241 lines
9.9 KiB
Java
241 lines
9.9 KiB
Java
/**
|
|
*
|
|
* Copyright 2018 Paul Schaub.
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
package org.jivesoftware.smackx.ox.crypto;
|
|
|
|
import java.io.ByteArrayOutputStream;
|
|
import java.io.IOException;
|
|
import java.io.InputStream;
|
|
import java.util.Collection;
|
|
import java.util.logging.Level;
|
|
import java.util.logging.Logger;
|
|
|
|
import org.jivesoftware.smack.SmackException.NoResponseException;
|
|
import org.jivesoftware.smack.SmackException.NotConnectedException;
|
|
import org.jivesoftware.smack.XMPPConnection;
|
|
import org.jivesoftware.smack.XMPPException.XMPPErrorException;
|
|
import org.jivesoftware.smack.util.Objects;
|
|
import org.jivesoftware.smack.util.stringencoder.Base64;
|
|
|
|
import org.jivesoftware.smackx.ox.OpenPgpContact;
|
|
import org.jivesoftware.smackx.ox.OpenPgpMessage;
|
|
import org.jivesoftware.smackx.ox.OpenPgpSelf;
|
|
import org.jivesoftware.smackx.ox.element.CryptElement;
|
|
import org.jivesoftware.smackx.ox.element.OpenPgpElement;
|
|
import org.jivesoftware.smackx.ox.element.SignElement;
|
|
import org.jivesoftware.smackx.ox.element.SigncryptElement;
|
|
import org.jivesoftware.smackx.ox.store.definition.OpenPgpStore;
|
|
import org.jivesoftware.smackx.pubsub.PubSubException.NotALeafNodeException;
|
|
import org.jivesoftware.smackx.pubsub.PubSubException.NotAPubSubNodeException;
|
|
|
|
import org.bouncycastle.openpgp.PGPException;
|
|
import org.bouncycastle.openpgp.PGPPublicKeyRing;
|
|
import org.bouncycastle.openpgp.PGPPublicKeyRingCollection;
|
|
import org.bouncycastle.util.io.Streams;
|
|
import org.pgpainless.PGPainless;
|
|
import org.pgpainless.algorithm.DocumentSignatureType;
|
|
import org.pgpainless.decryption_verification.DecryptionStream;
|
|
import org.pgpainless.decryption_verification.MissingPublicKeyCallback;
|
|
import org.pgpainless.decryption_verification.OpenPgpMetadata;
|
|
import org.pgpainless.encryption_signing.EncryptionOptions;
|
|
import org.pgpainless.encryption_signing.EncryptionStream;
|
|
import org.pgpainless.encryption_signing.ProducerOptions;
|
|
import org.pgpainless.encryption_signing.SigningOptions;
|
|
|
|
public class PainlessOpenPgpProvider implements OpenPgpProvider {
|
|
|
|
private static final Logger LOGGER = Logger.getLogger(PainlessOpenPgpProvider.class.getName());
|
|
|
|
private final OpenPgpStore store;
|
|
|
|
public PainlessOpenPgpProvider(OpenPgpStore store) {
|
|
this.store = Objects.requireNonNull(store);
|
|
}
|
|
|
|
@Override
|
|
public OpenPgpStore getStore() {
|
|
return store;
|
|
}
|
|
|
|
@Override
|
|
public OpenPgpElementAndMetadata signAndEncrypt(SigncryptElement element, OpenPgpSelf self, Collection<OpenPgpContact> recipients)
|
|
throws IOException, PGPException {
|
|
InputStream plainText = element.toInputStream();
|
|
ByteArrayOutputStream cipherText = new ByteArrayOutputStream();
|
|
|
|
EncryptionOptions encOpts = EncryptionOptions.encryptCommunications();
|
|
for (OpenPgpContact contact : recipients) {
|
|
PGPPublicKeyRingCollection keys = contact.getTrustedAnnouncedKeys();
|
|
if (keys == null) {
|
|
LOGGER.log(Level.WARNING, "There are no suitable keys for contact " + contact.getJid());
|
|
}
|
|
encOpts.addRecipients(keys);
|
|
}
|
|
|
|
encOpts.addRecipients(self.getTrustedAnnouncedKeys());
|
|
|
|
SigningOptions signOpts = new SigningOptions();
|
|
signOpts.addInlineSignature(getStore().getKeyRingProtector(), self.getSigningKeyRing(),
|
|
"xmpp:" + self.getJid().toString(), DocumentSignatureType.BINARY_DOCUMENT);
|
|
|
|
EncryptionStream cipherStream = PGPainless.encryptAndOrSign()
|
|
.onOutputStream(cipherText)
|
|
.withOptions(ProducerOptions
|
|
.signAndEncrypt(encOpts, signOpts)
|
|
.setAsciiArmor(false));
|
|
|
|
Streams.pipeAll(plainText, cipherStream);
|
|
plainText.close();
|
|
cipherStream.flush();
|
|
cipherStream.close();
|
|
cipherText.close();
|
|
|
|
String base64 = Base64.encodeToString(cipherText.toByteArray());
|
|
OpenPgpElement openPgpElement = new OpenPgpElement(base64);
|
|
|
|
return new OpenPgpElementAndMetadata(openPgpElement, cipherStream.getResult());
|
|
}
|
|
|
|
@Override
|
|
public OpenPgpElementAndMetadata sign(SignElement element, OpenPgpSelf self)
|
|
throws IOException, PGPException {
|
|
InputStream plainText = element.toInputStream();
|
|
ByteArrayOutputStream cipherText = new ByteArrayOutputStream();
|
|
|
|
EncryptionStream cipherStream = PGPainless.encryptAndOrSign()
