Icontem

JavaScript Cryptographic Chat: Chat system that exchanges encrypted messages

Recommend this page to a friend!
  Info   View files Documentation   View files View files (10)   DownloadInstall with Composer Download .zip   Reputation   Support forum (3)   Blog    
Last Updated Ratings Unique User Downloads Download Rankings
2017-06-28 (1 month ago) RSS 2.0 feedNot enough user ratingsTotal: 139 All time: 332 This week: 26Up
Version License JavaScript version Categories
cchat 1.0.3GNU General Publi...2AJAX, Cryptography, Chat
Description Author

This package implements a chat system that exchanges encrypted messages.

Users can send messages to the peers over a network using AJAX requests.

The messages are encrypted with a previously agreed password between the peers.

The messages are stored encrypted in the server database using PHP.

Innovation Award
JavaScript Programming Innovation award winner
August 2016
Winner


Prize: One ebook of choice by Packt
Since Eduard Snowden has disclosed that many people communications were being intercepted, many users become worried with whether they were being tapped on the Internet.

Several solutions appeared to provide end-to-end encryption of messages exchanged between users.

This package provides a solution to chat between two users that uses a secret key to encrypt the messages.

Even though messages are stored on the server database, it is not possible to decrypt the messages without using the password that only the users have on the browser side.

Manuel Lemos
  Performance   Level  
Name: Martin Latter <contact>
Classes: 2 packages by
Country: United Kingdom United Kingdom
Age: ???
All time rank: 1255 in United Kingdom United Kingdom
Week rank: 24 Up2 in United Kingdom United Kingdom Up
Innovation award
Innovation award
Nominee: 2x

Winner: 2x

Details

CChat

Purpose

Lightweight end-to-end encrypted chatbox using JavaScript, PHP, and MySQL, with an emphasis on speed and minimalism.

[1]: https://tinram.github.io/images/cchat.png ![cchat][1]

Password

Uses a previously agreed password with the recipient, avoiding any initial key exchange across a network.

Features

  • Lightweight (45kB).
  • All data encrypted by the browser's JavaScript.
  • POST AJAX used (GET AJAX data would be recorded in server logs).
  • Coded to PHP 5.3 and using legacy JavaScript event handlers for maximum server-client compatibility.

Encryption

  • SHA-256-hashed key.
  • Blowfish cipher in CBC-mode (base64 display overlays binary-encrypted data).
  • Messages stored encrypted in the database.

The Blowfish block cipher is simple, strong, and fast. Its speed is ideal for JavaScript implementation.

Set-up

  1. Configure /install.php (line 18 onwards) configuration section details: username, passwords, database etc.
  2. Configure /classes/cchat.class.php (line 18 onwards) constants to be identical to those in /install.php
  3. Run /install.php through your server (which, if you have root MySQL access, should mean set-up is now complete and CChat's /index.php now displays in a browser without connection errors to the server).
  4. Alter the timezone if required: /index.php (line 5): date_default_timezone_set('Europe/London')

Operation

Fields:

  1. message display
  2. your name
  3. your password (use a strong password, previously agreed, to share messages with a recipient)
  4. your message

The decrypt button will decrypt existing encrypted messages in field 1, if the correct password is present in field 2.

Enter your name in field 2, password in field 3, and a message in field 4, then click the chat button.

A page refresh (encrypted messages displayed) or the wrong password will result in gibberish displayed in field 1.

Default Timings

The AJAX polling is 6 seconds between server checks for new messages (change the iCheckFreq variable (in microseconds) /js/cchat.js (line 17)).

The last hour's messages are displayed in field 1 (change the MESSAGE_BUFFER constant /classes/cchat.class.php (line 24)).

Character Set Limitation

Unicode character encoding is unfortunately not possible with the present JavaScript Blowfish cipher encryption (the reason the database remains as latin1 encoding).

Known Bugs

  1. Intermittent duplicate message bug (refresh page and it disappears): /js/cchat.js (line 294).
  2. Some intermittent line break character removal when using Linux and Windows browser clients together.

Credits

  • Nils Reimers for the Blowfish cipher in JavaScript.
  • Angel Marin and Paul Johnston for the SHA-256 hash function in JavaScript.
  • Matthew of JS Classes for testing / revision suggestions.
  • Karl, who asked me to create a 'shoutbox' in 2010.

Dedications

  • To God (I narrowly escaped death in 1992).
  • To Sofia.

License

CChat is released under the GPL v.3.

Miscellaneous

alt

Won a JS Classes Innovation Award (August 2016).

  Files folder image Files  
File Role Description
Files folder imageclasses (1 file)
Files folder imagecss (1 file)
Files folder imageincludes (2 files)
Files folder imagejs (2 files)
Files folder imagesql (1 file)
Accessible without login Plain text file index.php Data Auxiliary data
Accessible without login Plain text file install.php Data Auxiliary data
Accessible without login Plain text file ReadMe.md Doc. Documentation

  Files folder image Files  /  classes  
File Role Description
  Accessible without login Plain text file cchat.class.php Data Auxiliary data

  Files folder image Files  /  css  
File Role Description
  Accessible without login Plain text file cchat.css Data Auxiliary data

  Files folder image Files  /  includes  
File Role Description
  Accessible without login Plain text file check.php Data Auxiliary data
  Accessible without login Plain text file update.php Data Auxiliary data

  Files folder image Files  /  js  
File Role Description
  Plain text file bf.js Class Class source
  Plain text file cchat.js Class Class source

  Files folder image Files  /  sql  
File Role Description
  Accessible without login Plain text file cchat.sql Data Auxiliary data

 Version Control Unique User Downloads Download Rankings  
 100%
Total:139
This week:0
All time:332
This week:26Up