From 46e33eb5ba63276836322b11abfbff6432c98ff6 Mon Sep 17 00:00:00 2001
From: Adam Soltys <asoltys@gmail.com>
Date: Fri, 6 Jan 2023 12:23:40 -0800
Subject: re-encrypt entropy on password change

---
 src/lib/nostr.js | 38 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)

(limited to 'src/lib/nostr.js')

diff --git a/src/lib/nostr.js b/src/lib/nostr.js
index ae18fbf1..35d843b2 100644
--- a/src/lib/nostr.js
+++ b/src/lib/nostr.js
@@ -131,3 +131,41 @@ export let sign = async ({ event, user }) => {
 export let send = (event) => {
 	return post('/events', { event });
 };
+
+export let reEncryptEntropy = async (user, newPassword) => {
+	let { cipher, username, salt } = user;
+	let password = get(pw);
+
+	if (!password) {
+		passwordPrompt.set(true);
+	}
+
+	try {
+		await post('/password', { password });
+	} catch (e) {
+		passwordPrompt.set(true);
+	}
+
+	await wait(() => !!get(pw));
+	password = get(pw);
+
+	let mnemonic, key, seed, entropy, child, privkey;
+	entropy = Buffer.from(
+		await crypto.subtle.decrypt(
+			{ name: 'AES-GCM', iv: new Uint8Array(16) },
+			await stretch(password, Buffer.from(salt, 'hex')),
+			Uint8Array.from(fromWords(decode(cipher, 180).words))
+		),
+		'hex'
+	).toString('hex');
+
+	let bytes = new Uint8Array(
+		await crypto.subtle.encrypt(
+			{ name: 'AES-GCM', iv: new Uint8Array(16) },
+			await stretch(newPassword, Buffer.from(salt, 'hex')),
+			Uint8Array.from(Buffer.from(entropy, 'hex'))
+		)
+	);
+
+	return encode('en', toWords(bytes), 180);
+};
-- 
cgit v1.2.3