signin.js

/*
 * Anna Dorottya Simon, Márk Szabó
 * Neptun-ID: R48G73, EMX74N
 * Applied cryptography project - a postquantum messenger application
 * January 2017
 * This solution was submitted and prepared by Anna Dorottya Simon(R48G73), Márk Szabó(EMX74N) for the project assignment of the Applied cryptography project seminar course.
 * We declare that this solution is our own work.
 * We have put the necessary references wherever we have used bigger and/or complicated external codes in our project. For shorter code snippets (usually from Stack Overflow) we have put the reference there in most cases.
 * Given the uniqueness of the project (no other student had, have or will have the same project) we have published our code on GitHub with the permission of our professors.
 * Students’ regulation of Eötvös Loránd University (ELTE Regulations Vol. II. 74/C. § ) states that as long as a student presents another student’s work - or at least the significant part of it - as his/her own performance, it will count as a disciplinary fault. The most serious consequence of a disciplinary fault can be dismissal of the student from the University.
 */

//scrypt parameters
var N = 1024, r = 80, p = 1;
var dkLen = 32;

var inputEmail;
var inputPassword;
var inputSalt;
var password;
var salt;
var authenticationkey
var decryptionkey;
var privatekey;

function prepareInput() {
  inputEmail = $('#inputEmail').val();
  inputPassword = $('#inputPassword').val();
  inputSalt = inputEmail + "someRandomsrzujhnfgbdf";
  password = new buffer.SlowBuffer(inputPassword.normalize('NFKC'));
  salt = new buffer.SlowBuffer(inputSalt.normalize('NFKC'));
}

function signin_from_localStorage(){
  hideLoginAlert();
  inputEmail = localStorage.getItem('local_username');
  decryptionkey = atob(localStorage.getItem('local_decryption_key')).split("").map(function(c) { return c.charCodeAt(0); });
  authenticationkey = localStorage.getItem('local_authenticationkey');

  $.post("login.php", {
    username: inputEmail,
    password: authenticationkey
    },
    function(data, status){
      if(data.substring(0,1) == '1') { //successfull login
        $('#signin').hide();
        $('#main').show();
        privatekey = AESdecryptCBC_txt(data.substr(1), decryptionkey); //login.php returns '1'.privatekey_aes
        generateMenu();
      } else {
        displayLoginAlert("danger",data);
        //clear localStorage variables because authentication error
        localStorage.removeItem('local_username');
        localStorage.removeItem('local_decryption_key');
        localStorage.removeItem('local_authenticationkey');
      }
    }
  );
}

function signout(){
  localStorage.removeItem('local_username');
  localStorage.removeItem('local_decryption_key');
  localStorage.removeItem('local_authenticationkey');
  location.reload();
}

function signin() {
  hideLoginAlert();
  prepareInput();
  if(inputEmail == "" || inputPassword == "") {
    displayLoginAlert("danger","Username and password must be set.");
    return;
  }
  $('.progress').show();
  scrypt(password, salt, N, r, p, dkLen, function(error, progress, hash) {
    if (error) {
      displayLoginAlert("danger","Calculating the scrypt hash of the password failed. Try again. Detailed error: " + error.toString());
    } else if (hash) {
      decryptionkey = hash.slice(0,16);
      authenticationkey = btoa(String.fromCharCode.apply(null,hash.slice(16,32)));
      $.post("login.php", {	username: inputEmail,	password: authenticationkey },

        function(data, status){
          if(data.substring(0,1) == '1') { //successfull login
            $('#signin').hide();
            $('#main').show();
            privatekey = AESdecryptCBC_txt(data.substr(1), decryptionkey); //login.php returns '1'.privatekey_aes

            generateMenu();
            if ($('#rememberMe').is(":checked")) { //Option to remeber user saving keys
              localStorage.setItem('local_username',inputEmail);
              localStorage.setItem('local_decryption_key', btoa(String.fromCharCode.apply(null,decryptionkey)));
              localStorage.setItem('local_authenticationkey', authenticationkey);
            }
          } else {
            displayLoginAlert("danger",data);
          }
      });
    } else {
      updateInterface(progress);
    }
  });
}

function register() {
  hideLoginAlert();
  prepareInput();
  if(inputEmail == "" || inputPassword == "") {
    displayLoginAlert("danger","Username and password must be set.");
    return;
  }
  $('.progress').show();
  scrypt(password, salt, N, r, p, dkLen, function(error, progress, hash) {
    if (error) {
      displayLoginAlert("danger","Calculating the scrypt hash of the password failed. Try again. Detailed error: " + error.toString());
    } else if (hash) {
      decryptionkey = hash.slice(0,16);
      var authenticationkey = btoa(String.fromCharCode.apply(null,hash.slice(16,32)));
      generateNTRUKeys(decryptionkey, function(keys){
        updateInterface(0.9);
        var enc_privatekey= AESencryptCBC_txt(keys[0],decryptionkey);
        $.post("register.php", {
          username: inputEmail,
          password: authenticationkey,
          privatekey: enc_privatekey,
          publickey: btoa(keys[1])
        },
        function(data, status){
          updateInterface(1);
          switch (data) {
            case "1": //success (no mail registration)
              displayLoginAlert("success","Registration successful, you can login now.");
              break;
            case "2": //success (mail sent)
              displayLoginAlert("success","Please check your e-mail to complete registration.");
              break;
            default:
              displayLoginAlert("danger",data);
          }
        });
      });
    } else {
      updateInterface(0.8*progress); //creating the hash is the progress up to 80%, then NTRU keygen (90%) and call register.php (100%)
    }
  });
}

function displayLoginAlert(type, text) {
  displayAlert('#loginalert', type, text);
}
function hideLoginAlert() {
  $('#loginalert').hide(500);
}
function displayAlert(divid, type, text) {
  $(divid).hide();
  $(divid).empty();
  $(divid).html('<div class="alert alert-' + type + '"><a href="#" class="close" data-dismiss="alert" aria-label="close">&times;</a> ' + text + '</div>');
  $(divid).show(500);
}

function updateInterface(progress) {
  $('#scryptprogress').width(progress*100+"%");
  $('#scryptprogress').attr("aria-valuenow",progress);
  if(progress == 1) {
    $('.progress').hide();
    $('#scryptprogress').width(0);
    $('#scryptprogress').attr("aria-valuenow",0);
  }
}