crypto.subtle.digest('SHA-256', decrypted).then(calculatedHash => { return window.crypto.subtle
.digest('SHA-256', decrypted)
.then(calculatedHash => {
this.emit('hashing', false); this.emit('hashing', false);
const integrity = new Uint8Array(calculatedHash).toString() === proposedHash.toString(); const integrity =
new Uint8Array(calculatedHash).toString() ===
proposedHash.toString();
if (!integrity) { if (!integrity) {
return new Promise((resolve, reject) => { return new Promise((resolve, reject) => {
console.log('This file has been tampered with.') console.log('This file has been tampered with.');
reject(); reject();
}) });
} }
return Promise.all([ return Promise.all([
@ -105,8 +113,8 @@ class FileReceiver extends EventEmitter {
resolve(fname); resolve(fname);
}) })
]); ]);
}) });
}) });
} }
} }

View File

@ -62,7 +62,7 @@ class FileSender extends EventEmitter {
self.emit('hashing', false); self.emit('hashing', false);
self.emit('encrypting', true); self.emit('encrypting', true);
resolve({ plaintext: plaintext, hash: new Uint8Array(hash) }); resolve({ plaintext: plaintext, hash: new Uint8Array(hash) });
}) });
}; };
reader.onerror = function(err) { reader.onerror = function(err) {
reject(err); reject(err);
@ -81,14 +81,17 @@ class FileSender extends EventEmitter {
}, },
secretKey, secretKey,
file.plaintext file.plaintext
).then(encrypted => { )
.then(encrypted => {
self.emit('encrypting', false); self.emit('encrypting', false);
return new Promise((resolve, reject) => { return new Promise((resolve, reject) => {
resolve(encrypted); resolve(encrypted);
}) });
}), }),
window.crypto.subtle.exportKey('jwk', secretKey), window.crypto.subtle.exportKey('jwk', secretKey),
new Promise((resolve, reject) => { resolve(file.hash) }) new Promise((resolve, reject) => {
resolve(file.hash);
})
]); ]);
}) })
.then(([encrypted, keydata, hash]) => { .then(([encrypted, keydata, hash]) => {

View File

@ -8,7 +8,7 @@ $(document).ready(function() {
gcmCompliant().catch(err => { gcmCompliant().catch(err => {
$('#page-one').hide(); $('#page-one').hide();
$('#compliance-error').show(); $('#compliance-error').show();
}) });
// reset copy button // reset copy button
const $copyBtn = $('#copy-btn'); const $copyBtn = $('#copy-btn');
@ -88,29 +88,29 @@ $(document).ready(function() {
fileSender.on('loading', isStillLoading => { fileSender.on('loading', isStillLoading => {
// The file is loading into Firefox at this stage // The file is loading into Firefox at this stage
if (isStillLoading) { if (isStillLoading) {
console.log('Processing') console.log('Processing');
} else { } else {
console.log('Finished processing') console.log('Finished processing');
} }
}) });
fileSender.on('hashing', isStillHashing => { fileSender.on('hashing', isStillHashing => {
// The file is being hashed // The file is being hashed
if (isStillHashing) { if (isStillHashing) {
console.log('Hashing'); console.log('Hashing');
} else { } else {
console.log('Finished hashing') console.log('Finished hashing');
} }
}) });
fileSender.on('encrypting', isStillEncrypting => { fileSender.on('encrypting', isStillEncrypting => {
// The file is being encrypted // The file is being encrypted
if (isStillEncrypting) { if (isStillEncrypting) {
console.log('Encrypting'); console.log('Encrypting');
} else { } else {
console.log('Finished encrypting') console.log('Finished encrypting');
} }
}) });
fileSender fileSender
.upload() .upload()

View File

@ -34,15 +34,18 @@ function notify(str) {
function gcmCompliant() { function gcmCompliant() {
try { try {
return window.crypto.subtle.generateKey( return window.crypto.subtle
.generateKey(
{ {
name: 'AES-GCM', name: 'AES-GCM',
length: 128 length: 128
}, },
true, true,
['encrypt', 'decrypt'] ['encrypt', 'decrypt']
).then(key => { )
return window.crypto.subtle.encrypt( .then(key => {
return window.crypto.subtle
.encrypt(
{ {
name: 'AES-GCM', name: 'AES-GCM',
iv: window.crypto.getRandomValues(new Uint8Array(12)), iv: window.crypto.getRandomValues(new Uint8Array(12)),
@ -53,14 +56,15 @@ function gcmCompliant() {
new ArrayBuffer(8) new ArrayBuffer(8)
) )
.then(() => { .then(() => {
return Promise.resolve() return Promise.resolve();
}) })
.catch(err => { .catch(err => {
return Promise.reject()
})
}).catch(err => {
return Promise.reject(); return Promise.reject();
});
}) })
.catch(err => {
return Promise.reject();
});
} catch (err) { } catch (err) {
return Promise.reject(); return Promise.reject();
} }

View File

@ -92,7 +92,9 @@ app.get('/assets/download/:id', (req, res) => {
storage storage
.metadata(id) .metadata(id)
.then(meta => { .then(meta => {
storage.length(id).then(contentLength => { storage
.length(id)
.then(contentLength => {
res.writeHead(200, { res.writeHead(200, {
'Content-Disposition': 'attachment; filename=' + meta.filename, 'Content-Disposition': 'attachment; filename=' + meta.filename,
'Content-Type': 'application/octet-stream', 'Content-Type': 'application/octet-stream',
@ -162,10 +164,12 @@ app.post('/upload', (req, res, next) => {
return; return;
} }
if (!validateIV(meta.id) || if (
!validateIV(meta.id) ||
!meta.hasOwnProperty('aad') || !meta.hasOwnProperty('aad') ||
!meta.hasOwnProperty('id') || !meta.hasOwnProperty('id') ||
!meta.hasOwnProperty('filename')) { !meta.hasOwnProperty('filename')
) {
res.sendStatus(404); res.sendStatus(404);
return; return;
} }
@ -216,4 +220,4 @@ const validateIV = route_id => {
module.exports = { module.exports = {
server: server, server: server,
storage: storage storage: storage
} };

View File

@ -129,7 +129,9 @@ function localGet(id) {
function localSet(newId, file, filename, meta) { function localSet(newId, file, filename, meta) {
return new Promise((resolve, reject) => { return new Promise((resolve, reject) => {
const fstream = fs.createWriteStream(path.join(__dirname, '../static', newId)); const fstream = fs.createWriteStream(
path.join(__dirname, '../static', newId)
);
file.pipe(fstream); file.pipe(fstream);
fstream.on('close', () => { fstream.on('close', () => {
redis_client.hmset(newId, meta); redis_client.hmset(newId, meta);