nostr-tools/nip04.ts

import { bytesToHex, hexToBytes, randomBytes } from '@noble/hashes/utils.js'
import { secp256k1 } from '@noble/curves/secp256k1.js'
import { cbc } from '@noble/ciphers/aes'
import { base64 } from '@scure/base'

import { utf8Decoder, utf8Encoder } from './utils.ts'

export function encrypt(secretKey: string | Uint8Array, pubkey: string, text: string): string {
  const privkey: Uint8Array = secretKey instanceof Uint8Array ? secretKey : hexToBytes(secretKey)
  const key = secp256k1.getSharedSecret(privkey, hexToBytes('02' + pubkey))
  const normalizedKey = getNormalizedX(key)

  let iv = Uint8Array.from(randomBytes(16))
  let plaintext = utf8Encoder.encode(text)

  let ciphertext = cbc(normalizedKey, iv).encrypt(plaintext)

  let ctb64 = base64.encode(new Uint8Array(ciphertext))
  let ivb64 = base64.encode(new Uint8Array(iv.buffer))

  return `${ctb64}?iv=${ivb64}`
}

export function decrypt(secretKey: string | Uint8Array, pubkey: string, data: string): string {
  const privkey: Uint8Array = secretKey instanceof Uint8Array ? secretKey : hexToBytes(secretKey)
  let [ctb64, ivb64] = data.split('?iv=')
  let key = secp256k1.getSharedSecret(privkey, hexToBytes('02' + pubkey))
  let normalizedKey = getNormalizedX(key)

  let iv = base64.decode(ivb64)
  let ciphertext = base64.decode(ctb64)

  let plaintext = cbc(normalizedKey, iv).decrypt(ciphertext)

  return utf8Decoder.decode(plaintext)
}

function getNormalizedX(key: Uint8Array): Uint8Array {
  return key.slice(1, 33)
}