Add basic framework for native encryption

.eslintignore

@@ -684,6 +684,7 @@ packages/app-mobile/gulpfile.js
 packages/app-mobile/root.js
 packages/app-mobile/services/AlarmServiceDriver.android.js
 packages/app-mobile/services/AlarmServiceDriver.ios.js
+packages/app-mobile/services/e2ee/NativeEncryption.react-native.js
 packages/app-mobile/services/e2ee/RSA.react-native.js
 packages/app-mobile/services/plugins/PlatformImplementation.js
 packages/app-mobile/services/profiles/index.js
@@ -1019,6 +1020,7 @@ packages/lib/services/database/types.js
 packages/lib/services/debug/populateDatabase.js
 packages/lib/services/e2ee/EncryptionService.test.js
 packages/lib/services/e2ee/EncryptionService.js
+packages/lib/services/e2ee/NativeEncryption.node.js
 packages/lib/services/e2ee/RSA.node.js
 packages/lib/services/e2ee/ppk.test.js
 packages/lib/services/e2ee/ppk.js

.gitignore

@@ -663,6 +663,7 @@ packages/app-mobile/gulpfile.js
 packages/app-mobile/root.js
 packages/app-mobile/services/AlarmServiceDriver.android.js
 packages/app-mobile/services/AlarmServiceDriver.ios.js
+packages/app-mobile/services/e2ee/NativeEncryption.react-native.js
 packages/app-mobile/services/e2ee/RSA.react-native.js
 packages/app-mobile/services/plugins/PlatformImplementation.js
 packages/app-mobile/services/profiles/index.js
@@ -998,6 +999,7 @@ packages/lib/services/database/types.js
 packages/lib/services/debug/populateDatabase.js
 packages/lib/services/e2ee/EncryptionService.test.js
 packages/lib/services/e2ee/EncryptionService.js
+packages/lib/services/e2ee/NativeEncryption.node.js
 packages/lib/services/e2ee/RSA.node.js
 packages/lib/services/e2ee/ppk.test.js
 packages/lib/services/e2ee/ppk.js

packages/app-mobile/package.json

@@ -60,6 +60,7 @@
     "react-native-paper": "5.12.3",
     "react-native-popup-menu": "0.16.1",
     "react-native-quick-actions": "0.3.13",
+    "react-native-quick-crypto": "0.7.1",
     "react-native-rsa-native": "2.0.5",
     "react-native-safe-area-context": "4.10.1",
     "react-native-securerandom": "1.0.1",

packages/app-mobile/services/e2ee/NativeEncryption.react-native.ts

@@ -0,0 +1,51 @@
+import { NativeEncryptionInterface } from '@joplin/lib/services/e2ee/types';
+import crypto from 'react-native-quick-crypto';
+import { HashAlgorithm } from 'react-native-quick-crypto/lib/typescript/keys';
+
+class NativeEncryption implements NativeEncryptionInterface {
+	public getCiphers(): string[] {
+		return crypto.getCiphers();
+	}
+
+	public getHashes(): string[] {
+		return crypto.getHashes();
+	}
+
+	// eslint-disable-next-line @typescript-eslint/no-explicit-any -- TODO: remove the type "any" here
+	public async randomBytes(size: number): Promise<Buffer | any> {
+		return new Promise((resolve, reject) => {
+			crypto.randomBytes(size, (error, result) => {
+				if (error) {
+					reject(error);
+				} else {
+					resolve(result);
+				}
+			});
+		});
+	}
+
+	// eslint-disable-next-line @typescript-eslint/no-explicit-any -- TODO: remove the type "any" here
+	public async pbkdf2Raw(password: string, salt: Buffer, iterations: number, keylen: number, digest: string): Promise<Buffer | any> {
+		const digestMap: { [key: string]: HashAlgorithm } = {
+			'sha1': 'SHA-1',
+			'sha224': 'SHA-224',
+			'sha256': 'SHA-256',
+			'sha384': 'SHA-384',
+			'sha512': 'SHA-512',
+			'ripemd160': 'RIPEMD-160',
+		};
+		const digestAlgorithm: string = digestMap[digest.toLowerCase()] || digest;
+		return new Promise((resolve, reject) => {
+			crypto.pbkdf2(password, salt, iterations, keylen, digestAlgorithm as HashAlgorithm, (error, result) => {
+				if (error) {
+					reject(error);
+				} else {
+					resolve(result);
+				}
+			});
+		});
+	}
+
+}
+
+export default NativeEncryption;

packages/app-mobile/utils/shim-init-react.js

@@ -26,6 +26,10 @@ function shimInit() {
 	shim.Geolocation = GeolocationReact;
 	shim.sjclModule = require('@joplin/lib/vendor/sjcl-rn.js');
 
