1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
// Copyright 2018-2026 the Deno authors. MIT license.
//! WebCrypto top-level `Crypto` interface as a cppgc-wrapped Rust object.
//!
//! Registered on the extension via `objects = [Crypto]` so the class
//! identity lives in Rust. `getRandomValues`, `randomUUID` and the `subtle`
//! getter are implemented natively as `#[op2] impl` members; the JS shim
//! only constructs the singleton via the [`Crypto::create`] static method.
use std::ffi::CStr;
use deno_core::GarbageCollected;
use deno_core::OpState;
use deno_core::op2;
use deno_core::v8;
use deno_core::webidl::WebIdlInterfaceConverter;
use rand::Rng;
use rand::rngs::StdRng;
use rand::thread_rng;
use crate::CryptoError;
use crate::fast_uuid_v4;
use crate::shared::SharedError;
pub struct Crypto {
/// The single `SubtleCrypto` instance returned by the `subtle` getter.
/// Stored as a `v8::Global` so the getter returns the same identity
/// across calls, as required by Web IDL.
subtle: v8::Global<v8::Value>,
}
impl WebIdlInterfaceConverter for Crypto {
const NAME: &'static str = "Crypto";
}
// SAFETY: the `subtle` field is a `v8::Global` whose backing object is owned
// by V8 itself; no Rust-side roots that need cppgc tracing.
unsafe impl GarbageCollected for Crypto {
fn trace(&self, _visitor: &mut v8::cppgc::Visitor) {}
fn get_name(&self) -> &'static CStr {
c"Crypto"
}
}
#[op2]
impl Crypto {
/// `new Crypto()` is illegal per the WebCrypto spec.
#[constructor]
#[cppgc]
fn constructor(_: bool) -> Result<Crypto, SharedError> {
Err(SharedError::IllegalConstructor)
}
/// Mint the singleton `Crypto` instance for `globalThis.crypto`. The JS
/// shim passes the already-constructed `SubtleCrypto` cppgc object so
/// that the `subtle` getter returns the same identity every call. Stays
/// as a static method on the class (not a top-level op) so it travels
/// with the cppgc class definition.
#[required(1)]
#[static_method]
#[cppgc]
fn create(
scope: &mut v8::PinScope<'_, '_>,
subtle: v8::Local<v8::Value>,
) -> Crypto {
Crypto {
subtle: v8::Global::new(scope, subtle),
}
}
#[getter]
fn subtle<'s>(
&self,
scope: &mut v8::PinScope<'s, '_>,
) -> v8::Local<'s, v8::Value> {
v8::Local::new(scope, &self.subtle)
}
/// `Crypto.getRandomValues(typedArray)` — fills `typedArray` with
/// cryptographically strong random bytes and returns it unchanged.
/// Rejects non-integer typed-array kinds with `TypeMismatchError` and
/// inputs longer than 65536 bytes with `QuotaExceededError`, per spec.
/// Per the WebCrypto spec all non-integer arguments (including non-
/// `ArrayBufferView` values like `null`, primitives, `DataView`, and
/// floating-point typed arrays) surface as `TypeMismatchError`, not
/// the WebIDL-default `TypeError`.
#[required(1)]
fn get_random_values<'s>(
&self,
state: &mut OpState,
scope: &mut v8::PinScope<'s, '_>,
typed_array: v8::Local<'s, v8::Value>,
) -> Result<v8::Local<'s, v8::Value>, CryptoError> {
let view = v8::Local::<v8::ArrayBufferView>::try_from(typed_array)
.map_err(|_| CryptoError::TypedArrayNotInteger)?;
if !(view.is_int8_array()
|| view.is_uint8_array()
|| view.is_uint8_clamped_array()
|| view.is_int16_array()
|| view.is_uint16_array()
|| view.is_int32_array()
|| view.is_uint32_array()
|| view.is_big_int64_array()
|| view.is_big_uint64_array())
{
return Err(CryptoError::TypedArrayNotInteger);
}
let byte_len = view.byte_length();
if byte_len > 65536 {
return Err(CryptoError::ArrayBufferViewLengthExceeded(byte_len));
}
if byte_len > 0 {
let byte_offset = view.byte_offset();
let ab = view.buffer(scope).unwrap();
// SAFETY: byte_offset + byte_len are within the backing store per V8.
let bytes = unsafe {
let ptr = (ab.data().unwrap().as_ptr() as *mut u8).add(byte_offset);
std::slice::from_raw_parts_mut(ptr, byte_len)
};
let maybe_seeded_rng = state.try_borrow_mut::<StdRng>();
if let Some(seeded_rng) = maybe_seeded_rng {
seeded_rng.fill(bytes);
} else {
let mut rng = thread_rng();
rng.fill(bytes);
}
}
Ok(typed_array)
}
/// `Crypto.registerSymbols(webidlBrand, kKeyObject)` — internal static
/// method called by the crypto module bootstrap to hand the WebIDL brand
/// symbol (a private of `ext:deno_webidl/00_webidl.js`) and the
/// `kKeyObject` symbol (a private of ext/node) over to the crypto cppgc
/// methods, which need them to brand every freshly-constructed
/// `CryptoKey`. Idempotent and effect-only; returns `true` on success.
#[fast]
#[rename("registerSymbols")]
#[static_method]
fn register_symbols<'s>(
scope: &mut v8::PinScope<'s, '_>,
webidl_brand: v8::Local<'s, v8::Value>,
k_key_object: v8::Local<'s, v8::Value>,
) -> bool {
crate::make_key::register_symbols(scope, webidl_brand, k_key_object)
}
#[string]
#[rename("randomUUID")]
#[required(0)]
fn random_uuid(&self, state: &mut OpState) -> String {
let maybe_seeded_rng = state.try_borrow_mut::<StdRng>();
let mut bytes = [0u8; 16];
if let Some(seeded_rng) = maybe_seeded_rng {
seeded_rng.fill(&mut bytes);
} else {
let mut rng = thread_rng();
rng.fill(&mut bytes);
}
fast_uuid_v4(&mut bytes)
}
}