Beispiel #1
0
        // initializes node from given parameters
        public TrustChainNode(byte[] parentId, byte[] thisId, Permission heldPermissions,
                              Permission grantablePermissions, byte[] unassignedData, RSAParameters privateKey)
        {
            // initialize arrays
            ParentId        = new byte[CryptoUtil.ASYM_KEY_SIZE_BYTES];
            ThisId          = new byte[CryptoUtil.ASYM_KEY_SIZE_BYTES];
            UnassignedData  = new byte[TrustChainUtil.UNASSIGNED_DATA_SIZE];
            ParentSignature = new byte[CryptoUtil.SIGNATURE_SIZE];
            Payload         = new byte[PARENT_SIGNATURE_OFFSET];
            FullData        = new byte[NODE_BLOCK_SIZE];

            // populate single fields
            Buffer.BlockCopy(parentId, 0, ParentId, 0, CryptoUtil.ASYM_KEY_SIZE_BYTES);
            Buffer.BlockCopy(thisId, 0, ThisId, 0, CryptoUtil.ASYM_KEY_SIZE_BYTES);
            HeldPermissions      = heldPermissions;
            GrantablePermissions = grantablePermissions;
            Buffer.BlockCopy(unassignedData, 0, UnassignedData, 0, TrustChainUtil.UNASSIGNED_DATA_SIZE);

            // populate payload
            Buffer.BlockCopy(parentId, 0, Payload, PARENT_ID_OFFSET, CryptoUtil.ASYM_KEY_SIZE_BYTES);
            Buffer.BlockCopy(thisId, 0, Payload, THIS_ID_OFFSET, CryptoUtil.ASYM_KEY_SIZE_BYTES);
            Payload[HELD_PERMISSIONS_OFFSET]      = (byte)heldPermissions;
            Payload[GRANTABLE_PERMISSIONS_OFFSET] = (byte)grantablePermissions;
            Buffer.BlockCopy(unassignedData, 0, Payload, UNASSIGNED_DATA_OFFSET, TrustChainUtil.UNASSIGNED_DATA_SIZE);

            // populate full data and signature
            byte[] payloadSignature = CryptoUtil.Sign(Payload, privateKey);
            Buffer.BlockCopy(payloadSignature, 0, ParentSignature, 0, CryptoUtil.SIGNATURE_SIZE);
            Buffer.BlockCopy(Payload, 0, FullData, 0, PARENT_SIGNATURE_OFFSET);
            Buffer.BlockCopy(payloadSignature, 0, FullData, PARENT_SIGNATURE_OFFSET, CryptoUtil.SIGNATURE_SIZE);
        }
Beispiel #2
0
        public static void Main(string[] args)
        {
            Identity A = new Identity(new IdentityManager(), "A");
            Identity B = new Identity(new IdentityManager(), "B");
            //Identity C = new Identity(new IdentityManager(), "C");
            Identity D = new Identity(new IdentityManager(), "D");

            //Identity E = new Identity(new IdentityManager(), "E");
            //Identity F = new Identity(new IdentityManager(), "F");
            //Identity G = new Identity(new IdentityManager(), "G");
            //Identity H = new Identity(new IdentityManager(), "H");
            //Identity I = new Identity(new IdentityManager(), "I");

            A.GenerateRootChain();
            B.AddTrustChain(A.GenerateNewChain(B.PublicIdentity, Permission.Invite | Permission.Broadcast, Permission.Invite, "B"));
            //C.AddTrustChain(B.GenerateNewChain(C.PublicIdentity, Permission.Invite, Permission.Invite, "C"));
            D.AddTrustChain(A.GenerateNewChain(D.PublicIdentity, Permission.Invite, Permission.Invite, "D"));
            //E.AddTrustChain(C.GenerateNewChain(E.PublicIdentity, Permission.Invite, Permission.Invite, "E"));
            //F.AddTrustChain(D.GenerateNewChain(F.PublicIdentity, Permission.Invite, Permission.None, "F"));
            //G.AddTrustChain(E.GenerateNewChain(G.PublicIdentity, Permission.Invite, Permission.Invite, "G"));
            //H.AddTrustChain(C.GenerateNewChain(H.PublicIdentity, Permission.None, Permission.None, "H"));
            //I.AddTrustChain(F.GenerateNewChain(I.PublicIdentity, Permission.None, Permission.None, "I"));

            B.ValidateAndAdd(D.TrustChain);
            D.ValidateAndAdd(B.TrustChain);


            //bool ba = B.ValidateAndAdd(TrustChainUtil.SerializeTrustChain(A.TrustChain));
            //bool bd = B.ValidateAndAdd(TrustChainUtil.SerializeTrustChain(D.TrustChain));
            //bool bf = B.ValidateAndAdd(TrustChainUtil.SerializeTrustChain(F.TrustChain));
            //bool bi = B.ValidateAndAdd(TrustChainUtil.SerializeTrustChain(I.TrustChain));

            //bool ig = I.ValidateAndAdd(TrustChainUtil.SerializeTrustChain(G.TrustChain));
            //bool ic = I.ValidateAndAdd(TrustChainUtil.SerializeTrustChain(C.TrustChain));
            //bool ia = I.ValidateAndAdd(TrustChainUtil.SerializeTrustChain(A.TrustChain));

