Rietveld Code Review Tool
Help | Bug tracker | Discussion group | Source code

Unified Diff: lib/rsa.js

Issue 29354778: Issue 4466 - Remove rsa.js, update core + buildtools (Closed)
Patch Set: Removed signature tests, they are tested in adblockpluscore Created Sept. 23, 2016, 1:51 p.m.
Use n/p to move between diff chunks; N/P to move between comments.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « lib/jsbn.js ('k') | lib/sha1.js » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: lib/rsa.js
diff --git a/lib/rsa.js b/lib/rsa.js
deleted file mode 100644
index c24ca68a88068eb290c412ed74377173f1bfb3de..0000000000000000000000000000000000000000
--- a/lib/rsa.js
+++ /dev/null
@@ -1,193 +0,0 @@
-/*
- * This file is part of Adblock Plus <https://adblockplus.org/>,
- * Copyright (C) 2006-2016 Eyeo GmbH
- *
- * Adblock Plus is free software: you can redistribute it and/or modify
- * it under the terms of the GNU General Public License version 3 as
- * published by the Free Software Foundation.
- *
- * Adblock Plus is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License
- * along with Adblock Plus. If not, see <http://www.gnu.org/licenses/>.
- */
-
-
-/**
- * This is a specialized RSA library meant only to verify SHA1-based signatures.
- * It requires jsbn.js and sha1.js to work.
- */
-
-(function(globalObj)
-{
- // Define ASN.1 templates for the data structures used
- function seq()
- {
- return {type: 0x30, children: Array.prototype.slice.call(arguments)};
- }
- function obj(id)
- {
- return {type: 0x06, content: id};
- }
- function bitStr(contents)
- {
- return {type: 0x03, encapsulates: contents};
- }
- function intResult(id)
- {
- return {type: 0x02, out: id};
- }
- function octetResult(id)
- {
- return {type: 0x04, out: id};
- }
-
- // See http://www.cryptopp.com/wiki/Keys_and_Formats#RSA_PublicKey
- // 2A 86 48 86 F7 0D 01 01 01 means 1.2.840.113549.1.1.1
- var publicKeyTemplate = seq(seq(obj("\x2A\x86\x48\x86\xF7\x0D\x01\x01\x01"), {}), bitStr(seq(intResult("n"), intResult("e"))));
-
- // See http://tools.ietf.org/html/rfc3447#section-9.2 step 2
- // 2B 0E 03 02 1A means 1.3.14.3.2.26
- var signatureTemplate = seq(seq(obj("\x2B\x0E\x03\x02\x1A"), {}), octetResult("sha1"));
-
- /**
- * Reads ASN.1 data matching the template passed in. This will throw an
- * exception if the data format doesn't match the template. On success an
- * object containing result properties is returned.
- *
- * See http://luca.ntop.org/Teaching/Appunti/asn1.html for info on the format.
- */
- function readASN1(data, templ)
- {
- var pos = 0;
- function next()
- {
- return data.charCodeAt(pos++);
- }
-
- function readLength()
- {
- var len = next();
- if (len & 0x80)
- {
- var cnt = len & 0x7F;
- if (cnt > 2 || cnt == 0)
- throw "Unsupported length";
-
- len = 0;
- for (var i = 0; i < cnt; i++)
- len += next() << (cnt - 1 - i) * 8;
- return len;
- }
- else
- return len;
- }
-
- function readNode(curTempl)
- {
- var type = next();
- var len = readLength();
- if ("type" in curTempl && curTempl.type != type)
- throw "Unexpected type";
- if ("content" in curTempl && curTempl.content != data.substr(pos, len))
- throw "Unexpected content";
- if ("out" in curTempl)
- out[curTempl.out] = new BigInteger(data.substr(pos, len), 256);
- if ("children" in curTempl)
- {
- var i, end;
- for (i = 0, end = pos + len; pos < end; i++)
- {
- if (i >= curTempl.children.length)
- throw "Too many children";
- readNode(curTempl.children[i]);
- }
- if (i < curTempl.children.length)
- throw "Too few children";
- if (pos > end)
- throw "Children too large";
- }
- else if ("encapsulates" in curTempl)
- {
- if (next() != 0)
- throw "Encapsulation expected";
- readNode(curTempl.encapsulates);
- }
- else
- pos += len;
- }
-
- var out = {};
- readNode(templ);
- if (pos != data.length)
- throw "Too much data";
- return out;
- }
-
- /**
- * Reads a BER-encoded RSA public key. On success returns an object with the
- * properties n and e (the components of the key), otherwise null.
- */
- function readPublicKey(key)
- {
- try
- {
- return readASN1(atob(key), publicKeyTemplate);
- }
- catch (e)
- {
- console.log("Invalid RSA public key: " + e);
- return null;
- }
- }
-
- /**
- * Checks whether the signature is valid for the given public key and data.
- */
- function verifySignature(key, signature, data)
- {
- var keyData = readPublicKey(key);
- if (!keyData)
- return false;
-
- // We need the exponent as regular number
- keyData.e = parseInt(keyData.e.toString(16), 16);
-
- // Decrypt signature data using RSA algorithm
- var sigInt = new BigInteger(atob(signature), 256);
- var digest = sigInt.modPowInt(keyData.e, keyData.n).toString(256);
-
- try
- {
- var pos = 0;
- function next()
- {
- return digest.charCodeAt(pos++);
- }
-
- // Skip padding, see http://tools.ietf.org/html/rfc3447#section-9.2 step 5
- if (next() != 1)
- throw "Wrong padding in signature digest";
- while (next() == 255) {}
- if (digest.charCodeAt(pos - 1) != 0)
- throw "Wrong padding in signature digest";
-
- // Rest is an ASN.1 structure, get the SHA1 hash from it and compare to
- // the real one
- var sha1 = readASN1(digest.substr(pos), signatureTemplate).sha1;
- var expected = new BigInteger(SHA1(data), 16);
- return (sha1.compareTo(expected) == 0);
- }
- catch (e)
- {
- console.log("Invalid encrypted signature: " + e);
- return false;
- }
- }
-
- // Export verifySignature function, everything else is private.
- globalObj.verifySignature = verifySignature;
-})(this);
« no previous file with comments | « lib/jsbn.js ('k') | lib/sha1.js » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld