94374f0d19
Add support for AES-KW for key wrapping/unwrapping. Very similar implementation to other AES modes. Added generic tests for symmetric import and specific AES-KW ones. Adds ~400 test passes on WPT. Now we do better than Firefox in `WebCryptoAPI/wrapKey_unwrapKey`!
627 lines
25 KiB
C++
627 lines
25 KiB
C++
/*
|
|
* Copyright (c) 2024, Andrew Kaster <akaster@serenityos.org>
|
|
* Copyright (c) 2024, stelar7 <dudedbz@gmail.com>
|
|
* Copyright (c) 2024, Jelle Raaijmakers <jelle@ladybird.org>
|
|
*
|
|
* SPDX-License-Identifier: BSD-2-Clause
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include <AK/EnumBits.h>
|
|
#include <AK/String.h>
|
|
#include <LibCrypto/BigInt/UnsignedBigInteger.h>
|
|
#include <LibGC/Ptr.h>
|
|
#include <LibJS/Forward.h>
|
|
#include <LibWeb/Bindings/SubtleCryptoPrototype.h>
|
|
#include <LibWeb/Crypto/CryptoBindings.h>
|
|
#include <LibWeb/Crypto/CryptoKey.h>
|
|
#include <LibWeb/WebIDL/Buffers.h>
|
|
#include <LibWeb/WebIDL/ExceptionOr.h>
|
|
#include <LibWeb/WebIDL/Types.h>
|
|
|
|
namespace Web::Crypto {
|
|
|
|
using AlgorithmIdentifier = Variant<GC::Root<JS::Object>, String>;
|
|
using NamedCurve = String;
|
|
using KeyDataType = Variant<GC::Root<WebIDL::BufferSource>, Bindings::JsonWebKey>;
|
|
|
|
struct HashAlgorithmIdentifier : public AlgorithmIdentifier {
|
|
using AlgorithmIdentifier::AlgorithmIdentifier;
|
|
|
|
JS::ThrowCompletionOr<String> name(JS::VM& vm) const
|
|
{
|
|
auto value = visit(
|
|
[](String const& name) -> JS::ThrowCompletionOr<String> { return name; },
|
|
[&](GC::Root<JS::Object> const& obj) -> JS::ThrowCompletionOr<String> {
|
|
auto name_property = TRY(obj->get("name"));
|
|
return name_property.to_string(vm);
|
|
});
|
|
|
|
return value;
|
|
}
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#algorithm-overview
|
|
struct AlgorithmParams {
|
|
virtual ~AlgorithmParams();
|
|
explicit AlgorithmParams()
|
|
{
|
|
}
|
|
|
|
// NOTE: this is initialized when normalizing the algorithm name as the spec requests.
|
|
// It must not be set in `from_value`.
|
|
String name;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#aes-cbc
|
|
struct AesCbcParams : public AlgorithmParams {
|
|
virtual ~AesCbcParams() override;
|
|
AesCbcParams(ByteBuffer iv)
|
|
: iv(move(iv))
|
|
{
|
|
}
|
|
|
|
ByteBuffer iv;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#dfn-AesCtrParams
|
|
struct AesCtrParams : public AlgorithmParams {
|
|
virtual ~AesCtrParams() override;
|
|
AesCtrParams(ByteBuffer counter, u8 length)
|
|
: counter(move(counter))
|
|
, length(length)
|
|
{
|
|
}
|
|
|
|
ByteBuffer counter;
|
|
u8 length;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#dfn-AesGcmParams
|
|
struct AesGcmParams : public AlgorithmParams {
|
|
virtual ~AesGcmParams() override;
|
|
AesGcmParams(ByteBuffer iv, Optional<ByteBuffer> additional_data, Optional<u8> tag_length)
|
|
: iv(move(iv))
|
|
, additional_data(move(additional_data))
|
|
, tag_length(tag_length)
|
|
{
|
|
}
|
|
|
|
ByteBuffer iv;
|
|
Optional<ByteBuffer> additional_data;
|
|
Optional<u8> tag_length;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#hkdf-params
|
|
struct HKDFParams : public AlgorithmParams {
|
|
virtual ~HKDFParams() override;
|
|
HKDFParams(HashAlgorithmIdentifier hash, ByteBuffer salt, ByteBuffer info)
|
|
: hash(move(hash))
|
|
, salt(move(salt))
|
|
, info(move(info))
|
|
{
|
|
}
|
|
|
|
HashAlgorithmIdentifier hash;
|
|
ByteBuffer salt;
|
|
ByteBuffer info;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#pbkdf2-params
|
|
struct PBKDF2Params : public AlgorithmParams {
|
|
virtual ~PBKDF2Params() override;
|
|
PBKDF2Params(ByteBuffer salt, u32 iterations, HashAlgorithmIdentifier hash)
|
|
: salt(move(salt))
|
|
, iterations(iterations)
|
|
