kenmirrors/ente
1
0
Fork 0
mirror of https://github.com/ente-io/ente.git synced 2025-08-08 15:30:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

Doc

Browse Source
This commit is contained in:
Manav Rathi 2024-11-27 14:17:35 +05:30
parent fc40b8fdd4
commit e910ae16ff
No known key found for this signature in database
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
web/packages/base/crypto/libsodium.ts
View File

@ -752,7 +752,19 @@ export const deriveKey = async (
); );
}; };
export async function deriveSensitiveKey(passphrase: string, salt: string) { /**
* A variant of {@link deriveKey} with (dynamic) parameters for deriving
* sensitive keys (like the user's master key kek (key encryption key).
*
* This function defers to {@link deriveKey} after choosing the most secure ops
* and mem limits that the current device can handle. For details about these
* limits, see https://libsodium.gitbook.io/doc/password_hashing/default_phf.
*
* @returns Both the derived key, and the ops and mem limits that were chosen
* during the derivation (this information will be needed the user's other
* clients to derive the same result).
*/
export const deriveSensitiveKey = async (passphrase: string, salt: string) => {
await sodium.ready; await sodium.ready;
const minMemLimit = sodium.crypto_pwhash_MEMLIMIT_MIN; const minMemLimit = sodium.crypto_pwhash_MEMLIMIT_MIN;
let opsLimit = sodium.crypto_pwhash_OPSLIMIT_SENSITIVE; let opsLimit = sodium.crypto_pwhash_OPSLIMIT_SENSITIVE;
@ -773,7 +785,7 @@ export async function deriveSensitiveKey(passphrase: string, salt: string) {
throw new Error("Failed to derive key: Memory limit exceeded"); throw new Error("Failed to derive key: Memory limit exceeded");
} }
export async function deriveInteractiveKey(passphrase: string, salt: string) { export const deriveInteractiveKey = async (passphrase: string, salt: string) => {
const opsLimit = sodium.crypto_pwhash_OPSLIMIT_INTERACTIVE; const opsLimit = sodium.crypto_pwhash_OPSLIMIT_INTERACTIVE;
const memLimit = sodium.crypto_pwhash_MEMLIMIT_INTERACTIVE; const memLimit = sodium.crypto_pwhash_MEMLIMIT_INTERACTIVE;