bitwarden/browser
1
0
Fork 0
mirror of https://github.com/bitwarden/browser synced 2025-12-12 22:33:35 +00:00
Code Issues Releases Wiki Activity

Add consistent and contextual logging around decryption failure (#10404)

Browse Source 
* Added more context to logging messages around decryption failure

* Added missing period.
This commit is contained in:
Todd Martin
2024-08-06 18:23:38 -04:00
committed by GitHub
parent 7cd6fcf265
commit e4ed4a3858
2 changed files with 10 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
libs/common/src/platform/services/cryptography/encrypt.service.implementation.ts
View File

@@ -71,12 +71,12 @@ export class EncryptServiceImplementation implements EncryptService {
key = this.resolveLegacyKey(key, encString);
if (key.macKey != null && encString?.mac == null) {
this.logService.error("mac required.");
this.logService.error("MAC required but not provided.");
return null;
}
if (key.encType !== encString.encryptionType) {
this.logService.error("encType unavailable.");
this.logService.error("Key encryption type does not match payload encryption type.");
return null;
}
@@ -94,7 +94,7 @@ export class EncryptServiceImplementation implements EncryptService {
);
const macsEqual = await this.cryptoFunctionService.compareFast(fastParams.mac, computedMac);
if (!macsEqual) {
this.logMacFailed("mac failed.");
this.logMacFailed("MAC comparison failed. Key or payload has changed.");
return null;
}
}
@@ -114,10 +114,12 @@ export class EncryptServiceImplementation implements EncryptService {
key = this.resolveLegacyKey(key, encThing);
if (key.macKey != null && encThing.macBytes == null) {
this.logService.error("MAC required but not provided.");
return null;
}
if (key.encType !== encThing.encryptionType) {
this.logService.error("Key encryption type does not match payload encryption type.");
return null;
}
@@ -127,12 +129,13 @@ export class EncryptServiceImplementation implements EncryptService {
macData.set(new Uint8Array(encThing.dataBytes), encThing.ivBytes.byteLength);
const computedMac = await this.cryptoFunctionService.hmac(macData, key.macKey, "sha256");
if (computedMac === null) {
this.logMacFailed("Failed to compute MAC.");
return null;
}
const macsMatch = await this.cryptoFunctionService.compare(encThing.macBytes, computedMac);
if (!macsMatch) {
this.logMacFailed("mac failed.");
this.logMacFailed("MAC comparison failed. Key or payload has changed.");
return null;
}
}