tweb-i2p/src/lib/mtproto/passwordManager.ts

import apiManager from "./apiManager";
import { bufferConcats, bytesToHex, bytesFromHex, bufferConcat, bytesXor } from "../bin_utils";
import CryptoWorker from "../crypto/cryptoworker";
import {str2bigInt, greater, isZero,
  // @ts-ignore
  bigInt2str, powMod, int2bigInt, mult, mod, sub, bitSize, negative, mult, add} from 'leemon';

export class PasswordManager {
  public getState(options: any = {}) {
    return apiManager.invokeApi('account.getPassword', {}, options).then((result) => {
      return result
    });
  }

  /* public updateSettings(state: any, settings: any) {
    var currentHashPromise;
    var newHashPromise;
    var params: any = {
      new_settings: {
        _: 'account.passwordInputSettings',
        flags: 0,
        hint: settings.hint || ''
      }
    };

    if(typeof settings.cur_password === 'string' &&
      settings.cur_password.length > 0) {
      currentHashPromise = this.makePasswordHash(state.current_salt, settings.cur_password);
    } else {
      currentHashPromise = Promise.resolve([]);
    }

    if (typeof settings.new_password === 'string' &&
      settings.new_password.length > 0) {
      var saltRandom = new Array(8);
      var newSalt = bufferConcat(state.new_salt, saltRandom);
      secureRandom.nextBytes(saltRandom);
      newHashPromise = this.makePasswordHash(newSalt, settings.new_password);
      params.new_settings.new_salt = newSalt;
      params.new_settings.flags |= 1;
    } else {
      if(typeof settings.new_password === 'string') {
        params.new_settings.flags |= 1;
        params.new_settings.new_salt = [];
      }
      newHashPromise = Promise.resolve([]);
    }

    if(typeof settings.email === 'string') {
      params.new_settings.flags |= 2;
      params.new_settings.email = settings.email || '';
    }

    return Promise.all([currentHashPromise, newHashPromise]).then((hashes) => {
      params.current_password_hash = hashes[0];
      params.new_settings.new_password_hash = hashes[1];

      return apiManager.invokeApi('account.updatePasswordSettings', params);
    });
  } */

  public check(state: any, password: string, options: any = {}) {
    return this.computeCheck(password, state).then((inputCheckPassword) => {
      return apiManager.invokeApi('auth.checkPassword', {
        password: inputCheckPassword
      }, options);
    });
  }

  public requestRecovery(options: any = {}) {
    return apiManager.invokeApi('auth.requestPasswordRecovery', {}, options);
  }

  public recover(code: any, options: any = {}) {
    return apiManager.invokeApi('auth.recoverPassword', {
      code: code
    }, options);
  }

  public makePasswordHash(password: string, client_salt: Uint8Array, server_salt: Uint8Array) {
    var passwordUTF8 = unescape(encodeURIComponent(password));

    // @ts-ignore
    const textEncoder = new TextEncoder("utf-8");
    const passwordBuffer = textEncoder.encode(passwordUTF8);

    // right

    let buffer = bufferConcats(client_salt, passwordBuffer, client_salt);

    return CryptoWorker.sha256Hash(buffer).then((buffer: any) => {
      console.log('encoded 1', bytesToHex(new Uint8Array(buffer)));

      buffer = bufferConcats(server_salt, buffer, server_salt);
      return CryptoWorker.sha256Hash(buffer).then((buffer: any) => {

        console.log('encoded 2', buffer, bytesToHex(new Uint8Array(buffer)));

        return CryptoWorker.pbkdf2(new Uint8Array(buffer), client_salt, 100000).then((hash: any) => {
          console.log('encoded 3', hash, bytesToHex(new Uint8Array(hash)));

          hash = bufferConcats(server_salt, hash, server_salt);
          return CryptoWorker.sha256Hash(hash).then((buffer: any) => {
            console.log('got password hash:', buffer, bytesToHex(new Uint8Array(buffer)));

            return buffer;
          });
        });
      });
    });
  }

  public async computeCheck(password: string, state: any) {
    let algo = state.current_algo;

    let p = str2bigInt(bytesToHex(algo.p), 16);
    let B = str2bigInt(bytesToHex(state.srp_B), 16);
    let g = int2bigInt(algo.g, 32, 256);

    console.log('p', bigInt2str(p, 16));
    console.log('B', bigInt2str(B, 16));

    /* if(B.compareTo(BigInteger.ZERO) < 0) {
      console.error('srp_B < 0')
    }

    if(B.compareTo(p) <= 0) {
      console.error('srp_B <= p');
    } */

    /* let check_prime_and_good = (bytes: any, g: number) => {
      let good_prime = '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';
      
      if(bytesToHex(bytes) == good_prime && [3, 4, 5, 7].indexOf(g) !== -1) {
        return true;
      }

