MlesTalk WebWorker is an open source Mles (Modern Lightweight channEl Service) WebSocket client layer protocol implementation written in JavaScript. MlesTalk WebWorker can be used independently by any application over its messaging application interface. It is used as part of MlesTalk Android application.
Messages using MlesTalk WebWorker are sent on Transport Layer Security (TLS) [1] protected connection by default which should be secure.
In addition to transport-level TLS encryption, message data is obfuscated end-to-end using symmetrical Blowfish (56-bit, weak key) [2] with ciphertext stealing (CTS) [3], all-or-nothing transform (AONT) [4], Blake2 [5] HMAC and Padmé padding [6]. The shared key is passed through the password-based key derivation function scrypt [7]. For longer real-time communication, an ephemeral Burmester-Desmedt (BD) [8] key is exchanged. When it is applied, it can be identified from a font colour change. While the message data is not plain text, please do note that this obfuscation does not protect from serious message opening efforts.
If the Mles Websocket session is connected to mles-webproxy, it will forward the traffic to Mles server transforming it to AES and vice versa.
Please see https://mles.io for details about Mles protocol.
/**
* Initialize Mles WebSocket connection
*
* @param init {String} IN: command parameter "init"
* @param data {String} IN: data, null for "init"
* @param addr {String} IN: TCP/IP address to connect to
* @param port {String} IN: TCP/IP port to connect to
* @param uid {String} IN: Mles User Id
* @param channel {String} IN: Mles Channel
* @param key {String} IN: Encryption key
*/
webWorker.postMessage[("init", data, addr, port, uid, channel, key)]
/**
* Mles WebSocket connection init receive after successful WebSocket initialization
*
* @param init {String} OUT: command parameter of receive "init"
* @param uid {String} OUT: Original Mles User Id
* @param channel {String} OUT: Original Mles Channel
*/
webWorker.onmessage = e.data["init", uid, channel]
/**
* Reconnect Mles WebSocket connection after close
*
* @param reconnect {String} IN: command parameter "reconnect"
* @param data {String} IN: data, null for "reconnect"
* @param uid {String} IN: Mles User Id
* @param channel {String} IN: Mles Channel
*/
webWorker.postMessage[("reconnect", data, uid, channel)]
/* Message type flags */
const MSGISFULL = 0x1;
const MSGISPRESENCE = (0x1 << 1);
const MSGISIMAGE = (0x1 << 2);
const MSGISMULTIPART = (0x1 << 3);
const MSGISFIRST = (0x1 << 4);
const MSGISLAST = (0x1 << 5);
/**
* Send message over Mles WebSocket connection
*
* @param send {String} IN: command parameter "send"
* @param data {String} IN: data to be sent
* @param uid {String} IN: Mles User Id
* @param channel {String} IN: Mles Channel
* @param randArray {Uint32Array} IN: random array filled with input of length 8 x Uint32
* @param msgtype IN: message type flags in a single variable
* @param valueOfDate {Date} IN: send time as Date
*/
webWorker.postMessage[("send", data, uid, channel, randarr, msgtype, valueOfDate)]
/**
* Mles WebSocket RX data receive
*
* @param data {String} OUT: command parameter of receive "data"
* @param uid {String} OUT: Original Mles User Id
* @param channel {String} OUT: Original Mles Channel
* @param msgTimestamp {Date.valueOf} OUT: timestamp of the message in X format
* @param message {String} OUT: received message
* @param msgtype OUT: message type flags in a single variable
*/
webWorker.onmessage = e.data["data", uid, channel, msgTimestamp, message, msgtype]
/**
* Close message over Mles WebSocket connection
*
* @param close {String} IN: command parameter "close"
* @param data {String} IN: data, null for close
* @param uid {String} IN: Mles User Id
* @param channel {String} IN: Mles Channel
*/
webWorker.postMessage[("close", data, uid, channel)]
/**
* Mles WebSocket connection close receive after WebSocket closing
*
* @param close {String} OUT: command parameter of receive "close"
* @param uid {String} OUT: Original Mles User Id
* @param channel {String} OUT: Original Mles Channel
*/
webWorker.onmessage = e.data["close", uid, channel]
- The Transport Layer Security (TLS) Protocol Version 1.3, IETF RFC8446
- B. Schneier, 1994. Description of a New Variable-Length Key, 64-Bit Block Cipher (Blowfish).
- Rogaway, Wooding & Zhang, 2012. The Security of Ciphertext Stealing.
- Rivest, 1997. All-or-nothing transform.
- Aumasson, Neves, Wilcox-O’Hearn & Winnerlein, 2013. BLAKE2: simpler, smaller, fast as MD5.
- Kirill Nikitin, Ludovic Barman, Wouter Lueks, Matthew Underwood, Jean-Pierre Hubaux, Bryan Ford, 2019. Reducing Metadata Leakage from Encrypted Files and Communication with PURBs
- Colin Percival, 2009. Stronger key derivation via sequential memory-hard functions.
- Burmester, Desmedt, 1994. A secure and efficient conference key distribution system.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent