private void initializeSessionsV2(SessionState aliceSessionState, SessionState bobSessionState)
{
ECKeyPair aliceIdentityKeyPair = Curve.generateKeyPair();
IdentityKeyPair aliceIdentityKey = new IdentityKeyPair(new IdentityKey(aliceIdentityKeyPair.getPublicKey()),
aliceIdentityKeyPair.getPrivateKey());
ECKeyPair aliceBaseKey = Curve.generateKeyPair();
ECKeyPair aliceEphemeralKey = Curve.generateKeyPair();
ECKeyPair bobIdentityKeyPair = Curve.generateKeyPair();
IdentityKeyPair bobIdentityKey = new IdentityKeyPair(new IdentityKey(bobIdentityKeyPair.getPublicKey()),
bobIdentityKeyPair.getPrivateKey());
ECKeyPair bobBaseKey = Curve.generateKeyPair();
ECKeyPair bobEphemeralKey = bobBaseKey;
AliceAxolotlParameters aliceParameters = AliceAxolotlParameters.newBuilder()
.setOurIdentityKey(aliceIdentityKey)
.setOurBaseKey(aliceBaseKey)
.setTheirIdentityKey(bobIdentityKey.getPublicKey())
.setTheirSignedPreKey(bobEphemeralKey.getPublicKey())
.setTheirRatchetKey(bobEphemeralKey.getPublicKey())
.setTheirOneTimePreKey(May <ECPublicKey> .NoValue)
.create();
BobAxolotlParameters bobParameters = BobAxolotlParameters.newBuilder()
.setOurIdentityKey(bobIdentityKey)
.setOurOneTimePreKey(May <ECKeyPair> .NoValue)
.setOurRatchetKey(bobEphemeralKey)
.setOurSignedPreKey(bobBaseKey)
.setTheirBaseKey(aliceBaseKey.getPublicKey())
.setTheirIdentityKey(aliceIdentityKey.getPublicKey())
.create();
RatchetingSession.initializeSession(aliceSessionState, 2, aliceParameters);
RatchetingSession.initializeSession(bobSessionState, 2, bobParameters);
}
private May <uint> ProcessV3(SessionRecord sessionRecord, PreKeyWhisperMessage message)
{
if (sessionRecord.HasSessionState(message.GetMessageVersion(), message.GetBaseKey().Serialize()))
{
return(May <uint> .NoValue);
}
SignedPreKeyRecord signedPreKeyRecord = signedPreKeyStore.LoadSignedPreKey(message.GetSignedPreKeyId());
ECKeyPair ourSignedPreKey = signedPreKeyRecord.GetKeyPair();
BobAxolotlParameters.Builder parameters = BobAxolotlParameters.NewBuilder();
parameters.SetTheirBaseKey(message.GetBaseKey())
.SetTheirIdentityKey(message.GetIdentityKey())
.SetOurIdentityKey(identityKeyStore.GetIdentityKeyPair())
.SetOurSignedPreKey(ourSignedPreKey)
.SetOurRatchetKey(ourSignedPreKey);
if (message.GetPreKeyId().HasValue)
{
parameters.SetOurOneTimePreKey(new May <ECKeyPair>(preKeyStore.LoadPreKey(message.GetPreKeyId().ForceGetValue()).GetKeyPair()));
}
else
{
parameters.SetOurOneTimePreKey(May <ECKeyPair> .NoValue);
}
if (!sessionRecord.IsFresh())
{
sessionRecord.ArchiveCurrentState();
}
RatchetingSession.InitializeSession(sessionRecord.GetSessionState(), message.GetMessageVersion(), parameters.Create());
sessionRecord.GetSessionState().SetLocalRegistrationId(identityKeyStore.GetLocalRegistrationId());
