I'm trying to encrypt the data twice with rsa public keys, I'm getting a false value in javascript when I try to encrypt the data.
What I'm trying to do is
generate the public and private keys in flask,
generate the client public and private keys to use unique to each call,
encrypt the data client side using jsencrypt,
decrypt the data server side using pycryptodome
here's my code in app.py
from flask import Flask
from flask import render_template
from flask import request
import Crypto
from Crypto.PublicKey import RSA
from Crypto import Random
from base64 import b64decode
application = Flask(__name__, static_url_path='/static')
random_generator = Random.new().read
key = RSA.generate(2048, random_generator) #generate public and private keys
@application.route("/")
def hello():
return "<h1 style='color:blue'>Hello There!</h1>"
@application.route("/register")
def register():
crypto_key = key.publickey().export_key()
client_random_generator = Random.new().read
client_key = RSA.generate(2048, client_random_generator) #generate for client-side encryption
print(client_key)
return render_template('register.html',
serverCrypto = crypto_key,
clientCrypto = client_key.publickey().export_key(),
randomName1 = client_key.export_key(),
randomName2 = None,
randomName3 = None)
@application.route("/users", methods=['POST'])
def register_user():
error = None
if request.method == "POST":
data = request.get_json()
print(data)
client_key = RSA.importKey(data['clientPrivateKey'])
first_encrypted = client_key.decrypt(data['encrypted'])
second_encrypted = key.decrypt(first_encrypted)
print(second_encrypted)
return render_template('login.html', error=error)
@application.route("/crypto", methods=['POST'])
def get_crypto():
if request.method == "POST":
return None
if __name__ == "__main__":
application.run(ssl_context=('cert.pem', 'key.pem'))
my html code
<!DOCTYPE html>
<html>
<head>
<title>Demo!</title>
<script src="https://cdnjs.cloudflare.com/ajax/libs/jsencrypt/2.3.1/jsencrypt.min.js"></script>
<script type="text/javascript" src="/static/js/register.js"></script>
<style type="text/css">
input { margin-right: 100% }
</style>
</head>
<body>
<h2>Register</h2>
<form id="register">
<label>Username: <input name="username" type="text"
id="username">
</label>
<label>Password: <input name="password" type="password"
id="password">
</label>
<input type="hidden" name="serverCrypto" id="serverCrypto" value=""/>
<input type="hidden" name="clientCrypto" id="clientCrypto" value=""/>
<input type="hidden" name="randomName1" id="randomName1" value=""/>
<input type="hidden" name="randomName2" id="randomName2" value=""/>
<input type="hidden" name="randomName3" id="randomName3" value=""/>
<button type="register">Register</button>
</form>
</body>
</html>
and my javascript code
const apiUrl = 'https://localhost:5000';
function register(username, password, serverCrypto, clientCrypto, randomName1) {
let data = {"username": username, "passwword": password}
const encrypt = new JSEncrypt();
encrypt.setPublicKey(serverCrypto);
var encrypted = encrypt.encrypt(JSON.stringify(data));
console.log(encrypted); // shows up as false
encrypt.setPublicKey(clientCrypto);
encrypted = encrypt.encrypt(encrypted);
console.log(encrypted);
dataToSend = {"cipher": encrypted, "clientPrivateKey": randomName1};
fetch(apiUrl + '/users', {
method: 'POST',
body: JSON.stringify(dataToSend),
headers: {
'Content-Type': 'application/json',
}
})
.then(res => {
if (res.ok) {
res.json().then(json => {
console.log(json);
});
}
})
.catch(error => console.error('Error logging in: ', error));
}
window.addEventListener('load', function(e) {
document.getElementById('register')
.addEventListener('submit', processRegisterSubmit);
});
function processRegisterSubmit(e) {
e.preventDefault();
let username = document.getElementById('username').value;
let password = document.getElementById('password').value;
let serverCrypto = document.getElementById('serverCrypto').value;
let clientCrypto = document.getElementById('clientCrypto').value;
let randomName1 = document.getElementById('randomName1').value;
let randomName2 = document.getElementById('randomName2').value;
let randomName3 = document.getElementById('randomName3').value;
register(username, password, serverCrypto, clientCrypto, randomName1);
return false;
}
Comments
Post a Comment