public ActionResult Index()
{
var nutData = new NutData
{
Timestamp = DateTime.Now,
Address = IPAddress.Parse(Request.ServerVariables["REMOTE_ADDR"]),
Counter = ++Globals.Counter,
Entropy = new byte[4]
};
// just to keep the database size down, delete all nuts older than 2 minutes, but only every 10 page requests
if (Globals.Counter % 10 == 0)
{
var deleted = _nutRepository.DeleteOlderThan(DateTime.Now.AddMinutes(-2));
Console.WriteLine("{0} nuts deleted", deleted);
}
var rng = new RNGCryptoServiceProvider();
rng.GetBytes(nutData.Entropy);
var nut = HttpServerUtility.UrlTokenEncode(_sqrlServer.GenerateNut(Globals.AesKey, Globals.AesIV, nutData));
var url = string.Format("{0}/{1}",
Url.Action("Sqrl",
"Login",
null,
"sqrl",
Request.Url.Host + ":" + Request.Url.Port),
nut);
_nutRepository.Create(nut);
var barcodeWriter = new BarcodeWriter
{
Format = BarcodeFormat.QR_CODE,
Options = new EncodingOptions
{
Width = 400,
Height = 400
}
};
var image = barcodeWriter.Write(url);
MemoryStream stream = new System.IO.MemoryStream();
image.Save(stream, ImageFormat.Png);
byte[] imageBytes = stream.ToArray();
var model = new SqrlLoginModel
{
Url = url,
QrCode = Convert.ToBase64String(imageBytes),
Nut = nut
};
return(View(model));
}
public void StructToData_Timestamp()
{
var date = new DateTime(1981, 12, 8);
var nutStruct = new NutStruct();
nutStruct.Timestamp = (UInt32)(date - new DateTime(1970, 1, 1, 0, 0, 0, 0).ToLocalTime()).TotalSeconds;
var data = new NutData(nutStruct);
Assert.AreEqual(date, data.Timestamp);
}
public void StructToData_IPv4_Address()
{
var address = IPAddress.Parse("172.34.56.251");
var nutStruct = new NutStruct();
nutStruct.Address = BitConverter.ToUInt32(address.GetAddressBytes(), 0);
var data = new NutData(nutStruct);
Assert.AreEqual(new IPAddress(nutStruct.Address).ToString(), data.Address.ToString());
}
public void DataToStruct_IPv4_Address()
{
var data = new NutData();
data.Address = IPAddress.Parse("172.34.56.251");
data.Entropy = new byte[4];
var nutStruct = data.GetNutStruct();
Assert.AreEqual(data.Address.ToString(), new IPAddress(nutStruct.Address).ToString());
}
public void DataToStruct_Timestamp()
{
var data = new NutData();
data.Address = IPAddress.Parse("172.34.56.251");
data.Timestamp = new DateTime(1981, 12, 8);
data.Entropy = new byte[4];
var nutStruct = data.GetNutStruct();
Assert.AreEqual(data.Timestamp, new DateTime(1970, 1, 1, 0, 0, 0, 0).AddSeconds(nutStruct.Timestamp).ToLocalTime());
}
public void DataToStruct_IPv6_Address()
{
var data = new NutData();
data.Address = IPAddress.Parse("2001:db8:85a3:8d3:1319:8a2e:370:7348");
data.Entropy = new byte[4];
var sha = SHA256Managed.Create();
// TODO: I may have to think about how to salt this hash
var hash = sha.ComputeHash(data.Address.GetAddressBytes());
var partialHash = BitConverter.ToUInt32(new ArraySegment <byte>(hash, 0, 8).Array, 0);
var nutStruct = data.GetNutStruct();
Assert.AreEqual(partialHash, nutStruct.Address);
}
public static void Main(string[] args)
{
ISqrlSigner signer = new SqrlSigner();
IPbkdfHandler pbkdfHandler = new PbkdfHandler();
IHmacGenerator hmac = new HmacGenerator();
ISqrlClient client = new SqrlClient(pbkdfHandler, hmac, signer);
IAesHandler aesHandler = new AesHandler();
ISqrlServer server = new SqrlServer(signer, aesHandler);
ISsssHandler ssss = new SsssHandler();
var rng = new RNGCryptoServiceProvider();
byte theByte = 0;
while (true)
{
var secret = new byte[1];
//rng.GetBytes(secret);
secret[0] = theByte;
var shares = ssss.Split(secret, 3, 4);
var subset = new Dictionary <int, byte[]>();
subset[1] = shares[1];
subset[2] = shares[2];
//subset[3] = shares[3];
subset[4] = shares[4];
//subset[5] = shares[5];
//subset[6] = shares[6];
//subset[7] = shares[7];
//subset[8] = shares[8];
//subset[9] = shares[9];
//subset[10] = shares[10];
//subset[11] = shares[11];
//subset[12] = shares[12];
//subset[13] = shares[13];
//subset[14] = shares[14];
//subset[15] = shares[15];
//subset[16] = shares[16];
//subset[17] = shares[17];
//subset[18] = shares[18];
//subset[19] = shares[19];
//subset[20] = shares[20];
//subset[21] = shares[21];
//subset[22] = shares[22];
//subset[23] = shares[23];
//subset[24] = shares[24];
//subset[25] = shares[25];
var reconstructedSecret = ssss.Restore(subset);
if (!secret.SequenceEqual(reconstructedSecret))
{
Console.WriteLine("the byte: {0}", theByte);
foreach (var share in shares)
{
Console.WriteLine("{0}-{1}", share.Key, BitConverter.ToString(share.Value).Replace("-", ""));
}
Console.WriteLine("{0}", Convert.ToBase64String(secret));
Console.WriteLine("{0}", Convert.ToBase64String(reconstructedSecret));
break;
}
theByte++;
if (theByte == 0)
{
Console.WriteLine("Success!");
break;
}
}
Console.Write("Password: "******"Password verified");
}
var nutData = new NutData
{
Address = IPAddress.Parse("172.8.92.254"),
Timestamp = DateTime.UtcNow,
Counter = 4,
Entropy = new byte[4]
};
var aesKey = new byte[16];
var aesIV = new byte[16];
rng.GetBytes(aesKey);
rng.GetBytes(aesIV);
var nut = HttpServerUtility.UrlTokenEncode(server.GenerateNut(aesKey, aesIV, nutData));
var protocol = "sqrl://";
var urlBase = "www.example.com/sqrl/";
var url = string.Format("{0}{1}{2}", protocol, urlBase, nut);
var sqrlData = client.GetSqrlDataForLogin(identity.MasterIdentityKey, password, identity.Salt, url);
var decryptedSignature = signer.Verify(sqrlData.PublicKey, sqrlData.Signature);
// This is the data that the client passes to the server
Console.WriteLine("Url: {0}", sqrlData.Url);
Console.WriteLine("Public Key: {0}", Convert.ToBase64String(sqrlData.PublicKey));
Console.WriteLine("Signature: {0}", Convert.ToBase64String(sqrlData.Signature));
Console.WriteLine("Decrypted Signature: {0}", Encoding.UTF8.GetString(decryptedSignature));
Console.WriteLine();
Console.WriteLine("=========== Server ===========");
// The server will verify that the data sent from the client matches what is expected
Console.WriteLine("Verified by server: {0}", server.VerifySqrlRequest(sqrlData, string.Format("{0}{1}", urlBase, nut)));
}
