Compare commits

...
5 Commits
Author SHA1 Message Date
fyears 60d5b78df0 fix length 2021-11-04 10:16:07 +08:00
fyears f04017e05b init web crypto 2021-11-04 10:10:05 +08:00
fyears cb0098ec85 fix delete 2021-11-03 12:04:11 +08:00
fyears d007d5f230 bump 0.0.6 2021-11-03 01:05:16 +08:00
fyears 07c6fbe747 change password position 2021-11-03 01:05:07 +08:00
7 changed files with 102 additions and 76 deletions
+1 -1
View File
@@ -1,7 +1,7 @@
{ {
"id": "obsdian-save-remote", "id": "obsdian-save-remote",
"name": "Save remote", "name": "Save remote",
"version": "0.0.5", "version": "0.0.6",
"minAppVersion": "0.12.15", "minAppVersion": "0.12.15",
"description": "This is yet another plugin allowing users to sync notes between local device and the cloud.", "description": "This is yet another plugin allowing users to sync notes between local device and the cloud.",
"author": "fyears", "author": "fyears",
+1 -1
View File
@@ -1,6 +1,6 @@
{ {
"name": "obsidian-save-remote", "name": "obsidian-save-remote",
"version": "0.0.5", "version": "0.0.6",
"description": "This is yet another sync plugin for Obsidian app.", "description": "This is yet another sync plugin for Obsidian app.",
"scripts": { "scripts": {
"dev": "webpack --mode development --watch", "dev": "webpack --mode development --watch",
+78 -52
View File
@@ -1,57 +1,33 @@
import { randomBytes, createDecipheriv, createCipheriv } from "crypto";
import { pbkdf2, createSHA256 } from "hash-wasm";
import { promisify } from "util";
import * as base32 from "hi-base32"; import * as base32 from "hi-base32";
import { bufferToArrayBuffer, arrayBufferToBuffer } from "./misc"; import { bufferToArrayBuffer, arrayBufferToBuffer } from "./misc";
const DEFAULT_ITER = 10000; const DEFAULT_ITER = 10000;
export const encryptBuffer = async ( const getKeyIVFromPassword = async (
buf: Buffer, salt: Uint8Array,
password: string, password: string,
rounds: number = DEFAULT_ITER rounds: number = DEFAULT_ITER
) => { ) => {
const salt = await promisify(randomBytes)(8); const k1 = await window.crypto.subtle.importKey(
const derivedKey = await pbkdf2({ "raw",
password: password, new TextEncoder().encode(password),
salt: salt, { name: "PBKDF2" },
iterations: rounds, false,
hashLength: 32 + 16, ["deriveKey", "deriveBits"]
hashFunction: createSHA256(), );
outputType: "binary",
});
const key = derivedKey.slice(0, 32);
const iv = derivedKey.slice(32, 32 + 16);
const cipher = createCipheriv("aes-256-cbc", key, iv);
cipher.write(buf);
cipher.end();
const encrypted = cipher.read();
const res = Buffer.concat([Buffer.from("Salted__"), salt, encrypted]);
return res;
};
export const decryptBuffer = async ( const k2 = await window.crypto.subtle.deriveBits(
buf: Buffer, {
password: string, name: "PBKDF2",
rounds: number = DEFAULT_ITER salt: salt,
) => { iterations: rounds,
const prefix = buf.slice(0, 8); hash: "SHA-256",
const salt = buf.slice(8, 16); },
const derivedKey = await pbkdf2({ k1,
password: password, 256 + 128
salt: salt, );
iterations: rounds,
hashLength: 32 + 16, return k2;
hashFunction: createSHA256(),
outputType: "binary",
});
const key = derivedKey.slice(0, 32);
const iv = derivedKey.slice(32, 32 + 16);
const decipher = createDecipheriv("aes-256-cbc", key, iv);
decipher.write(buf.slice(16));
decipher.end();
const decrypted = decipher.read();
return decrypted as Buffer;
}; };
export const encryptArrayBuffer = async ( export const encryptArrayBuffer = async (
@@ -59,9 +35,37 @@ export const encryptArrayBuffer = async (
password: string, password: string,
rounds: number = DEFAULT_ITER rounds: number = DEFAULT_ITER
) => { ) => {
return bufferToArrayBuffer( const salt = window.crypto.getRandomValues(new Uint8Array(8));
await encryptBuffer(arrayBufferToBuffer(arrBuf), password, rounds)
const derivedKey = await getKeyIVFromPassword(salt, password, rounds);
const key = derivedKey.slice(0, 32);
const iv = derivedKey.slice(32, 32 + 16);
const keyCrypt = await window.crypto.subtle.importKey(
"raw",
key,
{ name: "AES-CBC" },
false,
["encrypt", "decrypt"]
); );
const enc = (await window.crypto.subtle.encrypt(
{ name: "AES-CBC", iv },
keyCrypt,
arrBuf
)) as ArrayBuffer;
const prefix = new TextEncoder().encode("Salted__");
const res = new Uint8Array(
[
...prefix,
...salt,
...new Uint8Array(enc)
]
);
return bufferToArrayBuffer(res);