, hash(move(hash))
|
|
{
|
|
}
|
|
|
|
ByteBuffer salt;
|
|
u32 iterations;
|
|
HashAlgorithmIdentifier hash;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#dfn-RsaKeyGenParams
|
|
struct RsaKeyGenParams : public AlgorithmParams {
|
|
virtual ~RsaKeyGenParams() override;
|
|
|
|
RsaKeyGenParams(u32 modulus_length, ::Crypto::UnsignedBigInteger public_exponent)
|
|
: modulus_length(modulus_length)
|
|
, public_exponent(move(public_exponent))
|
|
{
|
|
}
|
|
|
|
u32 modulus_length;
|
|
// NOTE that the raw data is going to be in Big Endian u8[] format
|
|
::Crypto::UnsignedBigInteger public_exponent;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#dfn-RsaHashedKeyGenParams
|
|
struct RsaHashedKeyGenParams : public RsaKeyGenParams {
|
|
virtual ~RsaHashedKeyGenParams() override;
|
|
|
|
RsaHashedKeyGenParams(u32 modulus_length, ::Crypto::UnsignedBigInteger public_exponent, HashAlgorithmIdentifier hash)
|
|
: RsaKeyGenParams(modulus_length, move(public_exponent))
|
|
, hash(move(hash))
|
|
{
|
|
}
|
|
|
|
HashAlgorithmIdentifier hash;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#dfn-RsaHashedImportParams
|
|
struct RsaHashedImportParams : public AlgorithmParams {
|
|
virtual ~RsaHashedImportParams() override;
|
|
|
|
RsaHashedImportParams(HashAlgorithmIdentifier hash)
|
|
: hash(move(hash))
|
|
{
|
|
}
|
|
|
|
HashAlgorithmIdentifier hash;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#dfn-RsaOaepParams
|
|
struct RsaOaepParams : public AlgorithmParams {
|
|
virtual ~RsaOaepParams() override;
|
|
|
|
RsaOaepParams(ByteBuffer label)
|
|
: label(move(label))
|
|
{
|
|
}
|
|
|
|
ByteBuffer label;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#dfn-EcdsaParams
|
|
struct EcdsaParams : public AlgorithmParams {
|
|
virtual ~EcdsaParams() override;
|
|
|
|
EcdsaParams(HashAlgorithmIdentifier hash)
|
|
: hash(move(hash))
|
|
{
|
|
}
|
|
|
|
HashAlgorithmIdentifier hash;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#dfn-EcKeyGenParams
|
|
struct EcKeyGenParams : public AlgorithmParams {
|
|
virtual ~EcKeyGenParams() override;
|
|
|
|
EcKeyGenParams(NamedCurve named_curve)
|
|
: named_curve(move(named_curve))
|
|
{
|
|
}
|
|
|
|
NamedCurve named_curve;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#dfn-AesKeyGenParams
|
|
struct AesKeyGenParams : public AlgorithmParams {
|
|
virtual ~AesKeyGenParams() override;
|
|
|
|
AesKeyGenParams(u16 length)
|
|
: length(length)
|
|
{
|
|
}
|
|
|
|
u16 length;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#dfn-AesDerivedKeyParams
|
|
struct AesDerivedKeyParams : public AlgorithmParams {
|
|
virtual ~AesDerivedKeyParams() override;
|
|
|
|
AesDerivedKeyParams(u16 length)
|
|
: length(length)
|
|
{
|
|
}
|
|
|
|
u16 length;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#hmac-importparams
|
|
struct HmacImportParams : public AlgorithmParams {
|
|
virtual ~HmacImportParams() override;
|
|
|
|
HmacImportParams(HashAlgorithmIdentifier hash, Optional<WebIDL::UnsignedLong> length)
|
|
: hash(move(hash))
|
|
, length(length)
|
|
{
|
|
}
|
|
|
|
HashAlgorithmIdentifier hash;
|
|
Optional<WebIDL::UnsignedLong> length;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
// https://w3c.github.io/webcrypto/#hmac-keygen-params
|
|
struct HmacKeyGenParams : public AlgorithmParams {
|
|
virtual ~HmacKeyGenParams() override;
|
|
|
|
HmacKeyGenParams(HashAlgorithmIdentifier hash, Optional<WebIDL::UnsignedLong> length)
|
|
: hash(move(hash))
|
|
, length(length)
|
|
{
|
|
}
|
|
|
|
HashAlgorithmIdentifier hash;
|
|
Optional<WebIDL::UnsignedLong> length;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
class AlgorithmMethods {
|
|
public:
|
|
virtual ~AlgorithmMethods();
|
|
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> encrypt(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&)