+	// copied from generated shim-init-node.js. Strange but works
+	const NativeEncryption = require('../services/e2ee/NativeEncryption.react-native');
+	shim.NativeEncryption = new NativeEncryption.default;
+
 	shim.fsDriver = () => {
 		if (!shim.fsDriver_) {
 			shim.fsDriver_ = new FsDriverRN();

packages/lib/services/e2ee/NativeEncryption.node.ts

@@ -0,0 +1,35 @@
+import { NativeEncryptionInterface } from './types';
+import { promisify } from 'util';
+import crypto = require('crypto');
+
+class NativeEncryption implements NativeEncryptionInterface {
+	public getCiphers(): string[] {
+		return crypto.getCiphers();
+	}
+
+	public getHashes(): string[] {
+		return crypto.getHashes();
+	}
+
+	public async randomBytes(size: number): Promise<Buffer> {
+		const randomBytesAsync = promisify(crypto.randomBytes);
+		return randomBytesAsync(size);
+	}
+
+	public async pbkdf2Raw(password: string, salt: Buffer, iterations: number, keylen: number, digest: string): Promise<Buffer> {
+		const digestMap: { [key: string]: string } = {
+			'sha-1': 'sha1',
+			'sha-224': 'sha224',
+			'sha-256': 'sha256',
+			'sha-384': 'sha384',
+			'sha-512': 'sha512',
+			'ripemd-160': 'ripemd160',
+		};
+		const digestAlgorithm: string = digestMap[digest.toLowerCase()] || digest;
+
+		const pbkdf2Async = promisify(crypto.pbkdf2);
+		return pbkdf2Async(password, salt, iterations, keylen, digestAlgorithm);
+	}
+}
+
+export default NativeEncryption;

packages/lib/services/e2ee/types.ts

@@ -25,3 +25,14 @@ export interface RSA {
 	publicKey(rsaKeyPair: RSAKeyPair): string;
 	privateKey(rsaKeyPair: RSAKeyPair): string;
 }
+
+export interface NativeEncryptionInterface {
+	getCiphers(): string[];
+	getHashes(): string[];
+
+	// eslint-disable-next-line @typescript-eslint/no-explicit-any -- TODO: remove the type "any" here
+	randomBytes(size: number): Promise<Buffer|any>;
+
+	// eslint-disable-next-line @typescript-eslint/no-explicit-any -- TODO: remove the type "any" here
+	pbkdf2Raw(password: string, salt: Buffer, iterations: number, keylen: number, digest: string): Promise<Buffer|any>;
+}

packages/lib/shim-init-node.ts

@@ -12,6 +12,7 @@ import { ResourceEntity } from './services/database/types';
 import { TextItem } from 'pdfjs-dist/types/src/display/api';
 import replaceUnsupportedCharacters from './utils/replaceUnsupportedCharacters';
 import { FetchBlobOptions } from './types';
+import NativeEncryption from './services/e2ee/NativeEncryption.node';
 
 import FileApiDriverLocal from './file-api-driver-local';
 import * as mimeUtils from './mime-utils';
@@ -135,6 +136,7 @@ function shimInit(options: ShimInitOptions = null) {
 	shim.Geolocation = GeolocationNode;
 	shim.FormData = require('form-data');
 	shim.sjclModule = require('./vendor/sjcl.js');
+	shim.NativeEncryption = new NativeEncryption;
 	shim.electronBridge_ = options.electronBridge;
 
 	shim.fsDriver = () => {

packages/lib/shim.ts

@@ -2,6 +2,7 @@ import * as React from 'react';
 import { NoteEntity, ResourceEntity } from './services/database/types';
 import type FsDriverBase from './fs-driver-base';
 import type FileApiDriverLocal from './file-api-driver-local';
+import { NativeEncryptionInterface } from './services/e2ee/types';
 
 export interface CreateResourceFromPathOptions {
 	resizeLargeImages?: 'always' | 'never' | 'ask';
@@ -276,6 +277,8 @@ const shim = {
 	// eslint-disable-next-line @typescript-eslint/no-explicit-any -- Old code before rule was applied
 	sjclModule: null as any,
 
