mirror of https://github.com/gchq/CyberChef.git
Merge branch 'MShwed-feature/streebog-hash'
This commit is contained in:
n1474335
commit
2ba6a3fd8d
|
|
@ -302,6 +302,8 @@
|
|||
"Snefru",
|
||||
"BLAKE2b",
|
||||
"BLAKE2s",
|
||||
"GOST hash",
|
||||
"Streebog",
|
||||
"SSDEEP",
|
||||
"CTPH",
|
||||
"Compare SSDEEP hashes",
|
||||
|
|
|
|||
|
|
@ -12,7 +12,7 @@ import Utils from "../Utils";
|
|||
/**
|
||||
* Convert a byte array into a hex string.
|
||||
*
|
||||
* @param {Uint8Array|byteArray} data
|
||||
* @param {byteArray|Uint8Array|ArrayBuffer} data
|
||||
* @param {string} [delim=" "]
|
||||
* @param {number} [padding=2]
|
||||
* @returns {string}
|
||||
|
|
@ -26,6 +26,7 @@ import Utils from "../Utils";
|
|||
*/
|
||||
export function toHex(data, delim=" ", padding=2) {
|
||||
if (!data) return "";
|
||||
if (data instanceof ArrayBuffer) data = new Uint8Array(data);
|
||||
|
||||
let output = "";
|
||||
|
||||
|
|
@ -47,7 +48,7 @@ export function toHex(data, delim=" ", padding=2) {
|
|||
/**
|
||||
* Convert a byte array into a hex string as efficiently as possible with no options.
|
||||
*
|
||||
* @param {byteArray} data
|
||||
* @param {byteArray|Uint8Array|ArrayBuffer} data
|
||||
* @returns {string}
|
||||
*
|
||||
* @example
|
||||
|
|
@ -56,6 +57,7 @@ export function toHex(data, delim=" ", padding=2) {
|
|||
*/
|
||||
export function toHexFast(data) {
|
||||
if (!data) return "";
|
||||
if (data instanceof ArrayBuffer) data = new Uint8Array(data);
|
||||
|
||||
const output = [];
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,71 @@
|
|||
/**
|
||||
* @author n1474335 [n1474335@gmail.com]
|
||||
* @copyright Crown Copyright 2019
|
||||
* @license Apache-2.0
|
||||
*/
|
||||
|
||||
import Operation from "../Operation";
|
||||
import OperationError from "../errors/OperationError";
|
||||
import GostDigest from "../vendor/gost/gostDigest";
|
||||
import {toHexFast} from "../lib/Hex";
|
||||
|
||||
/**
|
||||
* GOST hash operation
|
||||
*/
|
||||
class GOSTHash extends Operation {
|
||||
|
||||
/**
|
||||
* GOSTHash constructor
|
||||
*/
|
||||
constructor() {
|
||||
super();
|
||||
|
||||
this.name = "GOST hash";
|
||||
this.module = "Hashing";
|
||||
this.description = "The GOST hash function, defined in the standards GOST R 34.11-94 and GOST 34.311-95 is a 256-bit cryptographic hash function. It was initially defined in the Russian national standard GOST R 34.11-94 <i>Information Technology – Cryptographic Information Security – Hash Function</i>. The equivalent standard used by other member-states of the CIS is GOST 34.311-95.<br><br>This function must not be confused with a different Streebog hash function, which is defined in the new revision of the standard GOST R 34.11-2012.<br><br>The GOST hash function is based on the GOST block cipher.";
|
||||
this.infoURL = "https://wikipedia.org/wiki/GOST_(hash_function)";
|
||||
this.inputType = "ArrayBuffer";
|
||||
this.outputType = "string";
|
||||
this.args = [
|
||||
{
|
||||
"name": "S-Box",
|
||||
"type": "option",
|
||||
"value": [
|
||||
"D-A",
|
||||
"D-SC",
|
||||
"E-TEST",
|
||||
"E-A",
|
||||
"E-B",
|
||||
"E-C",
|
||||
"E-D",
|
||||
"E-SC",
|
||||
"E-Z",
|
||||
"D-TEST"
|
||||
]
|
||||
}
|
||||
];
|
||||
}
|
||||
|
||||
/**
|
||||
* @param {ArrayBuffer} input
|
||||
* @param {Object[]} args
|
||||
* @returns {string}
|
||||
*/
|
||||
run(input, args) {
|
||||
try {
|
||||
const sBox = args[1];
|
||||
const gostDigest = new GostDigest({
|
||||
name: "GOST R 34.11",
|
||||
version: 1994,
|
||||
sBox: sBox
|
||||
});
|
||||
|
||||
return toHexFast(gostDigest.digest(input));
|
||||
} catch (err) {
|
||||
throw new OperationError(err);
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
export default GOSTHash;
|
||||
|
|
@ -0,0 +1,60 @@
|
|||
/**
|
||||
* @author mshwed [m@ttshwed.com]
|
||||
* @copyright Crown Copyright 2019
|
||||
* @license Apache-2.0
|
||||
*/
|
||||
|
||||
import Operation from "../Operation";
|
||||
import OperationError from "../errors/OperationError";
|
||||
import GostDigest from "../vendor/gost/gostDigest";
|
||||
import {toHexFast} from "../lib/Hex";
|
||||
|
||||
/**
|
||||
* Streebog operation
|
||||
*/
|
||||
class Streebog extends Operation {
|
||||
|
||||
/**
|
||||
* Streebog constructor
|
||||
*/
|
||||
constructor() {
|
||||
super();
|
||||
|
||||
this.name = "Streebog";
|
||||