|
|
{
|
|
return WebIDL::NotSupportedError::create(m_realm, "encrypt is not supported"_string);
|
|
}
|
|
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> decrypt(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&)
|
|
{
|
|
return WebIDL::NotSupportedError::create(m_realm, "decrypt is not supported"_string);
|
|
}
|
|
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> sign(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&)
|
|
{
|
|
return WebIDL::NotSupportedError::create(m_realm, "sign is not supported"_string);
|
|
}
|
|
|
|
virtual WebIDL::ExceptionOr<JS::Value> verify(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&, ByteBuffer const&)
|
|
{
|
|
return WebIDL::NotSupportedError::create(m_realm, "verify is not supported"_string);
|
|
}
|
|
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> digest(AlgorithmParams const&, ByteBuffer const&)
|
|
{
|
|
return WebIDL::NotSupportedError::create(m_realm, "digest is not supported"_string);
|
|
}
|
|
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> derive_bits(AlgorithmParams const&, GC::Ref<CryptoKey>, Optional<u32>)
|
|
{
|
|
return WebIDL::NotSupportedError::create(m_realm, "deriveBits is not supported"_string);
|
|
}
|
|
|
|
virtual WebIDL::ExceptionOr<GC::Ref<CryptoKey>> import_key(AlgorithmParams const&, Bindings::KeyFormat, CryptoKey::InternalKeyData, bool, Vector<Bindings::KeyUsage> const&)
|
|
{
|
|
return WebIDL::NotSupportedError::create(m_realm, "importKey is not supported"_string);
|
|
}
|
|
|
|
virtual WebIDL::ExceptionOr<Variant<GC::Ref<CryptoKey>, GC::Ref<CryptoKeyPair>>> generate_key(AlgorithmParams const&, bool, Vector<Bindings::KeyUsage> const&)
|
|
{
|
|
return WebIDL::NotSupportedError::create(m_realm, "generateKey is not supported"_string);
|
|
}
|
|
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::Object>> export_key(Bindings::KeyFormat, GC::Ref<CryptoKey>)
|
|
{
|
|
return WebIDL::NotSupportedError::create(m_realm, "exportKey is not supported"_string);
|
|
}
|
|
|
|
virtual WebIDL::ExceptionOr<JS::Value> get_key_length(AlgorithmParams const&)
|
|
{
|
|
return WebIDL::NotSupportedError::create(m_realm, "getKeyLength is not supported"_string);
|
|
}
|
|
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> wrap_key(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&)
|
|
{
|
|
return WebIDL::NotSupportedError::create(m_realm, "wrapKey is not supported"_string);
|
|
}
|
|
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> unwrap_key(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&)
|
|
{
|
|
return WebIDL::NotSupportedError::create(m_realm, "unwwrapKey is not supported"_string);
|
|
}
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new AlgorithmMethods(realm)); }
|
|
|
|
protected:
|
|
explicit AlgorithmMethods(JS::Realm& realm)
|
|
: m_realm(realm)
|
|
{
|
|
}
|
|
|
|
GC::Ref<JS::Realm> m_realm;
|
|
};
|
|
|
|
class RSAOAEP : public AlgorithmMethods {
|
|
public:
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> encrypt(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> decrypt(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&) override;
|
|
|
|
virtual WebIDL::ExceptionOr<Variant<GC::Ref<CryptoKey>, GC::Ref<CryptoKeyPair>>> generate_key(AlgorithmParams const&, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
|
|
virtual WebIDL::ExceptionOr<GC::Ref<CryptoKey>> import_key(AlgorithmParams const&, Bindings::KeyFormat, CryptoKey::InternalKeyData, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::Object>> export_key(Bindings::KeyFormat, GC::Ref<CryptoKey>) override;
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new RSAOAEP(realm)); }
|
|
|
|
private:
|
|
explicit RSAOAEP(JS::Realm& realm)
