feat: experimental 005 operator (#1753)

packages/snjs/lib/Services/KeyRecovery/KeyRecoveryOperation.ts

@@ -1,7 +1,7 @@
 import { ContentType } from '@standardnotes/common'
 import { ItemsKeyInterface } from '@standardnotes/models'
 import { dateSorted } from '@standardnotes/utils'
-import { SNRootKeyParams, EncryptionProvider } from '@standardnotes/encryption'
+import { SNRootKeyParams, EncryptionProviderInterface } from '@standardnotes/encryption'
 import { DecryptionQueueItem, KeyRecoveryOperationResult } from './Types'
 import { serverKeyParamsAreSafe } from './Utils'
 import { ChallengeServiceInterface, DecryptItemsKeyByPromptingUser } from '@standardnotes/services'
@@ -11,7 +11,7 @@ export class KeyRecoveryOperation {
   constructor(
     private queueItem: DecryptionQueueItem,
     private itemManager: ItemManager,
-    private protocolService: EncryptionProvider,
+    private protocolService: EncryptionProviderInterface,
     private challengeService: ChallengeServiceInterface,
     private clientParams: SNRootKeyParams | undefined,
     private serverParams: SNRootKeyParams | undefined,

packages/snjs/lib/Services/Mutator/MutatorService.ts

@@ -8,7 +8,7 @@ import {
   ChallengeReason,
   MutatorClientInterface,
 } from '@standardnotes/services'
-import { EncryptionProvider } from '@standardnotes/encryption'
+import { EncryptionProviderInterface } from '@standardnotes/encryption'
 import { ClientDisplayableError } from '@standardnotes/responses'
 import { ContentType, ProtocolVersion, compareVersions } from '@standardnotes/common'
 import { ItemManager } from '../Items'
@@ -49,7 +49,7 @@ export class MutatorService extends AbstractService implements MutatorClientInte
     private itemManager: ItemManager,
     private syncService: SNSyncService,
     private protectionService: SNProtectionService,
-    private encryption: EncryptionProvider,
+    private encryption: EncryptionProviderInterface,
     private payloadManager: PayloadManager,
     private challengeService: ChallengeService,
     private componentManager: SNComponentManager,

packages/snjs/lib/Services/Storage/DiskStorageService.ts

@@ -33,7 +33,7 @@ import {
  * key can decrypt wrapped storage.
  */
 export class DiskStorageService extends Services.AbstractService implements Services.StorageServiceInterface {
-  private encryptionProvider!: Encryption.EncryptionProvider
+  private encryptionProvider!: Encryption.EncryptionProviderInterface
   private storagePersistable = false
   private persistencePolicy!: Services.StoragePersistencePolicies
   private encryptionPolicy!: Services.StorageEncryptionPolicy
@@ -53,7 +53,7 @@ export class DiskStorageService extends Services.AbstractService implements Serv
     void this.setEncryptionPolicy(Services.StorageEncryptionPolicy.Default, false)
   }
 
-  public provideEncryptionProvider(provider: Encryption.EncryptionProvider): void {
+  public provideEncryptionProvider(provider: Encryption.EncryptionProviderInterface): void {
     this.encryptionProvider = provider
   }
 

packages/snjs/mocha/auth.test.js

@@ -39,12 +39,14 @@ describe('basic auth', function () {
     let error = null
     try {
       await this.application.register(this.email, password)
-    } catch(caughtError) {
+    } catch (caughtError) {
       error = caughtError
     }
 
-    expect(error.message).to.equal('Your password must be at least 8 characters in length. '
-    + 'For your security, please choose a longer password or, ideally, a passphrase, and try again.')
+    expect(error.message).to.equal(
+      'Your password must be at least 8 characters in length. ' +
+        'For your security, please choose a longer password or, ideally, a passphrase, and try again.',
+    )
 
     expect(await this.application.protocolService.getRootKey()).to.not.be.ok
   })

packages/snjs/mocha/lib/fake_web_crypto.js

@@ -69,7 +69,8 @@ export default class FakeWebCrypto {
   }
 
   generateRandomKey(bits) {
-    const length = bits / 8
+    const bitsPerHexChar = 4
+    const length = bits / bitsPerHexChar
     return this.randomString(length)
   }
 
@@ -107,7 +108,13 @@ export default class FakeWebCrypto {
   }
 
   argon2(password, salt, iterations, bytes, length) {
-    return btoa(password)
+    const bitsPerHexChar = 4
+    const bitsInByte = 8
+    const encoded = btoa(password)
+    const desiredLength = length * (bitsInByte / bitsPerHexChar)
+    const missingLength = desiredLength - encoded.length
+    const result = `${encoded}${encoded.repeat(Math.ceil(missingLength / encoded.length))}`.slice(0, desiredLength)
+    return result
   }
 
   xchacha20Encrypt(plaintext, nonce, key, assocData) {
@@ -128,6 +135,33 @@ export default class FakeWebCrypto {
     return data.plaintext
   }
 
+  sodiumCryptoBoxEasyEncrypt(message, nonce, senderSecretKey, recipientPublicKey) {
+    const data = {
+      message,
+      nonce,
+      senderSecretKey,
+      recipientPublicKey,
+    }
+    return btoa(JSON.stringify(data))
+  }
+
+  sodiumCryptoBoxEasyDecrypt(ciphertext, nonce, senderPublicKey, recipientSecretKey) {
+    const data = JSON.parse(atob(ciphertext))
+    if (
+      data.senderPublicKey !== senderPublicKey ||
+      data.recipientSecretKey !== recipientSecretKey ||
+      data.nonce !== nonce ||
+      data.assocData !== assocData
+    ) {
+      return undefined
+    }
+    return data.message
+  }
+
+  sodiumCryptoBoxGenerateKeypair() {
+    return { publicKey: this.randomString(64), privateKey: this.randomString(64), keyType: 'x25519' }
+  }
+
   generateOtpSecret() {
     return 'WQVV2GFBRQWU3UQZWQFZC37PSNRXKTA6'
   }