Encrypting and decrypting data using RSA in TypeScript

Question

Encrypting and decrypting data using RSA in TypeScript

Currently, I am utilizing Angular 4 to develop the front end of my application. For authentication, I have integrated OAuth2 on the backend (which is created using Spring in Java), ensuring that only authorized individuals can access my app.

However, there is a major concern as passwords are stored in plain text format in the backend server logs, making them vulnerable to interception by a Man-in-the-Middle (MITM) attack until SSL is implemented.

To address this issue, I have made the decision to encrypt the transmitted passwords using RSA. While my backend implementation is complete, I am facing difficulties finding modern libraries that offer a reliable API for encryption/decryption with RSA key-pairs.

I have explored options like the 'crypto' module, but it is no longer supported in ECMAScript 6. The 'crypto-js' library only supports AES and certain hash functions like MD5/SHA.

javascript angular typescript encryption rsa

Answer 1

Answer №1

At last, I have discovered a solution after installing a few things.

npm install buffer
npm install crypto-browserify

Now to put it into action:

import {config} from "../app.config";
import {Buffer} from 'buffer/';
import * as crypto from "crypto-browserify";

export class RsaService {
  private privateKey: string;
  private publicKey: string;
  private enabled: boolean;

  constructor() {
    this.privateKey = config.authentication.rsa.privateKey;
    this.publicKey = config.authentication.rsa.publicKey;
    this.enabled = config.authentication.rsa.enabled;
  }

  isEnabled(): boolean {
    return this.enabled;
  }

  encrypt(plaintext: string): string {
    if (!this.enabled)
      return plaintext;

    let buffer = new Buffer(plaintext);
    let encrypted = crypto.privateEncrypt(this.privateKey, buffer);

    return encrypted.toString('base64');
  }

  decrypt(cypher: string): string {
    if (!this.enabled)
      return cypher;

    let buffer = Buffer.from(cypher, 'base64');
    let plaintext = crypto.publicDecrypt(this.publicKey, buffer);

    return plaintext.toString('utf8')
  }
}

Answer 2

At last, I have discovered a solution after installing a few things.

npm install buffer
npm install crypto-browserify

Now to put it into action:

import {config} from "../app.config";
import {Buffer} from 'buffer/';
import * as crypto from "crypto-browserify";

export class RsaService {
  private privateKey: string;
  private publicKey: string;
  private enabled: boolean;

  constructor() {
    this.privateKey = config.authentication.rsa.privateKey;
    this.publicKey = config.authentication.rsa.publicKey;
    this.enabled = config.authentication.rsa.enabled;
  }

  isEnabled(): boolean {
    return this.enabled;
  }

  encrypt(plaintext: string): string {
    if (!this.enabled)
      return plaintext;

    let buffer = new Buffer(plaintext);
    let encrypted = crypto.privateEncrypt(this.privateKey, buffer);

    return encrypted.toString('base64');
  }

  decrypt(cypher: string): string {
    if (!this.enabled)
      return cypher;

    let buffer = Buffer.from(cypher, 'base64');
    let plaintext = crypto.publicDecrypt(this.publicKey, buffer);

    return plaintext.toString('utf8')
  }
}

Answer 3

Answer №2

When network logs are captured in specific locations, it becomes possible to retrieve the entire http pipeline as pure text. Once SSL is functioning on a particular layer of communication, stream can be monitored at a higher layer to access this information. This addresses some previous comments.

In terms of architecture, it makes total sense to prioritize data security from unauthorized access. In theory, I recommend the following approaches:

1) Develop your own encryption method and implement it on both ends. Even something as simple as matrix multiplication could suffice for non-critical transmissions.

2) Utilize cryto-js on both sides by incorporating a segment of JavaScript code within your Java code for password (de)encryption purposes.

3) Integrate an external authentication/authorization system such as Google, Twitter, Facebook, IBM BlueID, Azure, AWS, or even your own domain controller. Alternatively, consider combining an external entity with your domain controller through Federation.

In conclusion, there are numerous solutions available - ranging from creating custom applications to implementing complex structures. It's important to take precautions when handling sensitive data.

Answer 4

When network logs are captured in specific locations, it becomes possible to retrieve the entire http pipeline as pure text. Once SSL is functioning on a particular layer of communication, stream can be monitored at a higher layer to access this information. This addresses some previous comments.

In terms of architecture, it makes total sense to prioritize data security from unauthorized access. In theory, I recommend the following approaches:

1) Develop your own encryption method and implement it on both ends. Even something as simple as matrix multiplication could suffice for non-critical transmissions.

2) Utilize cryto-js on both sides by incorporating a segment of JavaScript code within your Java code for password (de)encryption purposes.

3) Integrate an external authentication/authorization system such as Google, Twitter, Facebook, IBM BlueID, Azure, AWS, or even your own domain controller. Alternatively, consider combining an external entity with your domain controller through Federation.

In conclusion, there are numerous solutions available - ranging from creating custom applications to implementing complex structures. It's important to take precautions when handling sensitive data.

Encrypting and decrypting data using RSA in TypeScript

Answer №1

Answer №2

Similar questions

"Element of design focused on style and arrangement

Is it possible to authenticate a user in Firebase using Node.js without utilizing the client side?

What is the best way to utilize @Input in components that have been generated using ComponentFactoryResolver?

Encountering a 404 Error When Making an Ajax Request in Spring MVC

Utilizing Inquiries within Arrays

Utilizing NodeJS and Express to efficiently share sessions across various routes

What is the best way to incorporate this HTML and script into a React component?

The Ink CLI is anticipating the component to be a function

The issue of slides overlapping in a Javascript slideshow during auto play mode

Creating a personalized confirmation function using JavaScript

What is the process to access array elements in AngularJS?

Lazy loading a React grid gallery as you scroll

How to modify the background color within the mat-menu-panel

Disabling a chosen option within a dropdown menu

Modifying the color of drawings on a Javascript canvas

Add an input element to a form fieldset by employing vue

Difficulty establishing audio calls with Internet Explorer using PeerJS

The POST request is not functioning. An error has occurred: Unable to retrieve response data - no content is available for the preflight request

Can we include an option to display all pages in one row on a single page?

The functionality of the anchor tag is restricted in both Chrome and Safari browsers