|
|
: AlgorithmMethods(realm)
|
|
{
|
|
}
|
|
};
|
|
|
|
class AesCbc : public AlgorithmMethods {
|
|
public:
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> encrypt(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> decrypt(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<CryptoKey>> import_key(AlgorithmParams const&, Bindings::KeyFormat, CryptoKey::InternalKeyData, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<Variant<GC::Ref<CryptoKey>, GC::Ref<CryptoKeyPair>>> generate_key(AlgorithmParams const&, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::Object>> export_key(Bindings::KeyFormat, GC::Ref<CryptoKey>) override;
|
|
virtual WebIDL::ExceptionOr<JS::Value> get_key_length(AlgorithmParams const&) override;
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new AesCbc(realm)); }
|
|
|
|
private:
|
|
explicit AesCbc(JS::Realm& realm)
|
|
: AlgorithmMethods(realm)
|
|
{
|
|
}
|
|
};
|
|
|
|
class AesCtr : public AlgorithmMethods {
|
|
public:
|
|
virtual WebIDL::ExceptionOr<GC::Ref<CryptoKey>> import_key(AlgorithmParams const&, Bindings::KeyFormat, CryptoKey::InternalKeyData, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::Object>> export_key(Bindings::KeyFormat, GC::Ref<CryptoKey>) override;
|
|
virtual WebIDL::ExceptionOr<JS::Value> get_key_length(AlgorithmParams const&) override;
|
|
virtual WebIDL::ExceptionOr<Variant<GC::Ref<CryptoKey>, GC::Ref<CryptoKeyPair>>> generate_key(AlgorithmParams const&, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> encrypt(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> decrypt(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&) override;
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new AesCtr(realm)); }
|
|
|
|
private:
|
|
explicit AesCtr(JS::Realm& realm)
|
|
: AlgorithmMethods(realm)
|
|
{
|
|
}
|
|
};
|
|
|
|
class AesGcm : public AlgorithmMethods {
|
|
public:
|
|
virtual WebIDL::ExceptionOr<JS::Value> get_key_length(AlgorithmParams const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<CryptoKey>> import_key(AlgorithmParams const&, Bindings::KeyFormat, CryptoKey::InternalKeyData, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::Object>> export_key(Bindings::KeyFormat, GC::Ref<CryptoKey>) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> encrypt(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> decrypt(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&) override;
|
|
virtual WebIDL::ExceptionOr<Variant<GC::Ref<CryptoKey>, GC::Ref<CryptoKeyPair>>> generate_key(AlgorithmParams const&, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new AesGcm(realm)); }
|
|
|
|
private:
|
|
explicit AesGcm(JS::Realm& realm)
|
|
: AlgorithmMethods(realm)
|
|
{
|
|
}
|
|
};
|
|
|
|
class AesKw : public AlgorithmMethods {
|
|
public:
|
|
virtual WebIDL::ExceptionOr<GC::Ref<CryptoKey>> import_key(AlgorithmParams const&, Bindings::KeyFormat, CryptoKey::InternalKeyData, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::Object>> export_key(Bindings::KeyFormat, GC::Ref<CryptoKey>) override;
|
|
virtual WebIDL::ExceptionOr<JS::Value> get_key_length(AlgorithmParams const&) override;
|
|
virtual WebIDL::ExceptionOr<Variant<GC::Ref<CryptoKey>, GC::Ref<CryptoKeyPair>>> generate_key(AlgorithmParams const&, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> wrap_key(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> unwrap_key(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&) override;
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new AesKw(realm)); }
|
|
|
|
private:
|
|
explicit AesKw(JS::Realm& realm)
|
|
: AlgorithmMethods(realm)
|
|
{
|
|
}
|
|
};
|
|
|
|
class HKDF : public AlgorithmMethods {
|
|
public:
|
|