this.module = "Hashing";
|
||||
this.description = "Streebog is a cryptographic hash function defined in the Russian national standard GOST R 34.11-2012 <i>Information Technology \u2013 Cryptographic Information Security \u2013 Hash Function</i>. It was created to replace an obsolete GOST hash function defined in the old standard GOST R 34.11-94, and as an asymmetric reply to SHA-3 competition by the US National Institute of Standards and Technology.";
|
||||
this.infoURL = "https://wikipedia.org/wiki/Streebog";
|
||||
this.inputType = "ArrayBuffer";
|
||||
this.outputType = "string";
|
||||
this.args = [
|
||||
{
|
||||
"name": "Size",
|
||||
"type": "option",
|
||||
"value": ["256", "512"]
|
||||
}
|
||||
];
|
||||
}
|
||||
|
||||
/**
|
||||
* @param {ArrayBuffer} input
|
||||
* @param {Object[]} args
|
||||
* @returns {string}
|
||||
*/
|
||||
run(input, args) {
|
||||
try {
|
||||
const length = parseInt(args[0], 10);
|
||||
const gostDigest = new GostDigest({
|
||||
name: "GOST R 34.11",
|
||||
version: 2012,
|
||||
length: length
|
||||
});
|
||||
|
||||
return toHexFast(gostDigest.digest(input));
|
||||
} catch (err) {
|
||||
throw new OperationError(err);
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
export default Streebog;
|
||||
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
|
|
@ -0,0 +1,451 @@
|
|||
/**
|
||||
* @file GOST 34.10-2012 signature function with 1024/512 bits digest
|
||||
* @version 1.76
|
||||
* @copyright 2014-2016, Rudolf Nickolaev. All rights reserved.
|
||||
*/
|
||||
|
||||
/*
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
*
|
||||
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
|
||||
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
|
||||
* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
||||
* DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
|
||||
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
||||
* SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
|
||||
* CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
|
||||
* OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
||||
* OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
*
|
||||
*/
|
||||
|
||||
import GostRandom from './gostRandom';
|
||||
import GostCipher from './gostCipher';
|
||||
import GostDigest from './gostDigest';
|
||||
import GostSign from './gostSign';
|
||||
|
||||
/*
|
||||
* Engine definition base on normalized algorithm identifier
|
||||
*
|
||||
*/ // <editor-fold defaultstate="collapsed">
|
||||
|
||||
var root = {};
|
||||
|
||||
// Define engine
|
||||
function defineEngine(method, algorithm) {
|
||||
if (!algorithm)
|
||||
throw new (root.SyntaxError || Error)('Algorithm not defined');
|
||||
|
||||
if (!algorithm.name)
|
||||
throw new (root.SyntaxError || Error)('Algorithm name not defined');
|
||||
|
||||
var name = algorithm.name, mode = algorithm.mode;
|
||||
if ((name === 'GOST 28147' || name === 'GOST R 34.12' || name === 'RC2') && (method === 'generateKey' ||
|
||||
(mode === 'MAC' && (method === 'sign' || method === 'verify')) ||
|
||||
((mode === 'KW' || mode === 'MASK') && (method === 'wrapKey' || method === 'unwrapKey')) ||
|
||||
((!mode || mode === 'ES') && (method === 'encrypt' || method === 'decrypt')))) {
|
||||
return 'GostCipher';
|
||||
|
||||
} else if ((name === 'GOST R 34.11' || name === 'SHA') && (method === 'digest' ||
|
||||
(mode === 'HMAC' && (method === 'sign' || method === 'verify' || method === 'generateKey')) ||
|
||||
((mode === 'KDF' || mode === 'PBKDF2' || mode === 'PFXKDF' || mode === 'CPKDF') &&
|
||||
(method === 'deriveKey' || method === 'deriveBits' || method === 'generateKey')))) {
|
||||
return 'GostDigest';
|
||||
|
||||
} else if (name === 'GOST R 34.10' && (method === 'generateKey' ||
|
||||
((!mode || mode === 'SIGN') && (method === 'sign' || method === 'verify')) ||
|
||||
(mode === 'MASK' && (method === 'wrapKey' || method === 'unwrapKey')) ||
|
||||
(mode === 'DH' && (method === 'deriveKey' || method === 'deriveBits')))) {
|
||||
return 'GostSign';
|
||||
} else
|
||||
throw new (root.NotSupportedError || Error)('Algorithm ' + name + '-' + mode + ' is not valid for ' + method);
|
||||
} // </editor-fold>
|
||||
|
||||
/**
|
||||
* Object implements dedicated Web Workers and provide a simple way to create
|
||||
* and run GOST cryptographic algorithms in background thread.