sessionRecord.GetSessionState().SetRemoteRegistrationId(message.GetRegistrationId());
sessionRecord.GetSessionState().SetAliceBaseKey(message.GetBaseKey().Serialize());
if (message.GetPreKeyId().HasValue&& message.GetPreKeyId().ForceGetValue() != Medium.MAX_VALUE)
{
return(message.GetPreKeyId());
}
else
{
return(May <uint> .NoValue);
}
}
private May <uint> processV3(SessionRecord sessionRecord, PreKeyWhisperMessage message)
{
if (sessionRecord.hasSessionState(message.getMessageVersion(), message.getBaseKey().serialize()))
{
//Log.w(TAG, "We've already setup a session for this V3 message, letting bundled message fall through...");
return(May <uint> .NoValue);
}
ECKeyPair ourSignedPreKey = signedPreKeyStore.LoadSignedPreKey(message.getSignedPreKeyId()).getKeyPair();
BobAxolotlParameters.Builder parameters = BobAxolotlParameters.newBuilder();
parameters.setTheirBaseKey(message.getBaseKey())
.setTheirIdentityKey(message.getIdentityKey())
.setOurIdentityKey(identityKeyStore.GetIdentityKeyPair())
.setOurSignedPreKey(ourSignedPreKey)
.setOurRatchetKey(ourSignedPreKey);
if (message.getPreKeyId().HasValue)
{
parameters.setOurOneTimePreKey(new May <ECKeyPair>(preKeyStore.LoadPreKey(message.getPreKeyId().ForceGetValue()).getKeyPair()));
}
else
{
parameters.setOurOneTimePreKey(May <ECKeyPair> .NoValue);
}
if (!sessionRecord.isFresh())
{
sessionRecord.archiveCurrentState();
}
RatchetingSession.initializeSession(sessionRecord.getSessionState(), message.getMessageVersion(), parameters.create());
sessionRecord.getSessionState().setLocalRegistrationId(identityKeyStore.GetLocalRegistrationId());
sessionRecord.getSessionState().setRemoteRegistrationId(message.getRegistrationId());
sessionRecord.getSessionState().setAliceBaseKey(message.getBaseKey().serialize());
if (message.getPreKeyId().HasValue&& message.getPreKeyId().ForceGetValue() != Medium.MAX_VALUE)
{
return(message.getPreKeyId());
}
else
{
return(May <uint> .NoValue);
}
}
private May <uint> processV2(SessionRecord sessionRecord, PreKeyWhisperMessage message)
{
if (!message.getPreKeyId().HasValue)
{
throw new InvalidKeyIdException("V2 message requires one time prekey id!");
}
if (!preKeyStore.ContainsPreKey(message.getPreKeyId().ForceGetValue()) &&
sessionStore.ContainsSession(remoteAddress))
{
//Log.w(TAG, "We've already processed the prekey part of this V2 session, letting bundled message fall through...");
return(May <uint> .NoValue); //May.absent();
}
ECKeyPair ourPreKey = preKeyStore.LoadPreKey(message.getPreKeyId().ForceGetValue()).getKeyPair();
BobAxolotlParameters.Builder parameters = BobAxolotlParameters.newBuilder();
parameters.setOurIdentityKey(identityKeyStore.GetIdentityKeyPair())
.setOurSignedPreKey(ourPreKey)
