gchq / gchq/CyberChef

Feature request: RSAVerify handle CRLF line endings in the 'Message' field

Open
#1,246 0 comments 0 reactions 0 assignees View on GitHub
feature
Dominant language
JavaScript
Stars
35.8k
Forks
4.1k
Avg merge
2d 26m
Merged PRs (30d)
33

Description

**Is your feature request related to a problem? Please describe.**
When attempting to verify an email DKIM signature, the message to be verified typically contains **CRLF** line endings. However, when uploaded to the "Message" textarea, the line endings are replaced with **LF**, causing a different hash to be computed, which naturally always results in 'Verification failure'.
I'm guessing this is probably an html textarea issue, rather than a bug in the project.

**Describe the solution you'd like**
Proposed solution could be to add additional toggle button "Message Input", where a user can choose how a Message should be interpreted/decoded. ie. (Hex, UTF8, Latin1, Base64).

**Alternate solution**
A textarea allowing escaped characters. Example: 'Hello\r\n'

**Additional context**
![rsaverify](https://user-images.githubusercontent.com/48497634/133893930-6b6ae7f1-3dfa-479c-a520-c63c2c24ae69.png)

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the CRLF-to-LF conversion in the RSAVerify operation's Message textarea with a DKIM-signed message. Inspect how the Message input is interpreted and compare the proposed decoding toggle with escaped-character input; done means a CRLF message can be verified without changing its hash.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
frontend, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.