CyberChef/src/core/operations/GenerateRSAKeyPair.mjs

124 lines
4.2 KiB
JavaScript

/**
* @author Matt C [me@mitt.dev]
* @author gchq77703 []
* @copyright Crown Copyright 2018
* @license Apache-2.0
*/
import Operation from "../Operation.mjs";
import forge from "node-forge";
import { toBase64 } from "../lib/Base64.mjs";
import { fromHex } from "../lib/Hex.mjs";
import { cryptNotice } from "../lib/Crypt.mjs";
/**
* Generate RSA Key Pair operation
*/
class GenerateRSAKeyPair extends Operation {
/**
* GenerateRSAKeyPair constructor
*/
constructor() {
super();
this.name = "Generate RSA Key Pair";
this.module = "Ciphers";
this.description = `Generate an RSA key pair with a given number of bits.<br><br>${cryptNotice}`;
this.infoURL = "https://wikipedia.org/wiki/RSA_(cryptosystem)";
this.inputType = "string";
this.outputType = "string";
this.args = [
{
name: "RSA Key Length",
type: "option",
value: [
"1024",
"2048",
"4096"
]
},
{
name: "Output Format",
type: "option",
value: [
"PEM",
"JWK",
"JSON",
"DER"
]
}
];
}
/**
* @param {string} input
* @param {Object[]} args
* @returns {string}
*/
async run(input, args) {
const [keyLength, outputFormat] = args;
return new Promise((resolve, reject) => {
forge.pki.rsa.generateKeyPair({
bits: Number(keyLength),
workers: -1,
workerScript: "assets/forge/prime.worker.min.js"
}, (err, keypair) => {
if (err) return reject(err);
let result;
switch (outputFormat) {
case "PEM":
result = forge.pki.publicKeyToPem(keypair.publicKey) + "\n" + forge.pki.privateKeyToPem(keypair.privateKey);
break;
case "JWK": {
const base64urlUInt = function (bigInt) {
let hex = bigInt.toString(16);
// prepend 0 if not even
if (hex.length % 2 === 1) {
hex = "0" + hex;
}
return toBase64(fromHex(hex), "A-Za-z0-9-_");
};
const pubKey = {
kty: "RSA",
kid: "PublicKey",
key_ops: ["verify", "encrypt"], // eslint-disable-line camelcase
n: base64urlUInt(keypair.publicKey.n),
e: base64urlUInt(keypair.publicKey.e)
};
const privKey = {
kty: "RSA",
kid: "PrivateKey",
key_ops: ["sign", "decrypt"], // eslint-disable-line camelcase
n: base64urlUInt(keypair.privateKey.n),
e: base64urlUInt(keypair.privateKey.e),
d: base64urlUInt(keypair.privateKey.d),
p: base64urlUInt(keypair.privateKey.p),
q: base64urlUInt(keypair.privateKey.q),
dp: base64urlUInt(keypair.privateKey.dP),
dq: base64urlUInt(keypair.privateKey.dQ),
qi: base64urlUInt(keypair.privateKey.qInv)
};
result = JSON.stringify({keys: [privKey, pubKey]}, null, 4);
break;
}
case "JSON":
result = JSON.stringify(keypair);
break;
case "DER":
result = forge.asn1.toDer(forge.pki.privateKeyToAsn1(keypair.privateKey)).getBytes();
break;
}
resolve(result);
});
});
}
}
export default GenerateRSAKeyPair;