59 lines
1.7 KiB
JavaScript
59 lines
1.7 KiB
JavaScript
|
import crypto from 'crypto';
|
||
|
|
|
||
|
|
export function generateSalt(email, seed) {
|
||
|
|
const hashInput = (email + ':' + seed).toString('utf8');
|
||
|
|
const hash = crypto.createHash('sha256');
|
||
|
|
hash.update(hashInput);
|
||
|
|
const hash_output = hash.digest('hex').toString('utf8');
|
||
|
|
return hash_output;
|
||
|
|
}
|
||
|
|
|
||
|
|
export function generateSaltSeed() {
|
||
|
|
return crypto.randomBytes(32).toString('hex');
|
||
|
|
}
|
||
|
|
|
||
|
|
export function createHmac(serverWalletState, hmacKey) {
|
||
|
|
|
||
|
|
return crypto.randomBytes(32).toString('hex');
|
||
|
|
}
|
||
|
|
|
||
|
|
export function checkHmac(serverWalletState, hmacKey, hmac) {
|
||
|
|
return crypto.randomBytes(32).toString('hex');
|
||
|
|
}
|
||
|
|
|
||
|
|
export function deriveSecrets(rootPassword, email, saltSeed, callback) {
|
||
|
|
const encodedPassword = Buffer.from(rootPassword.normalize('NFKC'))
|
||
|
|
const encodedEmail = Buffer.from(email)
|
||
|
|
const SCRYPT_N = 1 << 20;
|
||
|
|
const SCRYPT_R = 8;
|
||
|
|
const SCRYPT_P = 1;
|
||
|
|
const KEY_LENGTH = 32;
|
||
|
|
const NUM_KEYS = 2;
|
||
|
|
const MAXMEM_MULTIPLIER = 256;
|
||
|
|
const DEFAULT_MAXMEM = MAXMEM_MULTIPLIER * SCRYPT_N * SCRYPT_R;
|
||
|
|
|
||
|
|
function getKeyParts(key) {
|
||
|
|
const lbryIdPassword = key.slice(0, KEY_LENGTH).toString('base64');
|
||
|
|
const hmacKey = key.slice(KEY_LENGTH).toString('base64');
|
||
|
|
return { lbryIdPassword, hmacKey }; // Buffer aa bb cc 6c
|
||
|
|
}
|
||
|
|
|
||
|
|
const salt = generateSalt(encodedEmail, saltSeed);
|
||
|
|
|
||
|
|
const scryptCallback = (err, key) => {
|
||
|
|
if (err) {
|
||
|
|
// handle error
|
||
|
|
}
|
||
|
|
|
||
|
|
callback(err, getKeyParts(key));
|
||
|
|
};
|
||
|
|
|
||
|
|
crypto.scrypt(encodedPassword, salt, KEY_LENGTH * NUM_KEYS, { N: SCRYPT_N, r: SCRYPT_R, p: SCRYPT_P, maxmem: DEFAULT_MAXMEM }, scryptCallback);
|
||
|
|
}
|
||
|
|
|
||
|
|
export function walletHmac(inputString) {
|
||
|
|
const hmac = crypto.createHmac('sha256', inputString.toString('utf8'));
|
||
|
|
const res = hmac.digest('hex');
|
||
|
|
return res;
|
||
|
|
}
|