feat: support aes-256-cbc encrypted results decryption

Author: PierreJeanjacquot

CHANGELOG.md

@@ -4,6 +4,10 @@ All notable changes to this project will be documented in this file.
 
 ## NEXT
 
+### Added
+
+- added support for aes-256-cbc encrypted result decryption
+
 ### Changed
 
 - fixed `BN` type export issue

src/common/utils/result-utils.js

@@ -10,11 +10,17 @@ const debug = Debug('iexec:result-utils');
 export const decryptResult = async (encResultsZipBuffer, beneficiaryKey) => {
   const { CryptoKey } = await getCrypto();
 
-  let pemPrivateKey;
+  let pemRsaPrivateKey;
   if (beneficiaryKey instanceof CryptoKey) {
-    pemPrivateKey = await privateAsPem(beneficiaryKey);
+    pemRsaPrivateKey = await privateAsPem(beneficiaryKey);
   } else {
-    pemPrivateKey = Buffer.from(beneficiaryKey).toString();
+    pemRsaPrivateKey = Buffer.from(beneficiaryKey).toString();
+  }
+  let rsaPrivateKey;
+  try {
+    rsaPrivateKey = forgePki.pki.privateKeyFromPem(pemRsaPrivateKey);
+  } catch (error) {
+    throw Error('Invalid beneficiary key', { cause: error });
   }
 
   const ENC_KEY_FILE_NAME = 'aes-key.rsa';
@@ -85,23 +91,34 @@ export const decryptResult = async (encResultsZipBuffer, beneficiaryKey) => {
       );
     });
 
-  const base64encodedEncryptedAesKey = Buffer.from(
-    encryptedResultsKeyArrayBuffer,
-  ).toString();
-
-  const encryptedAesKeyBuffer = Buffer.from(
-    base64encodedEncryptedAesKey,
-    'base64',
-  );
-
+  const encryptedAesKeyBuffer = Buffer.from(encryptedResultsKeyArrayBuffer);
   debug('Decrypting results key');
   let aesKeyBuffer;
+  const aesKeyDecryptionErrors = [];
   try {
-    const key = forgePki.pki.privateKeyFromPem(pemPrivateKey);
-    const base64EncodedResultsKey = key.decrypt(encryptedAesKeyBuffer);
-    aesKeyBuffer = Buffer.from(base64EncodedResultsKey, 'base64');
+    try {
+      const resultsKey = rsaPrivateKey.decrypt(encryptedAesKeyBuffer);
+      aesKeyBuffer = Buffer.from(resultsKey, 'binary');
+    } catch (error) {
+      aesKeyDecryptionErrors.push(error);
+      debug(
+        'standard result key decryption failed, trying base64 encoded encrypted key (legacy)',
+      );
+      const base64encodedEncryptedAesKey = Buffer.from(
+        encryptedResultsKeyArrayBuffer,
+      ).toString();
+      const encryptedAesKeyBuffer = Buffer.from(
+        base64encodedEncryptedAesKey,
+        'base64',
+      );
+      const base64EncodedResultsKey = rsaPrivateKey.decrypt(
+        encryptedAesKeyBuffer,
+      );
+      aesKeyBuffer = Buffer.from(base64EncodedResultsKey, 'base64');
+    }
   } catch (error) {
-    debug(error);
+    aesKeyDecryptionErrors.push(error);
+    debug(`decryption errors: ${aesKeyDecryptionErrors}`);
     throw Error('Failed to decrypt results key with beneficiary key');
   }
 
@@ -120,36 +137,55 @@ export const decryptResult = async (encResultsZipBuffer, beneficiaryKey) => {
       );
     });
 