|
|
.onOutputStream(cipherText)
|
|
.withOptions(ProducerOptions.sign(new SigningOptions()
|
|
.addInlineSignature(getStore().getKeyRingProtector(), self.getSigningKeyRing(),
|
|
"xmpp:" + self.getJid().toString(), DocumentSignatureType.BINARY_DOCUMENT)
|
|
).setAsciiArmor(false));
|
|
|
|
Streams.pipeAll(plainText, cipherStream);
|
|
plainText.close();
|
|
cipherStream.flush();
|
|
cipherStream.close();
|
|
cipherText.close();
|
|
|
|
String base64 = Base64.encodeToString(cipherText.toByteArray());
|
|
OpenPgpElement openPgpElement = new OpenPgpElement(base64);
|
|
|
|
return new OpenPgpElementAndMetadata(openPgpElement, cipherStream.getResult());
|
|
}
|
|
|
|
@Override
|
|
public OpenPgpElementAndMetadata encrypt(CryptElement element, OpenPgpSelf self, Collection<OpenPgpContact> recipients)
|
|
throws IOException, PGPException {
|
|
InputStream plainText = element.toInputStream();
|
|
ByteArrayOutputStream cipherText = new ByteArrayOutputStream();
|
|
|
|
EncryptionOptions encOpts = EncryptionOptions.encryptCommunications();
|
|
for (OpenPgpContact contact : recipients) {
|
|
PGPPublicKeyRingCollection keys = contact.getTrustedAnnouncedKeys();
|
|
if (keys == null) {
|
|
LOGGER.log(Level.WARNING, "There are no suitable keys for contact " + contact.getJid());
|
|
}
|
|
encOpts.addRecipients(keys);
|
|
}
|
|
|
|
encOpts.addRecipients(self.getTrustedAnnouncedKeys());
|
|
|
|
EncryptionStream cipherStream = PGPainless.encryptAndOrSign()
|
|
.onOutputStream(cipherText)
|
|
.withOptions(ProducerOptions
|
|
.encrypt(encOpts)
|
|
.setAsciiArmor(false)
|
|
);
|
|
|
|
Streams.pipeAll(plainText, cipherStream);
|
|
plainText.close();
|
|
cipherStream.flush();
|
|
cipherStream.close();
|
|
cipherText.close();
|
|
|
|
String base64 = Base64.encodeToString(cipherText.toByteArray());
|
|
OpenPgpElement openPgpElement = new OpenPgpElement(base64);
|
|
|
|
return new OpenPgpElementAndMetadata(openPgpElement, cipherStream.getResult());
|
|
}
|
|
|
|
@Override
|
|
public OpenPgpMessage decryptAndOrVerify(XMPPConnection connection, OpenPgpElement element, final OpenPgpSelf self, final OpenPgpContact sender) throws IOException, PGPException {
|
|
ByteArrayOutputStream plainText = new ByteArrayOutputStream();
|
|
InputStream cipherText = element.toInputStream();
|
|
|
|
PGPPublicKeyRingCollection announcedPublicKeys = sender.getAnnouncedPublicKeys();
|
|
if (announcedPublicKeys == null) {
|
|
try {
|
|
sender.updateKeys(connection);
|
|
announcedPublicKeys = sender.getAnnouncedPublicKeys();
|
|
} catch (InterruptedException | NotALeafNodeException | NotAPubSubNodeException | NotConnectedException
|
|
| NoResponseException | XMPPErrorException e) {
|
|
throw new PGPException("Abort decryption due to lack of keys", e);
|
|
}
|
|
}
|
|
|
|
MissingPublicKeyCallback missingPublicKeyCallback = new MissingPublicKeyCallback() {
|
|
|
|
@Override
|
|
public PGPPublicKeyRing onMissingPublicKeyEncountered(Long keyId) {
|
|
try {
|
|
sender.updateKeys(connection);
|
|
PGPPublicKeyRingCollection anyKeys = sender.getAnyPublicKeys();
|
|
for (PGPPublicKeyRing ring : anyKeys) {
|
|
if (ring.getPublicKey(keyId) != null) {
|
|
return ring;
|
|
}
|
|
}
|
|
return null;
|
|
} catch (InterruptedException | NotALeafNodeException | NotAPubSubNodeException | NotConnectedException
|
|
| NoResponseException | XMPPErrorException | IOException | PGPException e) {
|
|
LOGGER.log(Level.WARNING, "Cannot fetch missing key " + keyId, e);
|
|
return null;
|
|
}
|
|
}
|
|
};
|
|
|
|
DecryptionStream cipherStream = PGPainless.decryptAndOrVerify()
|
|
.onInputStream(cipherText)
|
|
.decryptWith(getStore().getKeyRingProtector(), self.getSecretKeys())
|
|
.verifyWith(announcedPublicKeys)
|
|
.handleMissingPublicKeysWith(missingPublicKeyCallback)
|
|
.build();
|
|
|
|
Streams.pipeAll(cipherStream, plainText);
|
|
|
|
cipherText.close();
|
|
cipherStream.close();
|
|
plainText.close();
|
|
|
|
OpenPgpMetadata info = cipherStream.getResult();
|
|
|
|
OpenPgpMessage.State state;
|
|
if (info.isSigned()) {
|
|
if (info.isEncrypted()) {
|
|
state = OpenPgpMessage.State.signcrypt;
|
|
} else {
|
|
state = OpenPgpMessage.State.sign;
|
|
}
|
|
} else if (info.isEncrypted()) {
|
|
state = OpenPgpMessage.State.crypt;
|
|
} else {
|
|
throw new PGPException("Received message appears to be neither encrypted, nor signed.");
|
|
}
|
|
|
|
return new OpenPgpMessage(plainText.toByteArray(), state, info);
|
|
}
|
|
}
|