1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
// Copyright 2018-2022 the Deno authors. All rights reserved. MIT license.// Copyright 2014-2017 browserify-aes contributors. All rights reserved. MIT license.// Copyright 2013 Maxwell Krohn. All rights reserved. MIT license.// Copyright 2009-2013 Jeff Mott. All rights reserved. MIT license.
// deno-lint-ignore-file no-var
import { Buffer } from "../../../buffer.ts";import AuthCipher from "./auth_cipher.js";import StreamCipher from "./stream_cipher.js";import Transform from "../cipher_base.js";import * as aes from "./aes.js";import ebtk from "../evp_bytes_to_key.ts";import { MODES } from "./modes/mod.js";
function Cipher(mode, key, iv) {  Transform.call(this);
  this._cache = new Splitter();  this._cipher = new aes.AES(key);  this._prev = Buffer.from(iv);  this._mode = mode;  this._autopadding = true;}
Cipher.prototype = Object.create(Transform.prototype, {  constructor: {    value: Cipher,    enumerable: false,    writable: true,    configurable: true,  },});
Cipher.prototype._update = function (data) {  this._cache.add(data);  var chunk;  var thing;  var out = [];
  while ((chunk = this._cache.get())) {    thing = this._mode.encrypt(this, chunk);    out.push(thing);  }
  return Buffer.concat(out);};
var PADDING = Buffer.alloc(16, 0x10);
Cipher.prototype._final = function () {  var chunk = this._cache.flush();  if (this._autopadding) {    chunk = this._mode.encrypt(this, chunk);    this._cipher.scrub();    return chunk;  }
  if (!chunk.equals(PADDING)) {    this._cipher.scrub();    throw new Error("data not multiple of block length");  }};
Cipher.prototype.setAutoPadding = function (setTo) {  this._autopadding = !!setTo;  return this;};
function Splitter() {  this.cache = Buffer.allocUnsafe(0);}
Splitter.prototype.add = function (data) {  this.cache = Buffer.concat([this.cache, data]);};
Splitter.prototype.get = function () {  if (this.cache.length > 15) {    const out = this.cache.slice(0, 16);    this.cache = this.cache.slice(16);    return out;  }  return null;};
Splitter.prototype.flush = function () {  var len = 16 - this.cache.length;  var padBuff = Buffer.allocUnsafe(len);
  var i = -1;  while (++i < len) {    padBuff.writeUInt8(len, i);  }
  return Buffer.concat([this.cache, padBuff]);};
export function createCipheriv(suite, password, iv) {  var config = MODES[suite.toLowerCase()];  if (!config) throw new TypeError("invalid suite type");
  if (typeof password === "string") password = Buffer.from(password);  if (password.length !== config.key / 8) {    throw new TypeError("invalid key length " + password.length);  }
  if (typeof iv === "string") iv = Buffer.from(iv);  if (config.mode !== "GCM" && iv.length !== config.iv) {    throw new TypeError("invalid iv length " + iv.length);  }
  if (config.type === "stream") {    return new StreamCipher(config.module, password, iv);  } else if (config.type === "auth") {    return new AuthCipher(config.module, password, iv);  }
  return new Cipher(config.module, password, iv);}
export function createCipher(suite, password) {  var config = MODES[suite.toLowerCase()];  if (!config) throw new TypeError("invalid suite type");
  var keys = ebtk(password, false, config.key, config.iv);  return createCipheriv(suite, keys.key, keys.iv);}