mirror of
https://github.com/danbulant/jose
synced 2026-05-25 04:51:47 +00:00
33 lines
1.1 KiB
JavaScript
33 lines
1.1 KiB
JavaScript
import { JWEInvalid, JOSENotSupported } from '../util/errors.js';
|
|
import isKeyObject from './is_key_object.js';
|
|
const checkCekLength = (enc, cek) => {
|
|
let expected;
|
|
switch (enc) {
|
|
case 'A128CBC-HS256':
|
|
case 'A192CBC-HS384':
|
|
case 'A256CBC-HS512':
|
|
expected = parseInt(enc.substr(-3), 10);
|
|
break;
|
|
case 'A128GCM':
|
|
case 'A192GCM':
|
|
case 'A256GCM':
|
|
expected = parseInt(enc.substr(1, 3), 10);
|
|
break;
|
|
default:
|
|
throw new JOSENotSupported(`Content Encryption Algorithm ${enc} is not supported either by JOSE or your javascript runtime`);
|
|
}
|
|
if (cek instanceof Uint8Array) {
|
|
if (cek.length << 3 !== expected) {
|
|
throw new JWEInvalid('Invalid Content Encryption Key length');
|
|
}
|
|
return;
|
|
}
|
|
if (isKeyObject(cek) && cek.type === 'secret') {
|
|
if (cek.symmetricKeySize << 3 !== expected) {
|
|
throw new JWEInvalid('Invalid Content Encryption Key length');
|
|
}
|
|
return;
|
|
}
|
|
throw new TypeError('Invalid Content Encryption Key type');
|
|
};
|
|
export default checkCekLength;
|