-  // decrypt AES ECB (with one time AES key)
-  debug('Decrypting results');
+  // decrypt AES (with one time AES key)
+  debug(`Decrypting results`);
   try {
-    const base64EncodedEncryptedZip = Buffer.from(
-      encResultsArrayBuffer,
-    ).toString();
-    let encryptedOutZipBuffer = Buffer.from(
-      base64EncodedEncryptedZip,
-      'base64',
-    );
-    const aesEcbDecipher = forgeAes.cipher.createDecipher(
-      'AES-ECB',
-      forgeAes.util.createBuffer(aesKeyBuffer),
-    );
-    aesEcbDecipher.start();
+    let aesDecipher;
+    let encryptedOutZipBuffer;
+    switch (aesKeyBuffer.byteLength * 8) {
+      case 256:
+        // current result encryption was based on aes-256-cbc IV is stored in the 16 first bytes of the payload
+        debug(`aes-256-cbc mode detected`);
+        aesDecipher = forgeAes.cipher.createDecipher(
+          'AES-CBC',
+          forgeAes.util.createBuffer(aesKeyBuffer),
+        );
+        aesDecipher.start({
+          iv: forgeAes.util.createBuffer(encResultsArrayBuffer.slice(0, 16)),
+        });
+        encryptedOutZipBuffer = Buffer.from(encResultsArrayBuffer.slice(16));
+        break;
+      case 128:
+        // legacy result encryption was based on aes-128-ecb with aes encrypted payload encoded in base64
+        debug(`Legacy mode aes-128-ecb mode detected`);
+        aesDecipher = forgeAes.cipher.createDecipher(
+          'AES-ECB',
+          forgeAes.util.createBuffer(aesKeyBuffer),
+        );
+        aesDecipher.start();
+        encryptedOutZipBuffer = Buffer.from(
+          Buffer.from(encResultsArrayBuffer).toString(),
+          'base64',
+        );
+        break;
+      default:
+        throw Error('Failed to determine result encryption mode');
+    }
 
     const CHUNK_SIZE = 10 * 1000 * 1000;
     let decryptionBuffer = Buffer.from([]);
     while (encryptedOutZipBuffer.byteLength > 0) {
       // flush cipher buffer
-      const tmpBuffer = Buffer.from(aesEcbDecipher.output.getBytes(), 'binary');
+      const tmpBuffer = Buffer.from(aesDecipher.output.getBytes(), 'binary');
       decryptionBuffer = Buffer.concat([decryptionBuffer, tmpBuffer]);
       // process chunk
-      const chunk = encryptedOutZipBuffer.slice(0, CHUNK_SIZE);
-      encryptedOutZipBuffer = encryptedOutZipBuffer.slice(CHUNK_SIZE);
-      aesEcbDecipher.update(forgeAes.util.createBuffer(chunk));
+      const chunk = encryptedOutZipBuffer.subarray(0, CHUNK_SIZE);
+      encryptedOutZipBuffer = encryptedOutZipBuffer.subarray(CHUNK_SIZE);
+      aesDecipher.update(forgeAes.util.createBuffer(chunk));
     }
-    aesEcbDecipher.finish();
+    aesDecipher.finish();
     const finalizationBuffer = Buffer.from(
-      aesEcbDecipher.output.getBytes(),
+      aesDecipher.output.getBytes(),
       'binary',
     );
     return Buffer.concat([decryptionBuffer, finalizationBuffer]);