|
||||
*
|
||||
* Object provide interface to GOST low-level cryptogric classes:
|
||||
* <ul>
|
||||
* <li>GostCipher - implementation of GOST 28147, GOST R 34.12, GOST R 34.13 Encryption algorithms. Reference {@link http://tools.ietf.org/html/rfc5830}</li>
|
||||
* <li>GostDigest - implementation of GOST R 34.11 Hash Function algorithms. References {@link http://tools.ietf.org/html/rfc5831} and {@link http://tools.ietf.org/html/rfc6986}</li>
|
||||
* <li>GostSign - implementation of GOST R 34.10 Digital Signature algorithms. References {@link http://tools.ietf.org/html/rfc5832} and {@link http://tools.ietf.org/html/rfc7091}</li>
|
||||
* </ul>
|
||||
* @namespace gostEngine
|
||||
*/
|
||||
var gostEngine = {
|
||||
/**
|
||||
* gostEngine.execute(algorithm, method, args) Entry point to execution
|
||||
* all low-level GOST cryptographic methods
|
||||
*
|
||||
* <ul>
|
||||
* <li>Determine the appropriate engine for a given execution method</li>
|
||||
* <li>Create cipher object for determineted engine</li>
|
||||
* <li>Execute method of cipher with given args</li>
|
||||
* </ul>
|
||||
*
|
||||
* @memberOf gostEngine
|
||||
* @param {AlgorithmIndentifier} algorithm Algorithm identifier
|
||||
* @param {string} method Crypto method for execution
|
||||
* @param {Array} args Method arguments (keys, data, additional parameters)
|
||||
* @returns {(CryptoOperationData|Key|KeyPair|boolean)} Result of method execution
|
||||
*/
|
||||
execute: function (algorithm, method, args) // <editor-fold defaultstate="collapsed">
|
||||
{
|
||||
// Define engine for GOST algorithms
|
||||
var engine = defineEngine(method, algorithm);
|
||||
// Create cipher
|
||||
var cipher = this['get' + engine](algorithm);
|
||||
// Execute method
|
||||
return cipher[method].apply(cipher, args);
|
||||
}, // </editor-fold>
|
||||
/**
|
||||
* gostEngine.getGostCipher(algorithm) returns GOST 28147 / GOST R 34.12 cipher instance<br><br>
|
||||
*
|
||||
* GOST 28147-89 / GOST R 34.12-15 Encryption Algorithm<br><br>
|
||||
* When keys and initialization vectors are converted to/from byte arrays,
|
||||
* little-endian byte order is assumed.<br><br>
|
||||
*
|
||||
* Normalized algorithm identifier common parameters:
|
||||
*
|
||||
* <ul>
|
||||
* <li><b>name</b> Algorithm name 'GOST 28147' or 'GOST R 34.12'</li>
|
||||
* <li><b>version</b> Algorithm version, number
|
||||
* <ul>
|
||||
* <li><b>1989</b> Current version of standard</li>
|
||||
* <li><b>2015</b> New draft version of standard</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li><b>length</b> Block length
|
||||
* <ul>
|
||||
* <li><b>64</b> 64 bits length (default)</li>
|
||||
* <li><b>128</b> 128 bits length (only for version 2015)</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li><b>mode</b> Algorithm mode, string
|
||||
* <ul>
|
||||
* <li><b>ES</b> Encryption mode (default)</li>
|
||||
* <li><b>MAC</b> "imitovstavka" (MAC) mode</li>
|
||||
* <li><b>KW</b> Key wrapping mode</li>
|
||||
* <li><b>MASK</b> Key mask mode</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li><b>sBox</b> Paramset sBox for GOST 28147-89, string. Used only if version = 1989</li>
|
||||
* </ul>
|
||||
*
|
||||
* Supported algorithms, modes and parameters:
|
||||
*
|
||||
* <ul>
|
||||
* <li>Encript/Decrypt mode (ES)
|
||||
* <ul>
|
||||
* <li><b>block</b> Block mode, string. Default ECB</li>
|
||||
* <li><b>keyMeshing</b> Key meshing mode, string. Default NO</li>
|
||||
* <li><b>padding</b> Padding mode, string. Default NO for CFB and CTR modes, or ZERO for others</li>
