/var/www/greso.tech/server/nsm/node_modules/jose/dist/browser/runtime
NameSizeModeActions
aeskw.js14470644editdlrm
asn1.js72600644editdlrm
base64url.js12230644editdlrm
bogus.js1220644editdlrm
check_cek_length.js3210644editdlrm
check_key_length.js3240644editdlrm
decrypt.js31750644editdlrm
digest.js2370644editdlrm
ecdhes.js19150644editdlrm
encrypt.js27820644editdlrm
fetch_jwks.js10390644editdlrm
generate.js55590644editdlrm
get_sign_verify_key.js7110644editdlrm
is_key_like.js1400644editdlrm
jwk_to_key.js56360644editdlrm
key_to_jwk.js7330644editdlrm
pbes2kw.js20860644editdlrm
random.js890644editdlrm
rsaes.js18420644editdlrm
sign.js4920644editdlrm
subtle_dsa.js8900644editdlrm
subtle_rsaes.js3970644editdlrm
timing_safe_equal.js5380644editdlrm
verify.js5750644editdlrm
webcrypto.js850644editdlrm
zlib.js5700644editdlrm
Edit: /var/www/greso.tech/server/nsm/node_modules/jose/dist/browser/runtime/decrypt.js (3175B)
import { concat, uint64be } from '../lib/buffer_utils.js'; import checkIvLength from '../lib/check_iv_length.js'; import checkCekLength from './check_cek_length.js'; import timingSafeEqual from './timing_safe_equal.js'; import { JOSENotSupported, JWEDecryptionFailed } from '../util/errors.js'; import crypto, { isCryptoKey } from './webcrypto.js'; import { checkEncCryptoKey } from '../lib/crypto_key.js'; import invalidKeyInput from '../lib/invalid_key_input.js'; import { types } from './is_key_like.js'; async function cbcDecrypt(enc, cek, ciphertext, iv, tag, aad) { if (!(cek instanceof Uint8Array)) { throw new TypeError(invalidKeyInput(cek, 'Uint8Array')); } const keySize = parseInt(enc.slice(1, 4), 10); const encKey = await crypto.subtle.importKey('raw', cek.subarray(keySize >> 3), 'AES-CBC', false, ['decrypt']); const macKey = await crypto.subtle.importKey('raw', cek.subarray(0, keySize >> 3), { hash: `SHA-${keySize << 1}`, name: 'HMAC', }, false, ['sign']); const macData = concat(aad, iv, ciphertext, uint64be(aad.length << 3)); const expectedTag = new Uint8Array((await crypto.subtle.sign('HMAC', macKey, macData)).slice(0, keySize >> 3)); let macCheckPassed; try { macCheckPassed = timingSafeEqual(tag, expectedTag); } catch (_a) { } if (!macCheckPassed) { throw new JWEDecryptionFailed(); } let plaintext; try { plaintext = new Uint8Array(await crypto.subtle.decrypt({ iv, name: 'AES-CBC' }, encKey, ciphertext)); } catch (_b) { } if (!plaintext) { throw new JWEDecryptionFailed(); } return plaintext; } async function gcmDecrypt(enc, cek, ciphertext, iv, tag, aad) { let encKey; if (cek instanceof Uint8Array) { encKey = await crypto.subtle.importKey('raw', cek, 'AES-GCM', false, ['decrypt']); } else { checkEncCryptoKey(cek, enc, 'decrypt'); encKey = cek; } try { return new Uint8Array(await crypto.subtle.decrypt({ additionalData: aad, iv, name: 'AES-GCM', tagLength: 128, }, encKey, concat(ciphertext, tag))); } catch (_a) { throw new JWEDecryptionFailed(); } } const decrypt = async (enc, cek, ciphertext, iv, tag, aad) => { if (!isCryptoKey(cek) && !(cek instanceof Uint8Array)) { throw new TypeError(invalidKeyInput(cek, ...types, 'Uint8Array')); } checkIvLength(enc, iv); switch (enc) { case 'A128CBC-HS256': case 'A192CBC-HS384': case 'A256CBC-HS512': if (cek instanceof Uint8Array) checkCekLength(cek, parseInt(enc.slice(-3), 10)); return cbcDecrypt(enc, cek, ciphertext, iv, tag, aad); case 'A128GCM': case 'A192GCM': case 'A256GCM': if (cek instanceof Uint8Array) checkCekLength(cek, parseInt(enc.slice(1, 4), 10)); return gcmDecrypt(enc, cek, ciphertext, iv, tag, aad); default: throw new JOSENotSupported('Unsupported JWE Content Encryption Algorithm'); } }; export default decrypt;