trilium/apps/server/src/services/encryption/my_scrypt.ts

import optionService from "../options.js";
import crypto from "crypto";
import sql from "../sql.js";

function getVerificationHash(password: crypto.BinaryLike) {
    const salt = optionService.getOption("passwordVerificationSalt");

    return getScryptHash(password, salt);
}

function getPasswordDerivedKey(password: crypto.BinaryLike) {
    const salt = optionService.getOption("passwordDerivedKeySalt");

    return getScryptHash(password, salt);
}

function getScryptHash(password: crypto.BinaryLike, salt: crypto.BinaryLike) {
    const hashed = crypto.scryptSync(password, salt, 32, { N: 16384, r: 8, p: 1 });

    return hashed;
}

function getSubjectIdentifierVerificationHash(
    guessedUserId: string | crypto.BinaryLike,
    salt?: string
) {
    if (salt != null) return getScryptHash(guessedUserId, salt);

    const savedSalt = sql.getValue("SELECT salt FROM user_data;");
    if (!savedSalt) {
        console.error("User salt undefined!");
        return undefined;
    }
    return getScryptHash(guessedUserId, savedSalt.toString());
}

function getSubjectIdentifierDerivedKey(
    subjectIdentifer: crypto.BinaryLike,
    givenSalt?: string
) {
    if (givenSalt !== undefined) {
        return getScryptHash(subjectIdentifer, givenSalt.toString());
    }

    const salt = sql.getValue("SELECT salt FROM user_data;");
    if (!salt) return undefined;

    return getScryptHash(subjectIdentifer, salt.toString());
}

function createSubjectIdentifierDerivedKey(
    subjectIdentifer: string | crypto.BinaryLike,
    salt: string | crypto.BinaryLike
) {
    return getScryptHash(subjectIdentifer, salt);
}

export default {
    getVerificationHash,
    getPasswordDerivedKey,
    getSubjectIdentifierVerificationHash,
    getSubjectIdentifierDerivedKey,
    createSubjectIdentifierDerivedKey
};