Class PKCS8

modules/crypt/etc/pkcs8.js:83–143

}

export default class PKCS8 {
	static parse(buf) {
		// RSA only
		var key = {};
		var ber = new BER(buf);
		if (ber.getTag() != 0x30)	// SEQUENCE
			throw new Error("PKCS8: not a sequence");
		ber.getLength()		// skip the sequence length
		ber.getInteger();	// skip the Version
		ber.next();		// skip the AlgorithmIdentifier
		ber.getTag();		// OCTET STRING that includes the private key in the SEQUENCE
		ber.getLength();
		{
			ber.getTag();		// SEQUENCE
			ber.getLength();
			ber.getInteger();	// skip the first INTEGER
			key.modulus = ber.getInteger();
			key.exponent = ber.getInteger();
			key.privExponent = ber.getInteger();
			key.prim1 = ber.getInteger();
			key.prim2 = ber.getInteger();
			key.exponent1 = ber.getInteger();
			key.exponent2 = ber.getInteger();
			key.coefficient = ber.getInteger();
		}
		return key;
	};
	static decrypt(buf, pass) {
		var ber = new BER(buf);
		if (ber.getTag() == 0x30) {
			ber.getLength();
			if (ber.getTag() == 0x30) {
				ber.getLength();
				var oid = ber.getObjectIdentifier();
				if (ber.getTag() == 0x30) {
					ber.getLength();
					var salt = ber.getOctetString();
					var iter = ber.getInteger();
					var data = ber.getOctetString();
					var cipher, hash, mode, v;
					switch (oid.toString()) {
					case [1,2,840,113549,1,12,1,1].toString():	// pbeWithSHA1And128BitRC4
						cipher = Crypt.RC4;
						hash = Crypt.SHA1;
						v = 512 / 8;
						break;
					default:
						throw new Error("PKCS8: unsupported encryption scheme: " + oid);
					}
					var key = pkcs12gen(pass, salt, iter.toNumber(), 16, hash, v);
					var enc = new cipher(key);
					if (mode)
						var enc = new mode(enc);
					enc.decrypt(data, data);
					return this.parse(data);
				}
			}
		}