virtual WebIDL::ExceptionOr<GC::Ref<CryptoKey>> import_key(AlgorithmParams const&, Bindings::KeyFormat, CryptoKey::InternalKeyData, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> derive_bits(AlgorithmParams const&, GC::Ref<CryptoKey>, Optional<u32>) override;
|
|
virtual WebIDL::ExceptionOr<JS::Value> get_key_length(AlgorithmParams const&) override;
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new HKDF(realm)); }
|
|
|
|
private:
|
|
explicit HKDF(JS::Realm& realm)
|
|
: AlgorithmMethods(realm)
|
|
{
|
|
}
|
|
};
|
|
|
|
class PBKDF2 : public AlgorithmMethods {
|
|
public:
|
|
virtual WebIDL::ExceptionOr<GC::Ref<CryptoKey>> import_key(AlgorithmParams const&, Bindings::KeyFormat, CryptoKey::InternalKeyData, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> derive_bits(AlgorithmParams const&, GC::Ref<CryptoKey>, Optional<u32>) override;
|
|
virtual WebIDL::ExceptionOr<JS::Value> get_key_length(AlgorithmParams const&) override;
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new PBKDF2(realm)); }
|
|
|
|
private:
|
|
explicit PBKDF2(JS::Realm& realm)
|
|
: AlgorithmMethods(realm)
|
|
{
|
|
}
|
|
};
|
|
|
|
class SHA : public AlgorithmMethods {
|
|
public:
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> digest(AlgorithmParams const&, ByteBuffer const&) override;
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new SHA(realm)); }
|
|
|
|
private:
|
|
explicit SHA(JS::Realm& realm)
|
|
: AlgorithmMethods(realm)
|
|
{
|
|
}
|
|
};
|
|
|
|
class ECDSA : public AlgorithmMethods {
|
|
public:
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> sign(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&) override;
|
|
virtual WebIDL::ExceptionOr<JS::Value> verify(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&, ByteBuffer const&) override;
|
|
|
|
virtual WebIDL::ExceptionOr<Variant<GC::Ref<CryptoKey>, GC::Ref<CryptoKeyPair>>> generate_key(AlgorithmParams const&, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<CryptoKey>> import_key(AlgorithmParams const&, Bindings::KeyFormat, CryptoKey::InternalKeyData, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::Object>> export_key(Bindings::KeyFormat, GC::Ref<CryptoKey>) override;
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new ECDSA(realm)); }
|
|
|
|
private:
|
|
explicit ECDSA(JS::Realm& realm)
|
|
: AlgorithmMethods(realm)
|
|
{
|
|
}
|
|
};
|
|
|
|
class ECDH : public AlgorithmMethods {
|
|
public:
|
|
virtual WebIDL::ExceptionOr<Variant<GC::Ref<CryptoKey>, GC::Ref<CryptoKeyPair>>> generate_key(AlgorithmParams const&, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<CryptoKey>> import_key(AlgorithmParams const&, Bindings::KeyFormat, CryptoKey::InternalKeyData, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::Object>> export_key(Bindings::KeyFormat, GC::Ref<CryptoKey>) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> derive_bits(AlgorithmParams const&, GC::Ref<CryptoKey>, Optional<u32>) override;
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new ECDH(realm)); }
|
|
|
|
private:
|
|
explicit ECDH(JS::Realm& realm)
|
|
: AlgorithmMethods(realm)
|
|
{
|
|
}
|
|
};
|
|
|
|
class ED25519 : public AlgorithmMethods {
|
|
public:
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> sign(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&) override;
|
|
virtual WebIDL::ExceptionOr<JS::Value> verify(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&, ByteBuffer const&) override;
|
|
|
|
virtual WebIDL::ExceptionOr<Variant<GC::Ref<CryptoKey>, GC::Ref<CryptoKeyPair>>> generate_key(AlgorithmParams const&, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<CryptoKey>> import_key(AlgorithmParams const&, Bindings::KeyFormat, CryptoKey::InternalKeyData, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::Object>> export_key(Bindings::KeyFormat, GC::Ref<CryptoKey>) override;
