setup various services and login page

src/services/cryptoService.js

@@ -0,0 +1,128 @@
+var g_cryptoService = function () {
+    var _service = {}, _key, _b64Key, _aes;
+
+    sjcl.beware['CBC mode is dangerous because it doesn\'t protect message integrity.']();
+
+    _service.setKey = function (key, callback) {
+        if (!callback || typeof callback !== 'function') {
+            throw 'callback function required';
+        }
+
+        _key = key;
+        chrome.storage.local.set({
+            'key': sjcl.codec.base64.fromBits(key)
+        }, function () {
+            callback();
+        });
+    };
+
+    _service.getKey = function (b64, callback) {
+        if (!callback || typeof callback !== 'function') {
+            throw 'callback function required';
+        }
+
+        if (b64 && b64 === true && _b64Key) {
+            return callback(_b64Key);
+        }
+        else if (!b64 && _key) {
+            return callback(_key);
+        }
+
+        chrome.storage.local.get('key', function (key) {
+            if (key) {
+                _key = sjcl.codec.base64.toBits(key);
+            }
+
+            if (b64 && b64 === true) {
+                _b64Key = sjcl.codec.base64.fromBits(_key);
+                return callback(_b64Key);
+            }
+
+            return callback(_key);
+        });
+    };
+
+    _service.clearKey = function (callback) {
+        if (!callback || typeof callback !== 'function') {
+            throw 'callback function required';
+        }
+
+        _key = _b64Key = _aes = null;
+        chrome.storage.local.remove('key', function () {
+            callback();
+        });
+    };
+
+    _service.makeKey = function (password, salt, b64) {
+        var key = sjcl.misc.pbkdf2(password, salt, 5000, 256, null);
+
+        if (b64 && b64 === true) {
+            return sjcl.codec.base64.fromBits(key);
+        }
+
+        return key;
+    };
+
+    _service.hashPassword = function (password, key) {
+        if (!key) {
+            key = _service.getKey();
+        }
+
+        if (!password || !key) {
+            throw 'Invalid parameters.';
+        }
+
+        var hashBits = sjcl.misc.pbkdf2(key, password, 1, 256, null);
+        return sjcl.codec.base64.fromBits(hashBits);
+    };
+
+    _service.getAes = function () {
+        if (!_aes && _service.getKey()) {
+            _aes = new sjcl.cipher.aes(_service.getKey());
+        }
+
+        return _aes;
+    };
+
+    _service.encrypt = function (plaintextValue, key) {
+        if (!_service.getKey() && !key) {
+            throw 'Encryption key unavailable.';
+        }
+
+        if (!key) {
+            key = _service.getKey();
+        }
+
+        var response = {};
+        var params = {
+            mode: "cbc",
+            iv: sjcl.random.randomWords(4, 0)
+        };
+
+        var ctJson = sjcl.encrypt(key, plaintextValue, params, response);
+
+        var ct = ctJson.match(/"ct":"([^"]*)"/)[1];
+        var iv = sjcl.codec.base64.fromBits(response.iv);
+
+        return iv + "|" + ct;
+    };
+
+    _service.decrypt = function (encValue) {
+        if (!_service.getAes()) {
+            throw 'AES encryption unavailable.';
+        }
+
+        var encPieces = encValue.split('|');
+        if (encPieces.length !== 2) {
+            return '';
+        }
+
+        var ivBits = sjcl.codec.base64.toBits(encPieces[0]);
+        var ctBits = sjcl.codec.base64.toBits(encPieces[1]);
+
+        var decBits = sjcl.mode.cbc.decrypt(_service.getAes(), ctBits, ivBits, null);
+        return sjcl.codec.utf8String.fromBits(decBits);
+    };
+
+    return _service;
+};