.setOurRatchetKey(ourPreKey)
.setOurOneTimePreKey(May <ECKeyPair> .NoValue) //absent
.setTheirIdentityKey(message.getIdentityKey())
.setTheirBaseKey(message.getBaseKey());
if (!sessionRecord.isFresh())
{
sessionRecord.archiveCurrentState();
}
RatchetingSession.initializeSession(sessionRecord.getSessionState(), message.getMessageVersion(), parameters.create());
sessionRecord.getSessionState().setLocalRegistrationId(identityKeyStore.GetLocalRegistrationId());
sessionRecord.getSessionState().setRemoteRegistrationId(message.getRegistrationId());
sessionRecord.getSessionState().setAliceBaseKey(message.getBaseKey().serialize());
if (message.getPreKeyId().ForceGetValue() != Medium.MAX_VALUE)
{
return(message.getPreKeyId());
}
else
{
return(May <uint> .NoValue); // May.absent();
}
}
private May <uint> ProcessV2(SessionRecord sessionRecord, PreKeyWhisperMessage message)
{
if (!message.GetPreKeyId().HasValue)
{
throw new InvalidKeyIdException("V2 message requires one time prekey id!");
}
if (!preKeyStore.ContainsPreKey(message.GetPreKeyId().ForceGetValue()) &&
sessionStore.ContainsSession(remoteAddress))
{
return(May <uint> .NoValue);
}
ECKeyPair ourPreKey = preKeyStore.LoadPreKey(message.GetPreKeyId().ForceGetValue()).GetKeyPair();
BobAxolotlParameters.Builder parameters = BobAxolotlParameters.NewBuilder();
parameters.SetOurIdentityKey(identityKeyStore.GetIdentityKeyPair())
.SetOurSignedPreKey(ourPreKey)
.SetOurRatchetKey(ourPreKey)
.SetOurOneTimePreKey(May <ECKeyPair> .NoValue) //absent
.SetTheirIdentityKey(message.GetIdentityKey())
.SetTheirBaseKey(message.GetBaseKey());
if (!sessionRecord.IsFresh())
{
sessionRecord.ArchiveCurrentState();
}
RatchetingSession.InitializeSession(sessionRecord.GetSessionState(), message.GetMessageVersion(), parameters.Create());
sessionRecord.GetSessionState().SetLocalRegistrationId(identityKeyStore.GetLocalRegistrationId());
sessionRecord.GetSessionState().SetRemoteRegistrationId(message.GetRegistrationId());
sessionRecord.GetSessionState().SetAliceBaseKey(message.GetBaseKey().Serialize());
if (message.GetPreKeyId().ForceGetValue() != Medium.MAX_VALUE)
{
return(message.GetPreKeyId());
}
else
{
return(May <uint> .NoValue); // May.absent();
}
}
public void testRatchetingSessionAsBob()
{
byte[] bobPublic =
{
0x05, 0x2c, 0xb4, 0x97,
0x76, 0xb8, 0x77, 0x02,
0x05, 0x74, 0x5a, 0x3a,
0x6e, 0x24, 0xf5, 0x79,
0xcd, 0xb4, 0xba, 0x7a,
0x89, 0x04, 0x10, 0x05,
0x92, 0x8e, 0xbb, 0xad,
0xc9, 0xc0, 0x5a, 0xd4,
0x58
};
byte[] bobPrivate =
{
0xa1, 0xca, 0xb4, 0x8f,
0x7c, 0x89, 0x3f, 0xaf,
0xa9, 0x88, 0x0a, 0x28,
0xc3, 0xb4, 0x99, 0x9d,
0x28, 0xd6, 0x32, 0x95,
0x62, 0xd2, 0x7a, 0x4e,
0xa4, 0xe2, 0x2e, 0x9f,
0xf1, 0xbd, 0xd6, 0x5a
};
byte[] bobIdentityPublic =
{