            //Console.WriteLine($"\nvalidated chains {ba} {bd} {bf} {bi}");
            //Console.WriteLine($"validated chains {ig} {ic} {ia}");
            //Console.WriteLine(TrustChainUtil.TrustChainToString(G.TrustChain));



            //Identity alice = new Identity(new IdentityManager(), "alice");
            //Identity bob = new Identity(new IdentityManager(), "bob");
            //Identity eve = new Identity(new IdentityManager(), "eve");

            //string message = "This is a long message being sent over a cryptographically secure channel.";

            //byte[] data = alice.GenerateMessage(message, bob.PublicIdentity);

            //Console.WriteLine($"Message len {data.Length}");

            //string received = eve.ReadMessage(data);

            //Console.WriteLine($"Got '{received}' from alice");

            var encoded = B.EncodePacket(Encoding.UTF8.GetBytes("This is a broadcast test #415 (to B from D)"), D.PublicIdentity);

            byte[] fakePayload = new byte[2 * CryptoUtil.HASH_SIZE + CryptoUtil.ASYM_KEY_SIZE_BYTES];
            Buffer.BlockCopy(A.PublicIdentityHash, 0, fakePayload, 0, CryptoUtil.HASH_SIZE);
            Buffer.BlockCopy(D.PublicIdentityHash, 0, fakePayload, CryptoUtil.HASH_SIZE, CryptoUtil.HASH_SIZE);
            Buffer.BlockCopy(encoded.Payload, 0, fakePayload, 2 * CryptoUtil.HASH_SIZE, CryptoUtil.ASYM_KEY_SIZE_BYTES);

            byte[] fakeSignature = CryptoUtil.Sign(fakePayload, A.privateKeyDebug);

            BroadcastMessageDto fake = new BroadcastMessageDto();

            fake.SourceIdHash      = A.PublicIdentityHash;
            fake.DestinationIdHash = D.PublicIdentityHash;
            fake.Payload           = encoded.Payload;
            fake.Signature         = fakeSignature;

            byte[] decoded;
            if (D.TryDecodePayload(fake, out decoded))
            {
                Console.WriteLine(BitConverter.ToString(fake.Payload));
                Console.WriteLine(Encoding.UTF8.GetString(decoded));
            }
            else
            {
                Console.WriteLine("Not our packet");
            }
        }
Beispiel #3
0
        // unicast/broadcast
        // () asymmetric encrypt
        // <[sender hash][recipient hash]([sender hash][message])[signature]>
        //  [32         ][32            ] [32         ][msg len] [256      ]
        //
        // multicast
        // () symmetric encrypt
        // <[sender hash][recipient hash][IV](<[message][signature]>)[signature]>
        public BroadcastMessageDto EncodePacket(byte[] message, byte[] remoteKey = null)
        {
            if (remoteKey != null && remoteKey.Length != CryptoUtil.ASYM_KEY_SIZE_BYTES && remoteKey.Length != CryptoUtil.SYM_KEY_SIZE)
            {
                throw new CryptographicException("Bad key size");
            }

            byte[] senderHash    = CryptoUtil.GetHash(privateKey.Modulus);
            byte[] recipientHash = CryptoUtil.GetHash(remoteKey);;
            byte[] processedMessage;

            if (remoteKey == null)
            {
                // broadcast
                recipientHash    = BROADCAST_ID;
                processedMessage = message;
            }
            else if (remoteKey.Length == CryptoUtil.ASYM_KEY_SIZE_BYTES)
            {
                // unicast
                using (var ms = new MemoryStream())
                    using (var writer = new BinaryWriter(ms)) {
                        writer.Write(senderHash);
                        writer.Write(message);
                        processedMessage = ms.ToArray();
                    }

                processedMessage = CryptoUtil.AsymmetricEncrypt(processedMessage, remoteKey);
            }
            else
            {
                // multicast
                using (var ms = new MemoryStream())
                    using (var writer = new BinaryWriter(ms)) {
                        writer.Write(message);
                        writer.Write(CryptoUtil.Sign(message, privateKey));
                        processedMessage = ms.ToArray();
                    }

                byte[] iv = CryptoUtil.GenerateIV();
                processedMessage = CryptoUtil.SymmetricEncrypt(processedMessage, remoteKey, iv);

                using (var ms = new MemoryStream())
                    using (var writer = new BinaryWriter(ms)) {
                        writer.Write(iv);
                        writer.Write(processedMessage);
                        processedMessage = ms.ToArray();
                    }
            }

            byte[] payload;
            using (var ms = new MemoryStream())
                using (var writer = new BinaryWriter(ms)) {
                    writer.Write(senderHash);
                    writer.Write(recipientHash);
                    writer.Write(processedMessage);
                    payload = ms.ToArray();
                }

            byte[] signature = CryptoUtil.Sign(payload, privateKey);

            return(new BroadcastMessageDto {
                SourceIdHash = senderHash,
                DestinationIdHash = recipientHash,
                Payload = processedMessage,
                Signature = signature
            });
        }