RE: Encrypted JSON with Javascript

[Caleb Coverdale]

Here is a copy of the fixed code incase anyone has anymore issues: 

const crypto = require("crypto");

const key = "KEYHERE";
const iv = "00000000000000000000000000000000";
// convert key to binary
const keyBin = Buffer.from(key, "hex");
const ivBin = Buffer.from(iv, "hex");

// Sign the JSON using the key with the authString using sha256/hmac
function encryptSign(keyBin, ivBin, username, url) {
  const calculateTime = Math.floor(Date.now() / 1000) + 300;
  const expiration = calculateTime + "000";
  const authString = 
`{"username":"${username}","expires":"${expiration}","connections":{"${expiration}":{"protocol":"rdp","parameters":{"hostname":"IPHERE","port":"3389","security":"nla","ignore-cert":"true"}}}}`;
  const signature = crypto
    .createHmac("sha256", keyBin)

    .update(authString)
    .digest("binary");
  const signatureReturn = signature + authString;

  // AES-128-CBC encrypt signatureReturn using keyBin and ivBin return it in 
base64
  const cipher = crypto.createCipheriv("aes-128-cbc", keyBin, ivBin);
  const encrypted = cipher.update(signatureReturn, "binary", "base64");
  const encryptedSignature = encrypted + cipher.final("base64");
  // convert encryptedSignature to base64

  const urlencodedSignature = encodeURIComponent(encryptedSignature);
  const returnValue = `${url}${urlencodedSignature}`;
  return returnValue;
}

On 2022/01/26 21:00:16 Caleb Coverdale wrote:
> Hey there! 
> 
> I have been banging my head against the wall trying to get the EncryptedJSON 
> script working in Javascript. 
> 
> I was wondering if anyone has been down the rabbit hole and got it working? 
> 
> 
> Any help would be appreciated… 
> 
> 
> Here’s what I have so far: 
> 
> 
> 
> const crypto = require("crypto");
> const guacjson = 
> `{"username":"MyUser","connections":{"MyConnection":{"protocol":"rdp","parameters":{"hostname":"10.0.0.41","port":"3389","security":"nla","ignore-cert":"true"}}}}`;
> const secretkey = "fe57526d73a1e5116bbbefad1c91b38f";
> 
> // sign the contents of guacjson with secret key using HMAC/SHA-256 out in 
> binary
> function cryptedmessage() {
>   const hmac = crypto.createHmac("sha256", secretkey);
>   hmac.update(guacjson);
>   // output the hmac in binary followed by guacjson
>   signature = hmac.digest("binary") + guacjson;
>   return signature;
> }
> 
> const INITIALIZATION_VECTOR = "0000000000000000";
> 
> class Crypt {
>   static encrypt128(data, key) {
>     const cipher = crypto.createCipheriv(
>       "aes-128-cbc",
>       Buffer.from(key, "hex"),
>       Buffer.from(INITIALIZATION_VECTOR)
>     );
>     // return cipher encoded as bas64
>     console.log(data);
>     const encrypted =
>       cipher.update(data, "utf8", "base64") + cipher.final("base64");
>     return encrypted;
>   }
> }
> 
> const key = "fe57526d73a1e5116bbbefad1c91b38f";
> 
> const cipher = Crypt.encrypt128(cryptedmessage(), key);
> 
> console.log(cipher);