vaultwarden
/
bitwarden-estensione-browser
mirror of https://github.com/bitwarden/browser
1
0
Fork 0
Code Issues 1 Releases Wiki Activity

reject referred instead of throwing exceptions

This commit is contained in:
Kyle Spearrin 2017-05-22 09:03:59 -04:00
parent 98b12d1e40
commit 81101f2890
1 changed files with 51 additions and 52 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

103
src/services/cryptoService.js
View File

@ -322,7 +322,8 @@ function initCryptoService(constantsService) {
self.getKey(function (localKey) { self.getKey(function (localKey) {
key = key || localKey; key = key || localKey;
if (!key) { if (!key) {
throw 'Encryption key unavailable.'; deferred.reject('Encryption key unavailable.');
return;
} }
plainValueEncoding = plainValueEncoding || 'utf8'; plainValueEncoding = plainValueEncoding || 'utf8';
@ -350,63 +351,61 @@ function initCryptoService(constantsService) {
var deferred = Q.defer(); var deferred = Q.defer();
var self = this; var self = this;
try { if (cipherString === null || cipherString === undefined || !cipherString.encryptedString) {
if (cipherString === null || cipherString === undefined || !cipherString.encryptedString) { deferred.reject('cannot decrypt nothing');
throw 'cannot decrypt nothing'; return;
}
self.getKey(function (localKey) {
key = key || localKey;
if (!key) {
deferred.reject('Encryption key unavailable.');
return;
} }
self.getKey(function (localKey) { outputEncoding = outputEncoding || 'utf8';
key = key || localKey;
if (!key) { if (cipherString.encryptionType === constantsService.encType.AesCbc128_HmacSha256_B64 &&
throw 'Encryption key unavailable.'; key.encType === constantsService.encType.AesCbc256_B64) {
// Old encrypt-then-mac scheme, swap out the key
_legacyEtmKey = _legacyEtmKey ||
new SymmetricCryptoKey(key.key, false, constantsService.encType.AesCbc128_HmacSha256_B64);
key = _legacyEtmKey;
}
if (cipherString.encryptionType !== key.encType) {
deferred.reject('encType unavailable.');
return;
}
var ivBytes = forge.util.decode64(cipherString.initializationVector);
var ctBytes = forge.util.decode64(cipherString.cipherText);
if (key.macKey && cipherString.mac) {
var macBytes = forge.util.decode64(cipherString.mac);
var computedMacBytes = computeMac(ctBytes, ivBytes, key.macKey, false);
if (!macsEqual(key.macKey, computedMacBytes, macBytes)) {
console.error('MAC failed.');
deferred.reject('MAC failed.');
} }
}
outputEncoding = outputEncoding || 'utf8'; var ctBuffer = forge.util.createBuffer(ctBytes);
var decipher = forge.cipher.createDecipher('AES-CBC', key.encKey);
decipher.start({ iv: ivBytes });
decipher.update(ctBuffer);
decipher.finish();
if (cipherString.encryptionType === constantsService.encType.AesCbc128_HmacSha256_B64 && var decValue;
key.encType === constantsService.encType.AesCbc256_B64) { if (outputEncoding === 'utf8') {
// Old encrypt-then-mac scheme, swap out the key decValue = decipher.output.toString('utf8');
_legacyEtmKey = _legacyEtmKey || }
new SymmetricCryptoKey(key.key, false, constantsService.encType.AesCbc128_HmacSha256_B64); else {
key = _legacyEtmKey; decValue = decipher.output.getBytes();
} }
if (cipherString.encryptionType !== key.encType) { deferred.resolve(decValue);
throw 'encType unavailable.'; });
}
var ivBytes = forge.util.decode64(cipherString.initializationVector);
var ctBytes = forge.util.decode64(cipherString.cipherText);
if (key.macKey && cipherString.mac) {
var macBytes = forge.util.decode64(cipherString.mac);
var computedMacBytes = computeMac(ctBytes, ivBytes, key.macKey, false);
if (!macsEqual(key.macKey, computedMacBytes, macBytes)) {
console.error('MAC failed.');
deferred.reject('MAC failed.');
}
}
var ctBuffer = forge.util.createBuffer(ctBytes);
var decipher = forge.cipher.createDecipher('AES-CBC', key.encKey);
decipher.start({ iv: ivBytes });
decipher.update(ctBuffer);
decipher.finish();
var decValue;
if (outputEncoding === 'utf8') {
decValue = decipher.output.toString('utf8');
}
else {
decValue = decipher.output.getBytes();
}
deferred.resolve(decValue);
});
}
catch (e) {
deferred.reject('Decryption failed.');
}
return deferred.promise; return deferred.promise;
}; };