What is the equivalent of this function in Javascript/NodeJs?

user_8008823 0
Viewed 263

This is the function used to encrypt in php

function generatetoken()
{
    $token = ['id' => '123456','name' => 'username','email' => 'useremail@example.com','type' => 'user'];
    $cipher = "AES-128-CBC";
    $plaintext = json_encode($token);
    $ivlen = openssl_cipher_iv_length($cipher = "AES-128-CBC");
    $iv = openssl_random_pseudo_bytes($ivlen);
    $ciphertext_raw = openssl_encrypt($plaintext, $cipher, '123456789', $options = OPENSSL_RAW_DATA, $iv);
    $hmac = hash_hmac('sha256', $ciphertext_raw, '123456789', $as_binary = true);
    $ciphertext = base64_encode($iv . $hmac . $ciphertext_raw);       
    return ciphertext;
}

I have this function to decrypt text in php :

function decodetokeninPhp($request_token)
{
    $cipher = "AES-128-CBC";
    $c = base64_decode($request_token);
    $ivlen = openssl_cipher_iv_length($cipher = "AES-128-CBC");
    $iv = substr($c, 0, $ivlen);
    $hmac = substr($c, $ivlen, $sha2len = 32);
    $ciphertext_raw = substr($c, $ivlen + $sha2len);
    $original_plaintext = openssl_decrypt($ciphertext_raw, $cipher, '123456789', $options = OPENSSL_RAW_DATA, $iv);
    $calcmac = hash_hmac('sha256', $ciphertext_raw, '123456789', $as_binary = true);
    if (hash_equals($hmac, $calcmac)) {
      return json_encode($original_plaintext);
    } else {
       return null;
    }
}

I want the equivalent of this in javascript/Nodejs, i tried this:

function decode(token){
var password = 'My-key';
const ivLength = 16;
const sha2len = 32;
let replacedToken = token.toString();
const base64decoded = Buffer.from(replacedToken, 'base64').toString('binary');
const iv = replacedToken.substr(0,ivLength);
const hMac= replacedToken.substr( ivLength,sha2len);
const ciphertext_raw = replacedToken.substr(ivLength+sha2len);

var DataEncrypt = ciphertext_raw;
var DataKey = CryptoJS.enc.Utf8.parse(password);
var DataVector = CryptoJS.enc.Utf8.parse(iv);
var decrypted = CryptoJS.AES.decrypt(DataEncrypt, DataKey, { iv: DataVector });        
var decrypted = CryptoJS.enc.Utf8.stringify(JSON.stringify(decrypted));
console.log("token decoded"+ decrypted);
}

But the console.log just print "token decoded:", it's empty result :(

Please someone help me i'm going crazy :/

node.js openssl encryption php javascript
1 Answers

If you want to use the crypto module of NodeJS, the whole CryptoJS part has to be changed. A possible implementation with crypto is:

var crypto = require('crypto');

function decode(token){

    var keyDec = Buffer.from('0123456789012345', 'utf8'); // sample key for encryption/decryption
    var keyAuth = Buffer.from('0123456789', 'utf8');      // sample key for authentication
    var ivLen = 16;
    var macLen = 32;
    var tokenBuf = Buffer.from(token, 'base64');
    var iv = tokenBuf.slice(0, ivLen);
    var mac = tokenBuf.slice(ivLen, ivLen + macLen);
    var ciphertext = tokenBuf.slice(ivLen + macLen);

    // Authenticate
    var hmac = crypto.createHmac('sha256', keyAuth);
    hmac.update(ciphertext);
    var macCalc = hmac.digest();

    if (macCalc.equals(mac)) {

        // Decrypt, if authentication is successfull
        var decipher = crypto.createDecipheriv("AES-128-CBC", keyDec, iv);
        var decrypted = decipher.update(ciphertext, '', 'utf-8');
        decrypted += decipher.final('utf-8');
        return JSON.parse(decrypted);
    } else {
        console.log("Decryption failed");
    }
}

var token = decode('U3pukkS48yeNpsusv43Tmv2AmmDfYVtQ8jPw2izEQ0CVOfutGtA9e3ZWXJo2Ibi2axo31blnW6uq/yCz/KRSltwGhCmwpiHQ8mP5ulMf0Nr9V9Gzr6r+R6y3ZOpzTsV9IEkaKDxZTihfoDAzeyN9LYKS9uUW6URL0Do1HGaZ51o='); // from PHP code
console.log(token);

Here, the ciphertext was generated with the posted PHP code using the sample keys 0123456789012345 and 0123456789 for encryption and authentication, respectively.

I am suspicious of the json_encode() in the PHP code for decryption. Here I would expect a json_decode() and thus, in the NodeJS code a JSON.parse() (but you can modify this as needed).

user_90140970
Related