|
||||
* <li><b>iv</b> {@link CryptoOperationData} Initial vector with length of block. Default - zero block</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li>Sign/Verify mode (MAC)
|
||||
* <ul>
|
||||
* <li><b>macLength</b> Length of mac in bits (default - 32 bits)</li>
|
||||
* <li><b>iv</b> {@link CryptoOperationData} Initial vector with length of block. Default - zero block</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li>Wrap/Unwrap key mode (KW)
|
||||
* <ul>
|
||||
* <li><b>keyWrapping</b> Mode of keywrapping, string. Default NO - standard GOST key wrapping</li>
|
||||
* <li><b>ukm</b> {@link CryptoOperationData} User key material. Default - random generated value</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li>Wrap/Unwrap key mode (MASK)</li>
|
||||
* </ul>
|
||||
*
|
||||
* Supported paramters values:
|
||||
*
|
||||
* <ul>
|
||||
* <li>Block modes (parameter 'block')
|
||||
* <ul>
|
||||
* <li><b>ECB</b> "prostaya zamena" (ECB) mode (default)</li>
|
||||
* <li><b>CFB</b> "gammirovanie s obratnoj svyaziyu" (64-bit CFB) mode</li>
|
||||
* <li><b>CTR</b> "gammirovanie" (counter) mode</li>
|
||||
* <li><b>CBC</b> Cipher-Block-Chaining (CBC) mode</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li>Key meshing modes (parameter 'keyMeshing')
|
||||
* <ul>
|
||||
* <li><b>NO</b> No key wrapping (default)</li>
|
||||
* <li><b>CP</b> CryptoPor Key key meshing</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li>Padding modes (parameter 'padding')
|
||||
* <ul>
|
||||
* <li><b>NO</b> No padding only for CFB and CTR modes</li>
|
||||
* <li><b>PKCS5</b> PKCS#5 padding mode</li>
|
||||
* <li><b>ZERO</b> Zero bits padding mode</li>
|
||||
* <li><b>RANDOM</b> Random bits padding mode</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li>Wrapping key modes (parameter 'keyWrapping')
|
||||
* <ul>
|
||||
* <li><b>NO</b> Ref. rfc4357 6.1 GOST 28147-89 Key wrapping</li>
|
||||
* <li><b>CP</b> CryptoPro Key wrapping mode</li>
|
||||
* <li><b>SC</b> SignalCom Key wrapping mode</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* </ul>
|
||||
*
|
||||
* @memberOf gostEngine
|
||||
* @param {AlgorithmIndentifier} algorithm Algorithm identifier
|
||||
* @returns {GostCipher} Instance of GostCipher
|
||||
*/
|
||||
getGostCipher: function (algorithm) // <editor-fold defaultstate="collapsed">
|
||||
{
|
||||
return new (GostCipher || (GostCipher = root.GostCipher))(algorithm);
|
||||
}, // </editor-fold>
|
||||
/**
|
||||
* gostEngine.getGostDigest(algorithm) returns GOST R 34.11 cipher instance<br><br>
|
||||
*
|
||||
* Normalized algorithm identifier common parameters:
|
||||
*
|
||||
* <ul>
|
||||
* <li><b>name</b> Algorithm name 'GOST R 34.11'</li>
|
||||
* <li><b>version</b> Algorithm version
|
||||
* <ul>
|
||||
* <li><b>1994</b> old-style 256 bits digest based on GOST 28147-89</li>
|
||||
* <li><b>2012</b> 256 ro 512 bits digest algorithm "Streebog" GOST R 34.11-2012 (default)</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li><b>length</b> Digest length
|
||||
* <ul>
|
||||
* <li><b>256</b> 256 bits digest</li>
|
||||
* <li><b>512</b> 512 bits digest, valid only for algorithm "Streebog"</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li><b>mode</b> Algorithm mode
|
||||
* <ul>
|
||||
* <li><b>HASH</b> simple digest mode (default)</li>
|
||||
* <li><b>HMAC</b> HMAC algorithm based on GOST R 34.11</li>
|
||||
* <li><b>KDF</b> Derive bits for KEK deversification</li>
|
||||
* <li><b>PBKDF2</b> Password based key dirivation algorithms PBKDF2 (based on HMAC)</li>
