Switched crypto program

Author: Herman White

package-lock.json

@@ -12,9 +12,9 @@
   "dependencies": {
     "basic-ftp": "^4.5.3",
     "cors": "^2.8.5",
-    "crypto-js": "^4.0.0",
     "dotenv": "^8.2.0",
     "express": "^4.17.1",
-    "nodemon": "^2.0.2"
+    "nodemon": "^2.0.2",
+    "simple-crypto-js": "^2.2.0"
   }
 }

package.json

@@ -3,9 +3,12 @@ require("dotenv").config();
 const cors = require("cors");
 const ftp = require("basic-ftp");
 const CryptoJS = require("crypto-js");
+var SimpleCrypto = require("simple-crypto-js").default;
 
 const PORT = process.env.PORT || 3000;
 
+// playground end
+
 const app = express();
 app.use(express.json()); // for parsing application/json
 app.use(cors());
@@ -25,22 +28,17 @@ const clients = {};
 // basic-ftp
 
 app.post("/navigate", (req, res) => {
-  if (req.body && req.body.ciphertext) {
+  if (req.body && req.body.cipherText) {
     init();
 
     async function init() {
-      const { ciphertext } = req.body;
-      // decrypt data received from frontend
-      console.log("Ciphertext:", ciphertext);
-      const bytes = CryptoJS.AES.decrypt(ciphertext, process.env.PASSWORD);
-      console.log("Bytes:", bytes);
-
-      console.log("CryptoJS keys:", Object.keys(CryptoJS).length);
-      console.log("Decrypteddata:", bytes.toString(CryptoJS.enc.Utf8));
+      const { cipherText } = req.body;
 
-      var decryptedData = JSON.parse(bytes.toString(CryptoJS.enc.Utf8));
+      // decrypt data received from frontend
+      var simpleCrypto = new SimpleCrypto(process.env.PASSWORD);
+      var decipherText = simpleCrypto.decrypt(cipherText);
 
-      const { ftpHost, ftpUser, ftpPassword, path } = decryptedData;
+      const { ftpHost, ftpUser, ftpPassword, path } = JSON.parse(decipherText);
 
       // if user is found and logged in
       if (
@@ -97,20 +95,19 @@ app.post("/navigate", (req, res) => {
 
 // removes and disconnects client
 app.post("/disconnect", (req, res) => {
-  if (req.body && req.body.ciphertext) {
+  if (req.body && req.body.cipherText) {
   } else {
     res.status(400).send("Unauthorized access.");
   }
 
   const init = async () => {
-    const { ciphertext } = req.body;
+    const { cipherText } = req.body;
 
     // decrypt data received from frontend
-    const bytes = CryptoJS.AES.decrypt(ciphertext, process.env.PASSWORD);
-
-    var decryptedData = JSON.parse(bytes.toString(CryptoJS.enc.Utf8));
+    var simpleCrypto = new SimpleCrypto(process.env.PASSWORD);
+    var decipherText = simpleCrypto.decrypt(cipherText);
 
-    const { ftpUser } = decryptedData;
+    const { ftpUser } = JSON.parse(decipherText);
 
     if (
       clients[ftpUser] !== undefined &&