replikativ / geheimnis

Cross-platform cryptography between cljs and clj.

geheimnis

Implementation of cross-platform (clj, cljs) cryptography. The library supports AES/CBC/Pkcs7Padding with a 256 bit key and RSA with arbitrary keysize, as well as simple MD5 hashing. If you need something which is not provided, please open an issue. While geheimnis is not supposed to cover all cryptographic options like OpenSSL compatibility with a big set of chiffres, common and useful algorithms to do standard public-private key solutions should be provided with a solid implementation. geheimnis is supposed to be batteries included on Clojure level, so doing the right thing should be easy.

This library is still very young, but encryption methods work between platforms and are initialized with proper upstream/documented parameters. If you hit any problems, open an issue.

Usage

Add this to your leiningen project's dependencies:

(require '[geheimnis.rsa :refer [gen-key encrypt decrypt]]
         '[geheimnis.base64 :refer [encode decode]])

(def rsa-key (gen-key 1024))

(decrypt rsa-key (encrypt rsa-key (BigInteger. "123")))

(encode (:pub-key rsa-key)) ;; => #geheimnis/Base64 "AAECAwQFBgcICQ=="

(require '[geheimnis.aes :refer [encrypt decrypt]])

(decrypt "s3cr3T" (encrypt "s3cr3T" (byte-array (range 10))))

(require '[geheimnis.md5 :refer [encode]])

(encode "geheimnis") ;; => "525e92c6aa11544a2ab794f8921ecb0f" 

Clojurescript Testing

Make sure karma and launcher for testing in your favourite browser is installed:

 npm install karma karma-firefox-launcher karma-chrome-launcher karma-safari-launcher  karma-cljs-test --save-dev

Test in your preferred browser by running

lein doo firefox browser-test

TODO

• include jsbn library with externs or as gclosure module
• the clj reader has problems compiling cljs with tagged literals
• use cljsjs/bignumber for RSA
• add padding support to RSA
• Explore http://nacl.cr.yp.to/ with https://download.libsodium.org/doc/ and https://www.npmjs.com/package/libsodium for proven safety

License

Copyright © 2016-2017 Christian Weilbach, Konrad Kühne

Distributed under the Eclipse Public License either version 1.0 or (at your option) any later version.

geheimnis's Issues

md5 hashing may be helpful sometimes

Library breaks build with cljs 1.9.473

after getting no output on upgrading to 1.9.473, i tracked the issue down to this library.

if i build including it (at least with boot), the js doesn't get written: boot -d adzerk/boot-cljs:1.7.228-2 -d org.clojure/clojurescript:1.9.473 -d io.replikativ/geheimnis:0.1.0 -BP -s foo cljs target

with "foo" being a simple core.cljs not even requiring the package

it seems like it fundamentaly breaks something in cljs without causing an error

i posted on clojurians.slack.com in #clojurescript and will update if i get any reply.