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new ED25519(realm)); }
|
|
|
|
private:
|
|
explicit ED25519(JS::Realm& realm)
|
|
: AlgorithmMethods(realm)
|
|
{
|
|
}
|
|
};
|
|
|
|
class X25519 : public AlgorithmMethods {
|
|
public:
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> derive_bits(AlgorithmParams const&, GC::Ref<CryptoKey>, Optional<u32>) override;
|
|
virtual WebIDL::ExceptionOr<Variant<GC::Ref<CryptoKey>, GC::Ref<CryptoKeyPair>>> generate_key(AlgorithmParams const&, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<CryptoKey>> import_key(AlgorithmParams const&, Bindings::KeyFormat, CryptoKey::InternalKeyData, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::Object>> export_key(Bindings::KeyFormat, GC::Ref<CryptoKey>) override;
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new X25519(realm)); }
|
|
|
|
private:
|
|
explicit X25519(JS::Realm& realm)
|
|
: AlgorithmMethods(realm)
|
|
{
|
|
}
|
|
};
|
|
|
|
class X448 : public AlgorithmMethods {
|
|
public:
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> derive_bits(AlgorithmParams const&, GC::Ref<CryptoKey>, Optional<u32>) override;
|
|
virtual WebIDL::ExceptionOr<Variant<GC::Ref<CryptoKey>, GC::Ref<CryptoKeyPair>>> generate_key(AlgorithmParams const&, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<CryptoKey>> import_key(AlgorithmParams const&, Bindings::KeyFormat, CryptoKey::InternalKeyData, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::Object>> export_key(Bindings::KeyFormat, GC::Ref<CryptoKey>) override;
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new X448(realm)); }
|
|
|
|
private:
|
|
explicit X448(JS::Realm& realm)
|
|
: AlgorithmMethods(realm)
|
|
{
|
|
}
|
|
};
|
|
|
|
class HMAC : public AlgorithmMethods {
|
|
public:
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::ArrayBuffer>> sign(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&) override;
|
|
virtual WebIDL::ExceptionOr<JS::Value> verify(AlgorithmParams const&, GC::Ref<CryptoKey>, ByteBuffer const&, ByteBuffer const&) override;
|
|
virtual WebIDL::ExceptionOr<Variant<GC::Ref<CryptoKey>, GC::Ref<CryptoKeyPair>>> generate_key(AlgorithmParams const&, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<CryptoKey>> import_key(AlgorithmParams const&, Bindings::KeyFormat, CryptoKey::InternalKeyData, bool, Vector<Bindings::KeyUsage> const&) override;
|
|
virtual WebIDL::ExceptionOr<GC::Ref<JS::Object>> export_key(Bindings::KeyFormat, GC::Ref<CryptoKey>) override;
|
|
virtual WebIDL::ExceptionOr<JS::Value> get_key_length(AlgorithmParams const&) override;
|
|
|
|
static NonnullOwnPtr<AlgorithmMethods> create(JS::Realm& realm) { return adopt_own(*new HMAC(realm)); }
|
|
|
|
private:
|
|
explicit HMAC(JS::Realm& realm)
|
|
: AlgorithmMethods(realm)
|
|
{
|
|
}
|
|
};
|
|
|
|
struct EcdhKeyDeriveParams : public AlgorithmParams {
|
|
virtual ~EcdhKeyDeriveParams() override;
|
|
|
|
EcdhKeyDeriveParams(CryptoKey& public_key)
|
|
: public_key(public_key)
|
|
{
|
|
}
|
|
|
|
GC::Ref<CryptoKey> public_key;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
struct EcKeyImportParams : public AlgorithmParams {
|
|
virtual ~EcKeyImportParams() override;
|
|
|
|
EcKeyImportParams(String named_curve)
|
|
: named_curve(move(named_curve))
|
|
{
|
|
}
|
|
|
|
String named_curve;
|
|
|
|
static JS::ThrowCompletionOr<NonnullOwnPtr<AlgorithmParams>> from_value(JS::VM&, JS::Value);
|
|
};
|
|
|
|
ErrorOr<String> base64_url_uint_encode(::Crypto::UnsignedBigInteger);
|
|
WebIDL::ExceptionOr<ByteBuffer> base64_url_bytes_decode(JS::Realm&, String const& base64_url_string);
|
|
WebIDL::ExceptionOr<::Crypto::UnsignedBigInteger> base64_url_uint_decode(JS::Realm&, String const& base64_url_string);
|
|
|
|
}
|