test/inputs/beneficiaryKeys/0xC08C3def622Af1476f2Db0E3CC8CcaeAd07BE3bB_key

@@ -1,52 +1,52 @@
 -----BEGIN PRIVATE KEY-----
-MIIJRQIBADANBgkqhkiG9w0BAQEFAASCCS8wggkrAgEAAoICAQDb1jY1gLTygUnw
-bE9Hd0qQj4C77qR5YdnwJez1/nhateU26w2qqE4fuHh9Apo0eGm2pK62ajrFjCZ6
-fh5Sp7rvY2eZN4Gl7G+UePXq4OqBWjJJUxpgxLB7FGv6fsFDY1Zie1hzevRmMEAI
-rs0zKtt+nhblQ0YoOTemrS6Q9BDwgYBSFk8+ydxWk5KrrkqzVojW8FIzpTMcKSzn
-zYfVvQ2o7jS9Z3Rl3/wtv+Idbo0MlcaAzQr+BFjPmEbfDSr0G/A3iaEdfX7Y9a24
-ia/uensJZTl51UlhDUTmZcBEtVTNguYNczWe9ySQtUB0Y6+xe/w/rTP5DbOki8rX
-j7GbkJ8SkADmA5P4hDBxI7G4Gy0qlLxNcFca8bzCyAmQrZ2hxL0LwIhBTU6QjQRb
-g3tWJICEfaQzqxEg3eDyeZ+KJJO7VgDKdoxxd7Qf/TOXx9cTVzfCLZfZL9IXDExL
-A8bnJMHaouj3HvkLxZRkL65Q/pVlxAT0H3cXsMvOF3o7VWKwYd589D90XqtGt5HA
-Yj4nMv1E6ybjYvo3kfBKh0PjHseKXqfDYV2Arn9GRNFrjuC1NNxIoVQAUH9iK8MM
-GHIKpLGhIQNNzM75kx6hgY1DCIWl61MHsTjM1/Gh+WUS8xrHf9U4W6tFvAOUxq8P
-Qs95EzoxSTF7aVPhgWjBSjokJQWU9wIDAQABAoICAQCFuC8RLFDkkbAgBkHS/sTk
-WeW8atSw4MxoPyl8GGWtB6d9WEzf2bBrqxHfOI4EDJqA9nsvij5lm3JsX/qh3FTg
-+F4z3IeIHeFhNpKfZGBAflTINTx+UCXpN+rWW/PCwdHx5YVP+SJgZkkM/wbicNdC
-lXbnzZwHK4amZAFHOq5zHNKpG9joIHFeWDWHKGVX4PMritL1hy8nmgQum95cLLr6
-XqrF6v/qV+xVB7rKnEw/s3sjLZXaHVrIK6AwXRobkkL0BUtzXLqjzgz1iwrwzJ+6
-f1AOw6X22tNmMc5Z/NKwj0bQN5wOLdaYDyg9o8Vi+D/fm8NZYvQ6yq1/oXAvaDDZ
-QPVN2nS6bgGYGNQqKDarLC+6xiUQHS+wIJMDNOEWcX50VrCt30vaEtf2dw+pTUCN
-3VZliZU1FlauEow3/dbDz19btXMvkq/BWuhPmbW8M65DoBDxaVMsqumnskS3eOxD
-ayA0bT+JZR/lwYOsdfWxGe2eP3nDjJ+LiTgbRwe92THl5gcaIJ70Bz0abZ+CdjqN
-WjIPSnU5HCjE4Dl+Jjyb1CtjwY4EWMvTJQhIc03T9To/7sRane7Xzcl+VJ/28KJB
-k0lVoQ1cxcTGes55zCYNxdSwxUrSdASLbazA9mWvfvHwRoAj2XMGk07eGGmFc3jV
-P46R3DyBN03c2vSjs2sqwQKCAQEA9DY4ijT8qA99FBSF4h+YGMIwRhelUnmzvfWJ
-DU/nk5LUzsolUNIDc1eazQvYa54q83UCSlZiccmb6vGuBoc3MLbr46uLXspGxfoR
-sZXuuYKjDoFegMKushAw1OMYAsJsLSe4HxRpvIbSBX7r8kjTjkJymWocYgkawWGt
-khFPzEPISzLIpjWkjEME2k9fjozyrQEtYN4S1mKm8I3JC4VmOD0HbI5gLISScdQJ
-D+HYNVL2xheHyNqb4JlHsUi3GFzWEY4hXv+gNidEouVPQmBHpbifHMjmzg+Zs3jP
-9C+5KO7yXnzbI4v7XpoaW6+2n6gsjd5HB7fg7ZNriaKEYJAO5QKCAQEA5nLIf6xs
-6wBk3T1P1oLWvi4pw/ZDAO0tc5Tnka+F+pLTzzzskU7RpHniKfAUX2Co+oNty2rD
-ExYGgfmR3iWTkez219SWiBezO5SynaTSxGB152txhkpmDYsMY7ngTp5OM1sDa9ty
-Eqbav4WqcdpfCxNeWcQCnPv7diFcgAyOJdCNW/STN3Nk/ljyBaJVc3JNR8IV/51u
-Paxau6kDAn4VCnlgX/ccJgR9XIyVBpWZ70Mb2uaDGS3BBg5OgptAo3EwcDqZvSok
-YDFjjRe2xoGtG2iiq/64yPOoSn57lyZoRErr3/9x4W0rht8oifv3FBNtOa6kdnpe
-QqrSR34ZeUD6qwKCAQEA2SPc4gZ7IHOlI1WcNZMiCeGgSrJ7rPnJd/35/nwtzGmi
-DrxusY4Kw2QBoJAHvqjER/SiNLbakZJRsHVz5xoTWJ1M4QKGyaHRi/buBJjrysb9
-dMhS3uo7qtf6k0/Y6Zs11HCcpgXgfmDiHUDdSnC2qqcqfn56/jBaOdhAHMCH03fx
-f+uHvUG1LYHprrMko/tvS6TgVGEhHr5Y8Usgl73lRdv93eg6W1sFW3DNHfIR7Ff4
-U+pYMZ8vOmUP+fJN2ruxG6rkwTNJoN0Jik2aS8qP6ipeT5nSnyX/5DRnsxc768mK
-d7lMoC63M0aSaTOzjgJam0oonhRBSvzpgVefnLx6gQKCAQEAxeQPlMOmjG88Llg2
-NQkKCyptJyBUDXmerEBUUuCddr2bMb0pkOZUVJ9tvYGynOzObsFqCWJWvg8N65M6
-1b8C6C7LEjA2TAu+GA3rDEC71XLYDLBRPnapCDw9mW3G1vxOPv+LApXhcW7jLdBE
-u5xAPayWOxN9Av3HxHuFiVg+wO5EVZDC0r0/HsOWoYvzQT4IavSaG3U/c6qMB9Zt
-BTjsLKBqSD5VZ7g3RsBaQNs64yGHzARi075coSyr8rALY88RP26zEqQbtJb02/Zf
-ODunQYArIPOODtJd1AqlavjKVMrZnvMnAePTmvALSeKbHBxKkVwNUshmJW23QTlh
-+qP4HQKCAQEA7cG7v+tjUwtOoHVb+9xUnFqUnPk9I/og22BlrAHpLR+sXzkexsY6
-QmcU14zjix+1fu2tVRYSWPFjWVQYzvvhUATe1Kx04dKe+184i5Xa1QxLerLZ70x0
-qooWUgrJEcZtMrSS7wR7EY5LyP+1rvadwXw6H9PwlSvmH+JgHqiq0gl0MkHLlFqQ
-1wKf2wMFKJnHXnXJp6Mpr1eUms4PdOmEKf/Vj9jmxVBpTpz2S75K8cnoc3oFX98x
-bHvG1jYccpBwXwmzPFI47KPB6wMaV/EPuEiVBNM+Lj+6ae+E0xoH7qUpw6rrYRze
-S5xNpBTrDJV5d1Qx+sCsw0ghKSNHzTS+JQ==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 -----END PRIVATE KEY-----