|
||||
* <li><b>PFXKDF</b> PFX key dirivation algorithms PFXKDF</li>
|
||||
* <li><b>CPKDF</b> CryptoPro Password based key dirivation algorithms</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li><b>sBox</b> Paramset sBox for GOST 28147-89. Used only if version = 1994</li>
|
||||
* </ul>
|
||||
*
|
||||
* Supported algorithms, modes and parameters:
|
||||
*
|
||||
* <ul>
|
||||
* <li>Digest HASH mode (default)</li>
|
||||
* <li>Sign/Verify HMAC modes parameters depends on version and length
|
||||
* <ul>
|
||||
* <li><b>version: 1994</b> HMAC parameters (B = 32, L = 32)</li>
|
||||
* <li><b>version: 2012, length: 256</b> HMAC parameters (B = 64, L = 32)</li>
|
||||
* <li><b>version: 2012, length: 512</b> HMAC parameters (B = 64, L = 64)</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li>DeriveBits/DeriveKey KDF mode
|
||||
* <ul>
|
||||
* <li><b>context</b> {@link CryptoOperationData} Context of the key derivation</li>
|
||||
* <li><b>label</b> {@link CryptoOperationData} Label that identifies the purpose for the derived keying material</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li>DeriveBits/DeriveKey PBKDF2 mode
|
||||
* <ul>
|
||||
* <li><b>salt</b> {@link CryptoOperationData} Random salt as input for HMAC algorithm</li>
|
||||
* <li><b>iterations</b> Iteration count. GOST recomended value 1000 (default) or 2000</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li>DeriveBits/DeriveKey PFXKDF mode
|
||||
* <ul>
|
||||
* <li><b>salt</b> {@link CryptoOperationData} Random salt as input for HMAC algorithm</li>
|
||||
* <li><b>iterations</b> Iteration count. GOST recomended value 1000 (default) or 2000</li>
|
||||
* <li><b>diversifier</b> Deversifier, ID=1 - key material for performing encryption or decryption,
|
||||
* ID=2 - IV (Initial Value) for encryption or decryption, ID=3 - integrity key for MACing</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li>DeriveBits/DeriveKey CPKDF mode
|
||||
* <ul>
|
||||
* <li><b>salt</b> {@link CryptoOperationData} Random salt as input for HMAC algorithm</li>
|
||||
* <li><b>iterations</b> Iteration count. GOST recomended value 1000 (default) or 2000</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* </ul>
|
||||
*
|
||||
* @memberOf gostEngine
|
||||
* @param {AlgorithmIndentifier} algorithm Algorithm identifier
|
||||
* @returns {GostDigest} Instance of GostDigest
|
||||
*/
|
||||
getGostDigest: function (algorithm) // <editor-fold defaultstate="collapsed">
|
||||
{
|
||||
return new (GostDigest || (GostDigest = root.GostDigest))(algorithm);
|
||||
}, // </editor-fold>
|
||||
/**
|
||||
* gostEngine.getGostSign(algorithm) returns GOST R 34.10 cipher instance<br><br>
|
||||
*
|
||||
* Normalized algorithm identifier common parameters:
|
||||
*
|
||||
* <ul>
|
||||
* <li><b>name</b> Algorithm name 'GOST R 34.10'</li>
|
||||
* <li><b>version</b> Algorithm version
|
||||
* <ul>
|
||||
* <li><b>1994</b> - Old-style GOST R 34.10-94 ExpMod algorithm with GOST R 34.11-94 hash</li>
|
||||
* <li><b>2001</b> - GOST R 34.10-2001 Eliptic curve algorithm with old GOST R 34.11-94 hash</li>
|
||||
* <li><b>2012</b> - GOST R 34.10-2012 Eliptic curve algorithm with GOST R 34.11-12 hash, default mode</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li><b>length</b> Length of hash and signature. Key length == hash length for EC algorithms and 2 * hash length for ExpMod algorithm
|
||||
* <ul>
|
||||
* <li><b>GOST R 34.10-256</b> - 256 bits digest, default mode</li>
|
||||