+	NativeEncryption: null as NativeEncryptionInterface,
+
 	// eslint-disable-next-line @typescript-eslint/no-explicit-any -- Old code before rule was applied
 	randomBytes: async (_count: number): Promise<any> => {
 		throw new Error('Not implemented: randomBytes');

packages/tools/cspell/dictionary4.txt

@@ -110,4 +110,5 @@ ENOTFOUND
 Scaleway
 Inkscape
 Ionicon
-Stormlikes
+Stormlikes
+ripemd

yarn.lock

@@ -4356,6 +4356,16 @@ __metadata:
   languageName: node
   linkType: hard
 
+"@craftzdog/react-native-buffer@npm:^6.0.5":
+  version: 6.0.5
+  resolution: "@craftzdog/react-native-buffer@npm:6.0.5"
+  dependencies:
+    ieee754: ^1.2.1
+    react-native-quick-base64: ^2.0.5
+  checksum: 921b8bc7f84778e355e81e475792399276d611a346a7e51b6266a45cf4aa82194beb3a8106af796ed143d958c8476070c59e3720c0eec0a3c31e368fbb08b350
+  languageName: node
+  linkType: hard
+
 "@cronvel/get-pixels@npm:^3.4.0":
   version: 3.4.0
   resolution: "@cronvel/get-pixels@npm:3.4.0"
@@ -6707,6 +6717,7 @@ __metadata:
     react-native-paper: 5.12.3
     react-native-popup-menu: 0.16.1
     react-native-quick-actions: 0.3.13
+    react-native-quick-crypto: 0.7.1
     react-native-rsa-native: 2.0.5
     react-native-safe-area-context: 4.10.1
     react-native-securerandom: 1.0.1
@@ -35887,6 +35898,31 @@ __metadata:
   languageName: node
   linkType: hard
 
+"react-native-quick-base64@npm:^2.0.5":
+  version: 2.1.2
+  resolution: "react-native-quick-base64@npm:2.1.2"
+  dependencies:
+    base64-js: ^1.5.1
+  peerDependencies:
+    react: "*"
+    react-native: "*"
+  checksum: 46f3b26f48b26978686b0c043336220d681e6a02af5abcf3eb4ab7b9216251d1eb2fac5c559e984d963e93f54bd9f323651daac09762196815558abbd551729b
+  languageName: node
+  linkType: hard
+
+"react-native-quick-crypto@npm:0.7.1":
+  version: 0.7.1
+  resolution: "react-native-quick-crypto@npm:0.7.1"
+  dependencies:
+    "@craftzdog/react-native-buffer": ^6.0.5
+    events: ^3.3.0
+    readable-stream: ^4.5.2
+    string_decoder: ^1.3.0
+    util: ^0.12.5
+  checksum: 9a7a1fb1456410db30f062078f570bc566cac36fbc165e7d8ee8677bec09fcc96923de3cf7a0464804142af242a822bf66ea22460951399b9247e4a03fcfe059
+  languageName: node
+  linkType: hard
+
 "react-native-rsa-native@npm:2.0.5":
   version: 2.0.5
   resolution: "react-native-rsa-native@npm:2.0.5"
@@ -36603,6 +36639,19 @@ __metadata:
   languageName: node
   linkType: hard
 
+"readable-stream@npm:^4.5.2":
+  version: 4.5.2
+  resolution: "readable-stream@npm:4.5.2"
+  dependencies:
+    abort-controller: ^3.0.0
+    buffer: ^6.0.3
+    events: ^3.3.0
+    process: ^0.11.10
+    string_decoder: ^1.3.0
+  checksum: c4030ccff010b83e4f33289c535f7830190773e274b3fcb6e2541475070bdfd69c98001c3b0cb78763fc00c8b62f514d96c2b10a8bd35d5ce45203a25fa1d33a
+  languageName: node
+  linkType: hard
+
 "readable-stream@npm:~2.0.0":
   version: 2.0.6
   resolution: "readable-stream@npm:2.0.6"
@@ -42975,7 +43024,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"util@npm:^0.12.4":
+"util@npm:^0.12.4, util@npm:^0.12.5":
   version: 0.12.5
   resolution: "util@npm:0.12.5"
   dependencies: