1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
|
import { browser } from "$app/environment";
import { hexToUint8Array } from "uint8array-extras";
import { get } from "svelte/store";
import { Buffer } from "buffer";
import { wait, post, stretch } from "$lib/utils";
import { decrypted, password as pw, passwordPrompt, pin } from "$lib/store";
import {
getPublicKey,
finalizeEvent,
nip04,
nip19,
type EventTemplate,
} from "nostr-tools";
import {
encrypt as nip49encrypt,
decrypt as nip49decrypt,
} from "nostr-tools/nip49";
import { mnemonicToEntropy, entropyToMnemonic } from "@scure/bip39";
import { bech32m } from "@scure/base";
import { wordlist } from "@scure/bip39/wordlists/english";
import { generateSeedWords, privateKeyFromSeedWords } from "nostr-tools/nip06";
import { PUBLIC_COINOS_PUBKEY } from "$env/static/public";
let damus = "wss://relay.damus.io";
type User = {
[key: string]: any;
};
type EncryptParams = {
message: string;
recipient: string;
user: User;
};
const { encode, decode, toWords, fromWords } = bech32m;
export let generate = async (user: any) => {
let p = get(pin);
if (p && p.length !== 6) return;
let salt = crypto.getRandomValues(new Uint8Array(16));
let mnemonic = generateSeedWords();
let sk = privateKeyFromSeedWords(mnemonic);
let bytes = new Uint8Array(
await crypto.subtle.encrypt(
{ name: "AES-GCM", iv: new Uint8Array(16) },
await stretch(await getPassword(), salt),
mnemonicToEntropy(mnemonic, wordlist)
)
);
user.pubkey = getPublicKey(hexToUint8Array(sk));
user.cipher = encode("en", toWords(bytes), 180);
user.salt = Buffer.from(salt).toString("hex");
};
export let encrypt = async ({ message, recipient, user }: EncryptParams) => {
let sk = await getPrivateKey(user);
return nip04.encrypt(sk, recipient, message);
};
export let decrypt = async ({ event, user }) => {
let cache = get(decrypted);
try {
let { content, pubkey, id } = event;
if (cache[id]) return cache[id];
if (pubkey === user.pubkey) pubkey = event.tags[0][1];
let message = await nip04.decrypt(
await getPrivateKey(user),
pubkey,
content
);
cache[id] = Buffer.from(message).toString("utf8");
decrypted.set(cache);
return cache[id];
} catch (e) {
// console.log(e);
}
};
export let getPrivateKey = async (user: User): Promise<Uint8Array> => {
let k;
if (browser) {
k = localStorage.getItem("nsec");
if (k) {
return nip19.decode(k).data as Uint8Array;
}
}
let { nsec } = user;
if (nsec) {
k = nip49decrypt(nsec, await getPassword());
} else k = hexToUint8Array(privateKeyFromSeedWords(await getMnemonic(user)));
localStorage.setItem("nsec", nip19.nsecEncode(k));
return k;
};
export let getMnemonic = async (user: User) => {
let { cipher, salt } = user;
let entropy;
entropy = new Uint8Array(
await crypto.subtle.decrypt(
{ name: "AES-GCM", iv: new Uint8Array(16) },
await stretch(await getPassword(), Buffer.from(salt, "hex")),
Uint8Array.from(fromWords(decode(cipher, 180).words))
)
);
return entropyToMnemonic(entropy, wordlist);
};
let decodeNsec = (nsec: string): Uint8Array => {
let { type, data } = nip19.decode(nsec);
if (type === "nsec" && data instanceof Uint8Array) return data;
else throw new Error("invalid nsec");
};
export let getNsec = async (user: User) => {
return nip19.nsecEncode(await getPrivateKey(user));
};
export let setNsec = async (user: User, nsec: string) => {
user.pubkey = getPublicKey(decodeNsec(nsec));
user.nsec = await encryptNsec(nsec);
};
export let encryptNsec = async (nsec: string) => {
let d = decodeNsec(nsec);
return nip49encrypt(d, await getPassword());
};
type SignParams = {
event: EventTemplate;
user: User;
};
export let sign = async ({ event, user }: SignParams) => {
event = finalizeEvent(event, await getPrivateKey(user));
};
export let send = (event: EventTemplate) => {
return post("/events", { event });
};
let getPassword = async (): Promise<string> => {
if (!get(pw)) passwordPrompt.set(true);
await wait(() => !!get(pw));
return get(pw) || "";
};
export let reEncryptEntropy = async (user: User, newPassword: string) => {
let { cipher, salt } = user;
let entropy = await crypto.subtle.decrypt(
{ name: "AES-GCM", iv: new Uint8Array(16) },
await stretch(await getPassword(), hexToUint8Array(salt)),
Uint8Array.from(fromWords(decode(cipher, 180).words))
);
let bytes = new Uint8Array(
await crypto.subtle.encrypt(
{ name: "AES-GCM", iv: new Uint8Array(16) },
await stretch(newPassword, hexToUint8Array(salt)),
entropy
)
);
return encode("en", toWords(bytes), 180);
};
export let nwc = (user: User) =>
`nostr+walletconnect://${PUBLIC_COINOS_PUBKEY}?relay=${damus}&secret=${user.nwc}`;
|