0x05, 0xf1, 0xf4, 0x38,
0x74, 0xf6, 0x96, 0x69,
0x56, 0xc2, 0xdd, 0x47,
0x3f, 0x8f, 0xa1, 0x5a,
0xde, 0xb7, 0x1d, 0x1c,
0xb9, 0x91, 0xb2, 0x34,
0x16, 0x92, 0x32, 0x4c,
0xef, 0xb1, 0xc5, 0xe6,
0x26
};
byte[] bobIdentityPrivate =
{
0x48, 0x75, 0xcc, 0x69,
0xdd, 0xf8, 0xea, 0x07,
0x19, 0xec, 0x94, 0x7d,
0x61, 0x08, 0x11, 0x35,
0x86, 0x8d, 0x5f, 0xd8,
0x01, 0xf0, 0x2c, 0x02,
0x25, 0xe5, 0x16, 0xdf,
0x21, 0x56, 0x60, 0x5e
};
byte[] aliceBasePublic =
{
0x05, 0x47, 0x2d, 0x1f,
0xb1, 0xa9, 0x86, 0x2c,
0x3a, 0xf6, 0xbe, 0xac,
0xa8, 0x92, 0x02, 0x77,
0xe2, 0xb2, 0x6f, 0x4a,
0x79, 0x21, 0x3e, 0xc7,
0xc9, 0x06, 0xae, 0xb3,
0x5e, 0x03, 0xcf, 0x89,
0x50
};
byte[] aliceEphemeralPublic =
{
0x05, 0x6c, 0x3e, 0x0d,
0x1f, 0x52, 0x02, 0x83,
0xef, 0xcc, 0x55, 0xfc,
0xa5, 0xe6, 0x70, 0x75,
0xb9, 0x04, 0x00, 0x7f,
0x18, 0x81, 0xd1, 0x51,
0xaf, 0x76, 0xdf, 0x18,
0xc5, 0x1d, 0x29, 0xd3,
0x4b
};
byte[] aliceIdentityPublic =
{
0x05, 0xb4, 0xa8, 0x45,
0x56, 0x60, 0xad, 0xa6,
0x5b, 0x40, 0x10, 0x07,
0xf6, 0x15, 0xe6, 0x54,
0x04, 0x17, 0x46, 0x43,
0x2e, 0x33, 0x39, 0xc6,
0x87, 0x51, 0x49, 0xbc,
0xee, 0xfc, 0xb4, 0x2b,
0x4a
};
byte[] senderChain =
{
0xd2, 0x2f, 0xd5, 0x6d, 0x3f,
0xec, 0x81, 0x9c, 0xf4, 0xc3,
0xd5, 0x0c, 0x56, 0xed, 0xfb,
0x1c, 0x28, 0x0a, 0x1b, 0x31,
0x96, 0x45, 0x37, 0xf1, 0xd1,
0x61, 0xe1, 0xc9, 0x31, 0x48,
0xe3, 0x6b
};
IdentityKey bobIdentityKeyPublic = new IdentityKey(bobIdentityPublic, 0);
ECPrivateKey bobIdentityKeyPrivate = Curve.decodePrivatePoint(bobIdentityPrivate);
IdentityKeyPair bobIdentityKey = new IdentityKeyPair(bobIdentityKeyPublic, bobIdentityKeyPrivate);
ECPublicKey bobEphemeralPublicKey = Curve.decodePoint(bobPublic, 0);
ECPrivateKey bobEphemeralPrivateKey = Curve.decodePrivatePoint(bobPrivate);
ECKeyPair bobEphemeralKey = new ECKeyPair(bobEphemeralPublicKey, bobEphemeralPrivateKey);
ECKeyPair bobBaseKey = bobEphemeralKey;
ECPublicKey aliceBasePublicKey = Curve.decodePoint(aliceBasePublic, 0);
ECPublicKey aliceEphemeralPublicKey = Curve.decodePoint(aliceEphemeralPublic, 0);
IdentityKey aliceIdentityPublicKey = new IdentityKey(aliceIdentityPublic, 0);
BobAxolotlParameters parameters = BobAxolotlParameters.newBuilder()
.setOurIdentityKey(bobIdentityKey)
.setOurSignedPreKey(bobBaseKey)
.setOurRatchetKey(bobEphemeralKey)
.setOurOneTimePreKey(May <ECKeyPair> .NoValue)
.setTheirIdentityKey(aliceIdentityPublicKey)
.setTheirBaseKey(aliceBasePublicKey)
.create();
SessionState session = new SessionState();
RatchetingSession.initializeSession(session, 2, parameters);
Assert.AreEqual(session.getLocalIdentityKey(), bobIdentityKey.getPublicKey());
Assert.AreEqual(session.getRemoteIdentityKey(), aliceIdentityPublicKey);
CollectionAssert.AreEqual(session.getSenderChainKey().getKey(), senderChain);
}