}; };
export const decryptArrayBuffer = async ( export const decryptArrayBuffer = async (
@@ -69,9 +73,31 @@ export const decryptArrayBuffer = async (
password: string, password: string,
rounds: number = DEFAULT_ITER rounds: number = DEFAULT_ITER
) => { ) => {
return bufferToArrayBuffer( const prefix = arrBuf.slice(0, 8);
await decryptBuffer(arrayBufferToBuffer(arrBuf), password, rounds) const salt = arrBuf.slice(8, 16);
const derivedKey = await getKeyIVFromPassword(
new Uint8Array(salt),
password,
rounds
); );
const key = derivedKey.slice(0, 32);
const iv = derivedKey.slice(32, 32 + 16);
const keyCrypt = await window.crypto.subtle.importKey(
"raw",
key,
{ name: "AES-CBC" },
false,
["encrypt", "decrypt"]
);
const dec = (await window.crypto.subtle.decrypt(
{ name: "AES-CBC", iv },
keyCrypt,
arrBuf.slice(16)
)) as ArrayBuffer;
return dec;
}; };
export const encryptStringToBase32 = async ( export const encryptStringToBase32 = async (
@@ -80,7 +106,7 @@ export const encryptStringToBase32 = async (
rounds: number = DEFAULT_ITER rounds: number = DEFAULT_ITER
) => { ) => {
return base32.encode( return base32.encode(
await encryptBuffer(Buffer.from(text), password, rounds) await encryptArrayBuffer(new TextEncoder().encode(text), password, rounds)
); );
}; };
@@ -90,8 +116,8 @@ export const decryptBase32ToString = async (
rounds: number = DEFAULT_ITER rounds: number = DEFAULT_ITER
) => { ) => {
return ( return (
await decryptBuffer( await decryptArrayBuffer(
Buffer.from(base32.decode.asBytes(text)), bufferToArrayBuffer(Uint8Array.from(base32.decode.asBytes(text))),
password, password,
rounds rounds
) )
+13 -19
View File
@@ -62,13 +62,6 @@ export default class SaveRemotePlugin extends Plugin {
}) })
); );
// this.addRibbonIcon("dice", "Misc", async () => {
// const a = this.app.vault.getAllLoadedFiles();
// console.log(a);
// const h = await getAllRecords(this.db);
// console.log(h);
// });
this.addRibbonIcon("switch", "Save Remote", async () => { this.addRibbonIcon("switch", "Save Remote", async () => {
if (this.syncStatus !== "idle") { if (this.syncStatus !== "idle") {
new Notice("Save Remote already running!"); new Notice("Save Remote already running!");
@@ -221,18 +214,6 @@ class SaveRemoteSettingTab extends PluginSettingTab {
await this.plugin.saveSettings(); await this.plugin.saveSettings();
}) })
); );
new Setting(containerEl)
.setName("password")
.setDesc("password")
.addText((text) =>
text
.setPlaceholder("")
.setValue(`${this.plugin.settings.password}`)
.onChange(async (value) => {
this.plugin.settings.password = value;
await this.plugin.saveSettings();
})
);
new Setting(containerEl) new Setting(containerEl)
.setName("s3BucketName") .setName("s3BucketName")
@@ -246,5 +227,18 @@ class SaveRemoteSettingTab extends PluginSettingTab {
await this.plugin.saveSettings(); await this.plugin.saveSettings();
}) })
); );
new Setting(containerEl)
.setName("password")
.setDesc("password")
.addText((text) =>
text
.setPlaceholder("")
.setValue(`${this.plugin.settings.password}`)
.onChange(async (value) => {
this.plugin.settings.password = value;
await this.plugin.saveSettings();
})
);
} }
} }
+1 -1
View File
@@ -46,7 +46,7 @@ export const mkdirpInVault = async (thePath: string, vault: Vault) => {
* @param b Buffer * @param b Buffer
* @returns ArrayBuffer * @returns ArrayBuffer
*/ */
export const bufferToArrayBuffer = (b: Buffer) => { export const bufferToArrayBuffer = (b: Buffer | Uint8Array) => {
return b.buffer.slice(b.byteOffset, b.byteOffset + b.byteLength); return b.buffer.slice(b.byteOffset, b.byteOffset + b.byteLength);
}; };
+7 -1
View File
@@ -355,7 +355,13 @@ export const doActualSync = async (
remoteEncryptedKey remoteEncryptedKey
); );
} else if (state.decision === "delremote_clearhist") { } else if (state.decision === "delremote_clearhist") {
await deleteFromRemote(s3Client, s3Config, state.key); await deleteFromRemote(
s3Client,
s3Config,
state.key,
password,
remoteEncryptedKey
);
await clearDeleteRenameHistoryOfKey(db, state.key); await clearDeleteRenameHistoryOfKey(db, state.key);
} else if (state.decision === "upload") { } else if (state.decision === "upload") {
const remoteObjMeta = await uploadToRemote( const remoteObjMeta = await uploadToRemote(
+1 -1
View File
@@ -1,3 +1,3 @@
{ {
"0.0.5": "0.12.15" "0.0.6": "0.12.15"
} }