Skip to content

Latest commit

 

History

History
72 lines (61 loc) · 2.5 KB

Readme.md

File metadata and controls

72 lines (61 loc) · 2.5 KB
Raw

Double Ratchet React Test

This repository is a simple test to connect a React Application to a Go Server and have both communicate using Double ratchet encryption.

The Go server can be found inside 'go-server' directory and the react client inside the 'react-client' directory

This is just a demo application using the prebuilt libraries available for both the languages/frameworks.

Communication:

The main communication inside the application is:

  • On start, the server generates a Diffie–Hellman key pair and a user for the double ratchet communication and stores it inside a serve state manager.
  • On button press in the react application, it sends a GET request to the server to get a Public Key for the server. (/start route)
  • The server responds with a Public key, then the server generates a shared key for communication using the elliptic curve (22519).
{
    "key": "Public-key from server"
}
  • It encrypts the plaintext and sends a POST request with the message and the key. (/recv route)
{
     "key": "sharedKey",
     "message": "cipherText"
  • The server responds with "Received" to confirm the communication and then tries to decrypt the message using the doubleratchet library.

Libraries

GO

  • github.com/gorilla/mux
    • The main router library for the server
  • github.com/gorilla/handlers
    • For handling CORS inside the router
  • github.com/status-im/doubleratchet
    • For the double ratchet encryption communication

React

  • Parcel
    • Build system and bundler
  • React/React DOM
    • Build the front-end application
  • Crypto-JS
    • For encryption/decryption
  • Elliptic
    • For generating the keys and users on the client side
  • Axios
    • Used for API communication

Usage

Server

Local Machine
  • git clone
  • cd go-server
  • go build
  • .\go-server\go run main.go
Docker

Build Go Server:

  • docker build -t go-server -f .\go-server\dockerfile .\go-server Run Go Server:
  • docker run -it -p 8080:8080 --rm go-server

Client

  • cd react-server
  • npm install
  • npm start

Limitations:

  • The Go library is properly implemented and there are no issues besides some lack of documentation.
  • I could not find any good libraries for the React (browser) clients and thus theres some incorrect keys being shared.
Disclaimer

This is just a test application never meant for production environment. This does not work and all the things are only for development level trials.