Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
aerogear-cordova-crypto
Advanced tools
This plugin mimics the API of the aerogear-js crypto functions as close as possible, but delegates the work to the native implementations
Project Info | |
---|---|
License: | Apache License, Version 2.0 |
Build: | Cordova Plugin |
Documentation: | https://aerogear.org/docs/specs/aerogear-cordova/ |
Issue tracker: | https://issues.jboss.org/browse/AGCORDOVA |
Mailing lists: | aerogear-users (subscribe) |
aerogear-dev (subscribe) |
This plugin allows you to use the native aerogear crypto libs for your cordova apps. While staying close to the aerogear-js api.
var agCrypto = new AeroGear.Crypto();
agCrypto.deriveKey('my password', null, {
success: function (rawPassword) {
console.log(rawPassword);
}
});
Symmetric encryption support
Promise.all([agCrypto.deriveKey('my password'), agCrypto.getRandomValue()])
.then(function (rawPassword, IV) {
var options = {
IV: IV[0],
key: rawPassword[0],
data: "My Bonnie lies over the ocean, my Bonnie lies over the sea"
};
agCrypto.encrypt(options).then(function (cipherText) {
console.log(cipherText);
});
},
function (error) {
console.log('error ' + error);
});
// or with regular callbacks
agCrypto.deriveKey('my password', null, {
success: function (rawPassword) {
agCrypto.getRandomValue({
success: function (generatedIV) {
var options = {
IV: generatedIV,
key: rawPassword,
data: "My Bonnie lies over the ocean, my Bonnie lies over the sea"
};
agCrypto.encrypt(options, {
success: function (cipherText) {
console.log(cipherText);
}
});
}
});
}
});
var options = {
IV: "69696ee955b62b73cd62bda875fc73d68219e0036b7a0b37",
AAD: "feedfacedeadbeeffeedfacedeadbeefabaddad2",
key: rawPassword,
data: cipherText
};
AeroGear.Crypto().decrypt(options, {
success: function (text) {
console.log(text);
}
});
Promise.all([agCrypto.KeyPair(), agCrypto.KeyPair(), agCrypto.getRandomValue()])
.then(function (keyPair, keyPairPandora, IV) {
var options = {
IV: IV[0],
key: new agCrypto.KeyPair(keyPair[0].privateKey, keyPairPandora[0].publicKey),
data: "My bonnie lies over the ocean"
};
agCrypto.encrypt(options).then(function (cipherText) {
options.key = new agCrypto.KeyPair(keyPairPandora[0].privateKey, keyPair[0].publicKey);
options.data = cipherText;
agCrypto.decrypt(options).then(function (plainText) {
console.log('plainText ' + plainText);
});
});
});
cordova plugin add org.jboss.aerogear.cordova.crypto
For now, only iOS and Android are supported
cordova platform add ios
cd platforms/ios
pod install
cordova platform add android
cordova plugin add https://github.com/aerogear/aerogear-cordova-crypto.git
cordova plugin add https://github.com/aerogear/aerogear-cordova-crypto.git#:/tests
cordova plugin add http://git-wip-us.apache.org/repos/asf/cordova-plugin-test-framework.git
config.xml
with <content src="cdvtests/index.html" />
or navigate to cdvtests/index.html from within your app.For more details about the current release, please consult our documentation.
If you would like to help develop AeroGear you can join our developer's mailing list, join #aerogear on Freenode, or shout at us on Twitter @aerogears.
Also takes some time and skim the contributor guide
Join our user mailing list for any questions or help! We really hope you enjoy app development with AeroGear!
If you found a bug please create a ticket for us on Jira with some steps to reproduce it.
FAQs
This plugin mimics the API of the aerogear-js crypto functions as close as possible, but delegates the work to the native implementations
The npm package aerogear-cordova-crypto receives a total of 0 weekly downloads. As such, aerogear-cordova-crypto popularity was classified as not popular.
We found that aerogear-cordova-crypto demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.