* <li><b>GOST R 34.10-512</b> - 512 bits digest only for GOST R 34.11-2012 hash</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li><b>mode</b> Algorithm mode
|
||||
* <ul>
|
||||
* <li><b>SIGN</b> Digital signature mode (default)</li>
|
||||
* <li><b>DH</b> Diffie-Hellman key generation and key agreement mode</li>
|
||||
* <li><b>MASK</b> Key mask mode</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li><b>sBox</b> Paramset sBox for GOST 34.11-94. Used only if version = 1994 or 2001</li>
|
||||
* </ul>
|
||||
*
|
||||
* Supported algorithms, modes and parameters:
|
||||
*
|
||||
* <ul>
|
||||
* <li>Sign/Verify mode (SIGN)</li>
|
||||
* <li>Wrap/Unwrap mode (MASK)</li>
|
||||
* <li>DeriveKey/DeriveBits mode (DH)
|
||||
* <ul>
|
||||
* <li>{@link CryptoOperationData} <b>ukm</b> User key material. Default - random generated value</li>
|
||||
* <li>{@link CryptoOperationData} <b>public</b> The peer's EC public key data</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li>GenerateKey mode (SIGN and DH and MASK) version = 1994
|
||||
* <ul>
|
||||
* <li><b>namedParam</b> Paramset for key generation algorithm. If specified no additianal parameters required</li>
|
||||
* </ul>
|
||||
* Additional parameters, if namedParam not specified
|
||||
* <ul>
|
||||
* <li><b>modulusLength</b> Bit length of p (512 or 1024 bits). Default = 1024</li>
|
||||
* <li><b>p</b> {@link CryptoOperationData} Modulus, prime number, 2^(t-1)<p<2^t</li>
|
||||
* <li><b>q</b> {@link CryptoOperationData} Order of cyclic group, prime number, 2^254<q<2^256, q is a factor of p-1</li>
|
||||
* <li><b>a</b> {@link CryptoOperationData} Generator, integer, 1<a<p-1, at that aq (mod p) = 1</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* <li>GenerateKey mode (SIGN and DH and MASK) version = 2001 or 2012
|
||||
* <ul>
|
||||
* <li><b>namedCurve</b> Paramset for key generation algorithm. If specified no additianal parameters required</li>
|
||||
* </ul>
|
||||
* Additional EC parameters, if namedCurve not specified
|
||||
* <ul>
|
||||
* <li><b>p</b> {@link CryptoOperationData} Prime number - elliptic curve modulus</li>
|
||||
* <li><b>a</b> {@link CryptoOperationData} Coefficients a of the elliptic curve E</li>
|
||||
* <li><b>b</b> {@link CryptoOperationData} Coefficients b of the elliptic curve E</li>
|
||||
* <li><b>q</b> {@link CryptoOperationData} Prime number - order of cyclic group</li>
|
||||
* <li><b>x</b> {@link CryptoOperationData} Base point p x-coordinate</li>
|
||||
* <li><b>y</b> {@link CryptoOperationData} Base point p y-coordinate</li>
|
||||
* </ul>
|
||||
* </li>
|
||||
* </ul>
|
||||
*
|
||||
* @memberOf gostEngine
|
||||
* @param {AlgorithmIndentifier} algorithm Algorithm identifier
|
||||
* @returns {GostSign} Instance of GostSign
|
||||
*/
|
||||
getGostSign: function (algorithm) // <editor-fold defaultstate="collapsed">
|
||||
{
|
||||
return new (GostSign || (GostSign = root.GostSign))(algorithm);
|
||||
} // </editor-fold>
|
||||
};
|
||||
|
||||
/*
|
||||
* Worker method execution
|
||||
*
|
||||
*/ // <editor-fold defaultstate="collapsed">
|
||||
|
||||
// Worker for gostCripto method execution
|
||||
if (root.importScripts) {
|
||||
|
||||
/**
|
||||
* Method called when {@link SubtleCrypto} calls its own postMessage()
|
||||
* method with data parameter: algorithm, method and arg.<br>
|
||||
* Call method execute and postMessage() results to onmessage event handler
|
||||
* in the main process.<br>
|
||||
* If error occured onerror event handler executed in main process.
