Function generateGroupValues

apps/client/src/code/crypto.ts:105–192

(input: {
  userKeyPair: KeyPair;
  isPublic: boolean;
  password?: string;
})

}

export async function generateGroupValues(input: {
  userKeyPair: KeyPair;
  isPublic: boolean;
  password?: string;
}) {
  const groupId = nanoid();

  const accessKeyring = createSymmetricKeyring();
  const internalKeyring = createSymmetricKeyring();
  const contentKeyring = createSymmetricKeyring();

  const rawKeyPair = sodium.crypto_box_keypair();

  const publicKeyring = createKeyring(rawKeyPair.publicKey);
  const privateKeyring = createPrivateKeyring(rawKeyPair.privateKey);

  const keyPair = wrapKeyPair(publicKeyring, privateKeyring);

  // Group keyring

  let finalAccessKeyring = accessKeyring;

  if (!input.isPublic) {
    finalAccessKeyring = finalAccessKeyring.wrapAsymmetric(
      input.userKeyPair,
      input.userKeyPair.publicKey,
    );
  }

  // Internal keyring

  const encryptedInternalKeyring = internalKeyring.wrapAsymmetric(
    input.userKeyPair,
    input.userKeyPair.publicKey,
  );

  // Content keyring

  let encryptedContentKeyring = contentKeyring;

  let passwordValues;

  if (input.password != null) {
    passwordValues = await computeGroupPasswordValues(groupId, input.password);

    encryptedContentKeyring = encryptedContentKeyring.wrapSymmetric(
      passwordValues.passwordKey,
      {
        associatedData: {
          context: 'GroupContentKeyringPasswordProtection',
          groupId,
        },
      },
    );
  }

  encryptedContentKeyring = encryptedContentKeyring.wrapSymmetric(
    accessKeyring,