public virtual void TestEncodeAuthenticateRequest()
{
var authenticateRequest = new KeySignRequest(U2FVersion.V2,
BROWSER_DATA_SIGN_SHA256, APP_ID_SIGN_SHA256, KEY_HANDLE);
var encodedBytes = RawMessageCodec.EncodeKeySignRequest(authenticateRequest);
CollectionAssert.AreEqual(SIGN_REQUEST_DATA, encodedBytes);
}
public async Task<KeyResponse<KeySignResponse>> SignAsync(KeySignRequest request,
CancellationToken cancellationToken = new CancellationToken(),
bool noWink = false)
{
var flags = noWink
? EnforceUserPresenceAndSign | InteractionFlags.TestSignatureOnly
: EnforceUserPresenceAndSign;
var message = ApduMessageCodec.EncodeAuthenticateRequest(
new KeyRequest<KeySignRequest>(request, flags));
var response = await QueryApduAsync(message, cancellationToken);
return ApduMessageCodec.DecodeAuthenticateReponse(response);
}
async Task<SignOperationResult?> TrySignOneRequest(IKey key, bool isFirstPass, KeySignRequest request,
CancellationToken cancellationToken)
{
try
{
var result = await key.SignAsync(request, cancellationToken, isFirstPass);
log.Info(result.Status.ToString());
switch (result.Status)
{
case KeyResponseStatus.BadKeyHandle:
// No use retrying
blacklistedKeyHandles.Add(request.KeyHandle);
break;
case KeyResponseStatus.Success:
return SignOperationResult.Success(request, result.Data);
}
}
catch (KeyGoneException)
{
// No sense in continuing with this signer, the key isn't physically present anymore
log.DebugFormat("Key '{0}' is gone", keyId);
throw;
}
catch (TaskCanceledException)
{
// Let cancellation bubble up
throw;
}
catch (KeyBusyException)
{
// Maybe it won't be busy later
}
catch (Exception exception)
{
log.Error("Authenticate request failed", exception);
}
return null;
}
public KeySignResponse Authenticate(KeySignRequest keySignRequest)
{
while (true)
{
var result = key.SignAsync(keySignRequest).Result;
switch (result.Status)
{
case KeyResponseStatus.Success:
Debug.Assert(result.Data != null, "no data for success");
return result.Data;
case KeyResponseStatus.TestOfuserPresenceRequired:
Console.WriteLine("User presence required");
Thread.Sleep(100);
continue;
case KeyResponseStatus.Failure:
throw new U2FException("Failure: " + result.Raw.Status);
case KeyResponseStatus.BadKeyHandle:
throw new U2FException("Bad key handle");
default:
throw new ArgumentOutOfRangeException();
}
}
}
/// <exception cref="U2FException" />
public KeySignResponse Authenticate(KeySignRequest keySignRequest)
{
if (keySignRequest == null)
{
throw new ArgumentNullException(nameof(keySignRequest));
}
log.Info(">> authenticate");
var applicationSha256 = keySignRequest.ApplicationSha256;
var challengeSha256 = keySignRequest.ChallengeSha256;
var keyHandle = keySignRequest.KeyHandle;
log.Info(" -- Inputs --");
log.Info(" applicationSha256: " + applicationSha256.ToHexString());
log.Info(" challengeSha256: " + challengeSha256.ToHexString());
log.Info(" keyHandle: " + keyHandle.ToHexString());
var keyPair = dataStore.GetKeyPair(keyHandle);
var counter = dataStore.IncrementCounter();
var userPresence = userPresenceVerifier.VerifyUserPresence();
var signedData = RawMessageCodec.EncodeKeySignSignedBytes(applicationSha256, userPresence, counter,
challengeSha256);
log.Info("Signing bytes " + signedData.ToHexString());
var signature = crypto.Sign(signedData, keyPair.PrivateKey);
log.Info(" -- Outputs --");
log.Info(" userPresence: " + userPresence);
log.Info(" counter: " + counter);
log.Info(" signature: " + signature.ToHexString());
log.Info("<< authenticate");
return new KeySignResponse(userPresence, counter, signature);
}
public static SignOperationResult Success(KeySignRequest request, KeySignResponse response)
{
return new SignOperationResult(KeyResponseStatus.Success, request, response);
}
private SignOperationResult(KeyResponseStatus status, KeySignRequest request, KeySignResponse response)
{
Status = status;
Request = request;
Response = response;
}
protected bool Equals(KeySignRequest other)
{
return ChallengeSha256.SequenceEqual(other.ChallengeSha256) &&
ApplicationSha256.SequenceEqual(other.ApplicationSha256) && KeyHandle.SequenceEqual(other.KeyHandle);
}
/// <exception cref="System.IO.IOException"/>
/// <exception cref="U2FException"/>
public static void SendAuthenticateRequest(Stream outputStream, KeySignRequest keySignRequest)
{
SendRequest(outputStream, CommandAuthenticate,
RawMessageCodec.EncodeKeySignRequest(keySignRequest));
}
private bool IsBlacklisted(KeySignRequest request)
{
return blacklistedKeyHandles.Any(h => h.SequenceEqual(request.KeyHandle));
}
private SignInfo GenerateSignInfo(SignRequest signRequest)
{
var clientDataB64 = ClientDataCodec.EncodeClientData(ClientDataCodec.RequestTypeAuthenticate, signRequest.Challenge,
sender.Origin, sender.ChannelId);
var clientDataSha256 = crypto.ComputeSha256(clientDataB64);
var appIdSha256 = crypto.ComputeSha256(signRequest.AppId);
var keyHandle = WebSafeBase64Converter.FromBase64String(signRequest.KeyHandle);
var authRequest = new KeySignRequest(U2FVersion.V2,
clientDataSha256, appIdSha256, keyHandle);
return new SignInfo(signRequest, clientDataB64, authRequest);
}
public SignInfo(SignRequest signRequest, string clientDataBase64, KeySignRequest keySignRequest)
{
ClientDataBase64 = clientDataBase64;
KeySignRequest = keySignRequest;
SignRequest = signRequest;
}
protected bool Equals(KeySignRequest other)
{
return(ChallengeSha256.SequenceEqual(other.ChallengeSha256) &&
ApplicationSha256.SequenceEqual(other.ApplicationSha256) && KeyHandle.SequenceEqual(other.KeyHandle));
}