test/inputs/beneficiaryKeys/0xC08C3def622Af1476f2Db0E3CC8CcaeAd07BE3bB_key.pub

@@ -1,14 +1,14 @@
 -----BEGIN PUBLIC KEY-----
-MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA29Y2NYC08oFJ8GxPR3dK
-kI+Au+6keWHZ8CXs9f54WrXlNusNqqhOH7h4fQKaNHhptqSutmo6xYwmen4eUqe6
-72NnmTeBpexvlHj16uDqgVoySVMaYMSwexRr+n7BQ2NWYntYc3r0ZjBACK7NMyrb
-fp4W5UNGKDk3pq0ukPQQ8IGAUhZPPsncVpOSq65Ks1aI1vBSM6UzHCks582H1b0N
-qO40vWd0Zd/8Lb/iHW6NDJXGgM0K/gRYz5hG3w0q9BvwN4mhHX1+2PWtuImv7np7
-CWU5edVJYQ1E5mXARLVUzYLmDXM1nvckkLVAdGOvsXv8P60z+Q2zpIvK14+xm5Cf
-EpAA5gOT+IQwcSOxuBstKpS8TXBXGvG8wsgJkK2docS9C8CIQU1OkI0EW4N7ViSA
-hH2kM6sRIN3g8nmfiiSTu1YAynaMcXe0H/0zl8fXE1c3wi2X2S/SFwxMSwPG5yTB
-2qLo9x75C8WUZC+uUP6VZcQE9B93F7DLzhd6O1VisGHefPQ/dF6rRreRwGI+JzL9
-ROsm42L6N5HwSodD4x7Hil6nw2FdgK5/RkTRa47gtTTcSKFUAFB/YivDDBhyCqSx
-oSEDTczO+ZMeoYGNQwiFpetTB7E4zNfxofllEvMax3/VOFurRbwDlMavD0LPeRM6
-MUkxe2lT4YFowUo6JCUFlPcCAwEAAQ==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 -----END PUBLIC KEY-----