|
||||
*
|
||||
* @memberOf gostEngine
|
||||
* @name onmessage
|
||||
* @param {MessageEvent} event Message event with data {algorithm, method, args}
|
||||
*/
|
||||
root.onmessage = function (event) {
|
||||
try {
|
||||
postMessage({
|
||||
id: event.data.id,
|
||||
result: gostEngine.execute(event.data.algorithm,
|
||||
event.data.method, event.data.args)});
|
||||
} catch (e) {
|
||||
postMessage({
|
||||
id: event.data.id,
|
||||
error: e.message
|
||||
});
|
||||
}
|
||||
};
|
||||
} else {
|
||||
|
||||
// Load dependens
|
||||
var baseUrl = '', nameSuffix = '';
|
||||
// Try to define from DOM model
|
||||
if (typeof document !== 'undefined') {
|
||||
(function () {
|
||||
var regs = /^(.*)gostCrypto(.*)\.js$/i;
|
||||
var list = document.querySelectorAll('script');
|
||||
for (var i = 0, n = list.length; i < n; i++) {
|
||||
var value = list[i].getAttribute('src');
|
||||
var test = regs.exec(value);
|
||||
if (test) {
|
||||
baseUrl = test[1];
|
||||
nameSuffix = test[2];
|
||||
}
|
||||
}
|
||||
})();
|
||||
}
|
||||
|
||||
// Local importScripts procedure for include dependens
|
||||
var importScripts = function () {
|
||||
for (var i = 0, n = arguments.length; i < n; i++) {
|
||||
var name = arguments[i].split('.'),
|
||||
src = baseUrl + name[0] + nameSuffix + '.' + name[1];
|
||||
var el = document.querySelector('script[src="' + src + '"]');
|
||||
if (!el) {
|
||||
el = document.createElement('script');
|
||||
el.setAttribute('src', src);
|
||||
document.head.appendChild(el);
|
||||
}
|
||||
}
|
||||
};
|
||||
|
||||
// Import engines
|
||||
if (!GostRandom)
|
||||
importScripts('gostRandom.js');
|
||||
if (!GostCipher)
|
||||
importScripts('gostCipher.js');
|
||||
if (!GostDigest)
|
||||
importScripts('gostDigest.js');
|
||||
if (!GostSign)
|
||||
importScripts('gostSign.js');
|
||||
} // </editor-fold>
|
||||
|
||||
export default gostEngine;
|
||||
|
||||
|
|
@ -0,0 +1,128 @@
|
|||
/**
|
||||
* Implementation Web Crypto random generatore for GOST algorithms
|
||||
* 1.76
|
||||
* 2014-2016, Rudolf Nickolaev. All rights reserved.
|
||||
*
|
||||
* Exported for CyberChef by mshwed [m@ttshwed.com]
|
||||
*/
|
||||
|
||||
/*
|
||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
||||
* you may not use this file except in compliance with the License.
|
||||
* You may obtain a copy of the License at
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*
|
||||
* Unless required by applicable law or agreed to in writing, software
|
||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
* See the License for the specific language governing permissions and
|
||||
* limitations under the License.
|
||||
*
|
||||
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
|
||||
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
|
||||
* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
||||
* DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
|
||||
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
||||
* SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
|
||||
* CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
|
||||
* OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
||||
* OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
*
|
||||
*/
|
||||
import crypto from 'crypto';
|
||||
|
||||
|
||||
/**
|
||||
* The gostCrypto provide general purpose cryptographic functionality for
|
||||
* GOST standards including a cryptographically strong pseudo-random number
|
||||
* generator seeded with truly random values.
|
||||
*
|
||||
* @Class GostRandom
|
||||
*
|
||||
*/ // <editor-fold defaultstate="collapsed">
|
||||
|
||||
var root = {};
|
||||
var rootCrypto = crypto;
|
||||
|
||||
var TypeMismatchError = Error;
|
||||
var QuotaExceededError = Error;
|
||||
|
||||
// Initialize mouse and time counters for random generator
|
||||
var randomRing = {
|
||||
seed: new Uint8Array(1024),
|
||||
getIndex: 0,
|
||||
setIndex: 0,
|
||||
set: function (x) {
|
||||
if (this.setIndex >= 1024)
|
||||
this.setIndex = 0;
|
||||
this.seed[this.setIndex++] = x;
|
||||
},
|
||||
get: function () {
|
||||
if (this.getIndex >= 1024)
|
||||
this.getIndex = 0;
|
||||
return this.seed[this.getIndex++];
|
||||
}
|
||||
};
|
||||
|
||||
if (typeof document !== 'undefined') {
|
||||
try {
|
||||