      // TO-DO check_prime_and_good_check
    }; */

    //check_prime_and_good(algo.p, g);

    let pw_hash = await this.makePasswordHash(password, new Uint8Array(algo.salt1), 
      new Uint8Array(algo.salt2)) as ArrayBuffer;
    let x = str2bigInt(bytesToHex(new Uint8Array(pw_hash)), 16);

    console.warn('computed pw_hash:', pw_hash, x, bytesToHex(new Uint8Array(pw_hash)));


    var padArray = function(arr: any[], len: number, fill = 0) {
      return Array(len).fill(fill).concat(arr).slice(-len);
    };

    let pForHash = padArray(bytesFromHex(bigInt2str(p, 16)), 256);
    let gForHash = padArray(bytesFromHex(bigInt2str(g, 16)), 256); // like uint8array
    let b_for_hash = padArray(bytesFromHex(bigInt2str(B, 16)), 256);

    console.log(bytesToHex(pForHash));
    console.log(bytesToHex(gForHash));
    console.log(bytesToHex(b_for_hash));

    let g_x = powMod(g, x, p);

    console.log('g_x', bigInt2str(g_x, 16));

    let k: any = await CryptoWorker.sha256Hash(bufferConcat(pForHash, gForHash));
    k = str2bigInt(bytesToHex(new Uint8Array(k)), 16);

    console.log('k', bigInt2str(k, 16));

    // kg_x = (k * g_x) % p
    let kg_x = mod(mult(k, g_x), p);

    // good

    console.log('kg_x', bigInt2str(kg_x, 16));

    let is_good_mod_exp_first = (modexp: any, prime: any) => {
      let diff = sub(prime, modexp);
      let min_diff_bits_count = 2048 - 64;
      let max_mod_exp_size = 256;
      if(negative(diff) ||
        bitSize(diff) < min_diff_bits_count || 
        bitSize(modexp) < min_diff_bits_count || 
        Math.floor((bitSize(modexp) + 7) / 8) > max_mod_exp_size)
          return false;
      return true;
    };

    let generate_and_check_random = async() => {
      //let random_size = 256;
      while(true) {
        /* let a = addPadding([], random_size, false, true);
        a = str2bigInt(bytesToHex(a), 16); */
        //let a = randBigInt(random_size, 1);
        let a = str2bigInt(bytesToHex(state.secure_random), 16);

        /* console.log('a', bigInt2str(a, 16));
        break; */

        let A = powMod(g, a, p);
        //console.log('A', bigInt2str(A, 16));
        if(is_good_mod_exp_first(A, p)) {
          // a_for_hash = big_num_for_hash(A)
          let a_for_hash = bytesFromHex(bigInt2str(A, 16));

          let s: any = await CryptoWorker.sha256Hash(
            bufferConcat(new Uint8Array(a_for_hash), new Uint8Array(b_for_hash)));
          let u = str2bigInt(bytesToHex(new Uint8Array(s)), 16);
          //if(u > 0)
          if(!isZero(u) && !negative(u))
            return {a, a_for_hash, u};
        } 
      }
    }
      

    let {a, a_for_hash, u} = await generate_and_check_random();

    console.log('a', bigInt2str(a, 16));
    console.log('a_for_hash', bytesToHex(a_for_hash));
    console.log('u', bigInt2str(u, 16));

    // g_b = (B - kg_x) % p
    console.log('B - kg_x', bigInt2str(sub(B, kg_x), 16));
    //let g_b = mod(sub(B, kg_x), p);
    /* let g_b = sub(B, kg_x);
    if(negative(g_b)) g_b = add(g_b, p);
    else g_b = mod(g_b, p); */
    /* let g_b; // g_b = sub(mod(B, p), kg_x);
    if(!negative(sub(B, kg_x))) g_b = sub(mod(B, p), kg_x);
    else g_b = mod(sub(B, kg_x), p); */
    /* let lol = trim(sub(B, kg_x), 10);
    console.log('llalala', bigInt2str(lol, 16)); */
    let g_b;
    if(!greater(B, kg_x)) {
      console.log('negative');
      g_b = add(B, p);
    } else g_b = B;
    g_b = mod(sub(g_b, kg_x), p);
    //g_b = mod(g_b, p);
    //console.log('g_b', bigInt2str(g_b, 16));

    /* if(!is_good_mod_exp_first(g_b, p))
      throw new Error('bad g_b'); */

    let ux = mult(u, x);
    let a_ux = add(a, ux);
    let S = powMod(g_b, a_ux, p);

    let K: any = await CryptoWorker.sha256Hash(padArray(bytesFromHex(bigInt2str(S, 16)), 256));

    let h1: any = await CryptoWorker.sha256Hash(pForHash);
    let h2: any = await CryptoWorker.sha256Hash(gForHash);
    h1 = bytesXor(new Uint8Array(h1), new Uint8Array(h2));

    /* let buff = bufferConcat(h1, await CryptoWorker.sha256Hash(algo.salt1));
    buff = bufferConcat(buff, await CryptoWorker.sha256Hash(algo.salt2));
    buff = bufferConcat(buff, a_for_hash);
    buff = bufferConcat(buff, b_for_hash);
    buff = bufferConcat(buff, K); */
    let buff = bufferConcats(h1, 
      await CryptoWorker.sha256Hash(algo.salt1),
      await CryptoWorker.sha256Hash(algo.salt2),
      a_for_hash,
      b_for_hash,
      K
    );

    let M1: any = await CryptoWorker.sha256Hash(buff);

    let out = {
      _: 'inputCheckPasswordSRP', 
      srp_id: state.srp_id, 
      A: new Uint8Array(a_for_hash), 
      M1: new Uint8Array(M1) 
    };


    console.log('out', bytesToHex(out.A), bytesToHex(out.M1));
    return out;
    
    /* console.log(gForHash, pForHash, bForHash); */
  }
}

export default new PasswordManager();