123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139
// Copyright 2018-2022 the Deno authors. All rights reserved. MIT license.// Copyright 2017 crypto-browserify. All rights reserved. MIT license.// from https://github.com/crypto-browserify/parse-asn1/blob/fbd70dca8670d17955893e083ca69118908570be/index.js
import * as asn1 from "./asn1.js";import fixProc from "./fix_proc.js";import * as ciphers from "../browserify_aes/mod.js";import { Buffer } from "../../../buffer.ts";import { pbkdf2Sync } from "../../../internal/crypto/pbkdf2.ts";
const aesid = {  "2.16.840.1.101.3.4.1.1": "aes-128-ecb",  "2.16.840.1.101.3.4.1.2": "aes-128-cbc",  "2.16.840.1.101.3.4.1.3": "aes-128-ofb",  "2.16.840.1.101.3.4.1.4": "aes-128-cfb",  "2.16.840.1.101.3.4.1.21": "aes-192-ecb",  "2.16.840.1.101.3.4.1.22": "aes-192-cbc",  "2.16.840.1.101.3.4.1.23": "aes-192-ofb",  "2.16.840.1.101.3.4.1.24": "aes-192-cfb",  "2.16.840.1.101.3.4.1.41": "aes-256-ecb",  "2.16.840.1.101.3.4.1.42": "aes-256-cbc",  "2.16.840.1.101.3.4.1.43": "aes-256-ofb",  "2.16.840.1.101.3.4.1.44": "aes-256-cfb",};export function parseKeys(buffer) {  let password;  if (typeof buffer === "object" && !Buffer.isBuffer(buffer)) {    password = buffer.passphrase;    buffer = buffer.key;  }  if (typeof buffer === "string") {    buffer = Buffer.from(buffer);  }
  const stripped = fixProc(buffer, password);
  const type = stripped.tag;  let data = stripped.data;  let subtype, ndata;  switch (type) {    case "CERTIFICATE":      ndata = asn1.certificate.decode(data, "der").tbsCertificate        .subjectPublicKeyInfo;      // falls through    case "PUBLIC KEY":      if (!ndata) {        ndata = asn1.PublicKey.decode(data, "der");      }      subtype = ndata.algorithm.algorithm.join(".");      switch (subtype) {        case "1.2.840.113549.1.1.1":          return asn1.RSAPublicKey.decode(ndata.subjectPublicKey.data, "der");        case "1.2.840.10045.2.1":          ndata.subjectPrivateKey = ndata.subjectPublicKey;          return {            type: "ec",            data: ndata,          };        case "1.2.840.10040.4.1":          ndata.algorithm.params.pub_key = asn1.DSAparam.decode(            ndata.subjectPublicKey.data,            "der",          );          return {            type: "dsa",            data: ndata.algorithm.params,          };        default:          throw new Error("unknown key id " + subtype);      }      // throw new Error('unknown key type ' + type)    case "ENCRYPTED PRIVATE KEY":      data = asn1.EncryptedPrivateKey.decode(data, "der");      data = decrypt(data, password);      // falls through    case "PRIVATE KEY":      ndata = asn1.PrivateKey.decode(data, "der");      subtype = ndata.algorithm.algorithm.join(".");      switch (subtype) {        case "1.2.840.113549.1.1.1":          return asn1.RSAPrivateKey.decode(ndata.subjectPrivateKey, "der");        case "1.2.840.10045.2.1":          return {            curve: ndata.algorithm.curve,            privateKey: asn1.ECPrivateKey.decode(ndata.subjectPrivateKey, "der")              .privateKey,          };        case "1.2.840.10040.4.1":          ndata.algorithm.params.priv_key = asn1.DSAparam.decode(            ndata.subjectPrivateKey,            "der",          );          return {            type: "dsa",            params: ndata.algorithm.params,          };        default:          throw new Error("unknown key id " + subtype);      }      // throw new Error('unknown key type ' + type)    case "RSA PUBLIC KEY":      return asn1.RSAPublicKey.decode(data, "der");    case "RSA PRIVATE KEY":      return asn1.RSAPrivateKey.decode(data, "der");    case "DSA PRIVATE KEY":      return {        type: "dsa",        params: asn1.DSAPrivateKey.decode(data, "der"),      };    case "EC PRIVATE KEY":      data = asn1.ECPrivateKey.decode(data, "der");      return {        curve: data.parameters.value,        privateKey: data.privateKey,      };    default:      throw new Error("unknown key type " + type);  }}export default parseKeys;parseKeys.signature = asn1.signature;function decrypt(data, password) {  const salt = data.algorithm.decrypt.kde.kdeparams.salt;  const iters = parseInt(    data.algorithm.decrypt.kde.kdeparams.iters.toString(),    10,  );  const algo = aesid[data.algorithm.decrypt.cipher.algo.join(".")];  const iv = data.algorithm.decrypt.cipher.iv;  const cipherText = data.subjectPrivateKey;  const keylen = parseInt(algo.split("-")[1], 10) / 8;  const key = pbkdf2Sync(password, salt, iters, keylen, "sha1");  const cipher = ciphers.createDecipheriv(algo, key, iv);  const out = [];  out.push(cipher.update(cipherText));  out.push(cipher.final());  return Buffer.concat(out);}