// Mouse move event to fill random array
|
||||
document.addEventListener('mousemove', function (e) {
|
||||
randomRing.set((new Date().getTime() & 255) ^
|
||||
((e.clientX || e.pageX) & 255) ^
|
||||
((e.clientY || e.pageY) & 255));
|
||||
}, false);
|
||||
} catch (e) {
|
||||
}
|
||||
|
||||
try {
|
||||
// Keypress event to fill random array
|
||||
document.addEventListener('keydown', function (e) {
|
||||
randomRing.set((new Date().getTime() & 255) ^
|
||||
(e.keyCode & 255));
|
||||
}, false);
|
||||
} catch (e) {
|
||||
}
|
||||
} // </editor-fold>
|
||||
|
||||
function GostRandom() {
|
||||
}
|
||||
|
||||
/**
|
||||
* The getRandomValues method generates cryptographically random values. <br><br>
|
||||
*
|
||||
* Random generator based on JavaScript Web Crypto random genereator
|
||||
* (if it is possible) or Math.random mixed with time and parameters of
|
||||
* mouse and keyboard events
|
||||
*
|
||||
* @memberOf GostRandom
|
||||
* @param {(ArrayBuffer|ArrayBufferView)} array Destination buffer for random data
|
||||
*/
|
||||
GostRandom.prototype.getRandomValues = function (array) // <editor-fold defaultstate="collapsed">
|
||||
{
|
||||
|
||||
if (!array.byteLength)
|
||||
throw new TypeMismatchError('Array is not of an integer type (Int8Array, Uint8Array, Int16Array, Uint16Array, Int32Array, or Uint32Array)');
|
||||
|
||||
if (array.byteLength > 65536)
|
||||
throw new QuotaExceededError('Byte length of array can\'t be greate then 65536');
|
||||
|
||||
var u8 = new Uint8Array(array.buffer, array.byteOffset, array.byteLength);
|
||||
if (rootCrypto && rootCrypto.getRandomValues) {
|
||||
// Native window cryptographic interface
|
||||
rootCrypto.getRandomValues(u8);
|
||||
} else {
|
||||
// Standard Javascript method
|
||||
for (var i = 0, n = u8.length; i < n; i++)
|
||||
u8[i] = Math.floor(256 * Math.random()) & 255;
|
||||
}
|
||||
|
||||
// Mix bio randomizator
|
||||
for (var i = 0, n = u8.length; i < n; i++)
|
||||
u8[i] = u8[i] ^ randomRing.get();
|
||||
return array;
|
||||
}; // </editor-fold>
|
||||
|
||||
export default GostRandom;
|
||||
File diff suppressed because it is too large
Load Diff
|
|
@ -1033,6 +1033,72 @@ TestRegister.addTests([
|
|||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
name: "Streebog-256: Test Case 1",
|
||||
input: "",
|
||||
expectedOutput: "3f539a213e97c802cc229d474c6aa32a825a360b2a933a949fd925208d9ce1bb",
|
||||
recipeConfig: [
|
||||
{
|
||||
op: "Streebog",
|
||||
args: ["256"]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
name: "Streebog-256: Test Case 2",
|
||||
input: "The quick brown fox jumps over the lazy dog",
|
||||
expectedOutput: "3e7dea7f2384b6c5a3d0e24aaa29c05e89ddd762145030ec22c71a6db8b2c1f4",
|
||||
recipeConfig: [
|
||||
{
|
||||
op: "Streebog",
|
||||
args: ["256"]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
name: "Streebog-512: Test Case 1",
|
||||
input: "",
|
||||
expectedOutput: "8e945da209aa869f0455928529bcae4679e9873ab707b55315f56ceb98bef0a7362f715528356ee83cda5f2aac4c6ad2ba3a715c1bcd81cb8e9f90bf4c1c1a8a",
|
||||
recipeConfig: [
|
||||
{
|
||||
op: "Streebog",
|
||||
args: ["512"]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
name: "Streebog-512: Test Case 2",
|
||||
input: "The quick brown fox jumps over the lazy dog",
|
||||
expectedOutput: "d2b793a0bb6cb5904828b5b6dcfb443bb8f33efc06ad09368878ae4cdc8245b97e60802469bed1e7c21a64ff0b179a6a1e0bb74d92965450a0adab69162c00fe",
|
||||
recipeConfig: [
|
||||
{
|
||||
op: "Streebog",
|
||||
args: ["512"]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
name: "GOST R 34.11-94: Test Case 1",
|
||||
input: "",
|
||||
expectedOutput: "981e5f3ca30c841487830f84fb433e13ac1101569b9c13584ac483234cd656c0",
|
||||
recipeConfig: [
|
||||
{
|
||||
op: "GOST hash",
|
||||
args: ["D-A"]
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
name: "GOST R 34.11-94: Test Case 2",
|
||||
input: "This is message, length=32 bytes",
|
||||
expectedOutput: "2cefc2f7b7bdc514e18ea57fa74ff357e7fa17d652c75f69cb1be7893ede48eb",
|
||||
recipeConfig: [
|
||||
{
|
||||
op: "GOST hash",
|
||||
args: ["D-A"]
|
||||
}
|
||||
]
|
||||
}
|
||||
/*{ // This takes a LONG time to run (over a minute usually).
|
||||
name: "Scrypt: RFC test vector 4",
|
||||
input: "pleaseletmein",
|
||||
|
|
|
|||
Loading…
Reference in New Issue