chalec
/
ctrlv-privatebin
6
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

make key size and authentication tag size explicit instead of trusting on defaults

This commit is contained in:
El RIDO 2016-08-09 13:16:15 +02:00
parent 5b7b234821
commit a28aebae7d
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
js/privatebin.js
View File

@ -491,11 +491,13 @@ $(function() {
*/ */
cipher: function(key, password, message) cipher: function(key, password, message)
{ {
// Galois Counter Mode, keysize 256 bit, authentication tag 128 bit
var options = {mode: 'gcm', ks: 256, ts: 128};
if ((password || '').trim().length === 0) if ((password || '').trim().length === 0)
{ {
return sjcl.encrypt(key, this.compress(message), {mode : 'gcm'}); return sjcl.encrypt(key, this.compress(message), options);
} }
return sjcl.encrypt(key + sjcl.codec.hex.fromBits(sjcl.hash.sha256.hash(password)), this.compress(message), {mode : 'gcm'}); return sjcl.encrypt(key + sjcl.codec.hex.fromBits(sjcl.hash.sha256.hash(password)), this.compress(message), options);
}, },
/** /**