473 lines
18 KiB
Python
473 lines
18 KiB
Python
# -*- coding: utf-8 -*-
|
|
#
|
|
# Copyright 2015 Bahtiar `kalkin-` Gadimov <bahtiar@gadimov.de>
|
|
#
|
|
# This file is part of Gajim-OMEMO plugin.
|
|
#
|
|
# The Gajim-OMEMO plugin is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by the Free
|
|
# Software Foundation, either version 3 of the License, or (at your option) any
|
|
# later version.
|
|
#
|
|
# Gajim-OMEMO is distributed in the hope that it will be useful, but WITHOUT ANY
|
|
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
|
|
# A PARTICULAR PURPOSE. See the GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License along with
|
|
# the Gajim-OMEMO plugin. If not, see <http://www.gnu.org/licenses/>.
|
|
#
|
|
|
|
import logging
|
|
import time
|
|
|
|
from nbxmpp.structs import OMEMOBundle
|
|
from nbxmpp.structs import OMEMOMessage
|
|
|
|
from axolotl.ecc.djbec import DjbECPublicKey
|
|
from axolotl.identitykey import IdentityKey
|
|
from axolotl.untrustedidentityexception import UntrustedIdentityException
|
|
|
|
from axolotl.protocol.prekeywhispermessage import PreKeyWhisperMessage
|
|
from axolotl.protocol.whispermessage import WhisperMessage
|
|
from axolotl.sessionbuilder import SessionBuilder
|
|
from axolotl.sessioncipher import SessionCipher
|
|
from axolotl.state.prekeybundle import PreKeyBundle
|
|
from axolotl.util.keyhelper import KeyHelper
|
|
|
|
from omemo.backend.aes import aes_decrypt, aes_encrypt
|
|
from .liteaxolotlstore import (LiteAxolotlStore, DEFAULT_PREKEY_AMOUNT,
|
|
MIN_PREKEY_AMOUNT, SPK_CYCLE_TIME,
|
|
SPK_ARCHIVE_TIME)
|
|
|
|
log = logging.getLogger('gajim.plugin_system.omemo')
|
|
|
|
|
|
UNTRUSTED = 0
|
|
TRUSTED = 1
|
|
UNDECIDED = 2
|
|
|
|
|
|
class OmemoState:
|
|
def __init__(self, own_jid, db_con, account, xmpp_con):
|
|
""" Instantiates an OmemoState object.
|
|
|
|
:param connection: an :py:class:`sqlite3.Connection`
|
|
"""
|
|
self.account = account
|
|
self.xmpp_con = xmpp_con
|
|
self.session_ciphers = {}
|
|
self.own_jid = own_jid
|
|
self.device_ids = {}
|
|
self.own_devices = []
|
|
self.store = LiteAxolotlStore(db_con)
|
|
self.encryption = self.store.encryptionStore
|
|
for jid, device_id in self.store.getActiveDeviceTuples():
|
|
if jid != own_jid:
|
|
self.add_device(jid, device_id)
|
|
else:
|
|
self.add_own_device(device_id)
|
|
|
|
log.info(self.account + ' => Roster devices after boot:' +
|
|
str(self.device_ids))
|
|
log.info(self.account + ' => Own devices after boot:' +
|
|
str(self.own_devices))
|
|
log.debug(self.account + ' => ' +
|
|
str(self.store.preKeyStore.getPreKeyCount()) +
|
|
' PreKeys available')
|
|
|
|
def build_session(self, recipient_id, device_id, bundle):
|
|
sessionBuilder = SessionBuilder(self.store, self.store, self.store,
|
|
self.store, recipient_id, device_id)
|
|
|
|
registration_id = self.store.getLocalRegistrationId()
|
|
|
|
prekey = bundle.pick_prekey()
|
|
preKeyPublic = DjbECPublicKey(prekey['key'][1:])
|
|
|
|
signedPreKeyPublic = DjbECPublicKey(bundle.spk['key'][1:])
|
|
identityKey = IdentityKey(DjbECPublicKey(bundle.ik[1:]))
|
|
|
|
prekey_bundle = PreKeyBundle(
|
|
registration_id, device_id,
|
|
prekey['id'], preKeyPublic,
|
|
bundle.spk['id'], signedPreKeyPublic,
|
|
bundle.spk_signature,
|
|
identityKey)
|
|
|
|
sessionBuilder.processPreKeyBundle(prekey_bundle)
|
|
return self.get_session_cipher(recipient_id, device_id)
|
|
|
|
def set_devices(self, name, devices):
|
|
""" Return a an.
|
|
|
|
Parameters
|
|
----------
|
|
jid : string
|
|
The contacts jid
|
|
|
|
devices: [int]
|
|
A list of devices
|
|
"""
|
|
|
|
self.device_ids[name] = devices
|
|
log.info(self.account + ' => Saved devices for ' + name)
|
|
|
|
def add_device(self, name, device_id):
|
|
if name not in self.device_ids:
|
|
self.device_ids[name] = [device_id]
|
|
elif device_id not in self.device_ids[name]:
|
|
self.device_ids[name].append(device_id)
|
|
|
|
def set_own_devices(self, devices):
|
|
""" Overwrite the current :py:attribute:`OmemoState.own_devices` with
|
|
the given devices.
|
|
|
|
Parameters
|
|
----------
|
|
devices : [int]
|
|
A list of device_ids
|
|
"""
|
|
self.own_devices = devices
|
|
log.info(self.account + ' => Saved own devices')
|
|
|
|
def add_own_device(self, device_id):
|
|
if device_id not in self.own_devices:
|
|
self.own_devices.append(device_id)
|
|
|
|
@property
|
|
def own_device_id(self):
|
|
reg_id = self.store.getLocalRegistrationId()
|
|
assert reg_id is not None, \
|
|
"Requested device_id but there is no generated"
|
|
|
|
return ((reg_id % 2147483646) + 1)
|
|
|
|
def own_device_id_published(self):
|
|
""" Return `True` only if own device id was added via
|
|
:py:method:`OmemoState.set_own_devices()`.
|
|
"""
|
|
return self.own_device_id in self.own_devices
|
|
|
|
@property
|
|
def bundle(self):
|
|
self.checkPreKeyAmount()
|
|
|
|
bundle = {'otpks': []}
|
|
for k in self.store.loadPreKeys():
|
|
key = k.getKeyPair().getPublicKey().serialize()
|
|
bundle['otpks'].append({'key': key, 'id': k.getId()})
|
|
|
|
identityKeyPair = self.store.getIdentityKeyPair()
|
|
bundle['ik'] = identityKeyPair.getPublicKey().serialize()
|
|
|
|
self.cycleSignedPreKey(identityKeyPair)
|
|
|
|
signedPreKey = self.store.loadSignedPreKey(
|
|
self.store.getCurrentSignedPreKeyId())
|
|
bundle['spk_signature'] = signedPreKey.getSignature()
|
|
bundle['spk'] = {'key': signedPreKey.getKeyPair().getPublicKey().serialize(),
|
|
'id': signedPreKey.getId()}
|
|
|
|
return OMEMOBundle(**bundle)
|
|
|
|
def decrypt_msg(self, omemo_message, jid):
|
|
own_id = self.own_device_id
|
|
if omemo_message.sid == own_id:
|
|
log.info('Received previously sent message by us')
|
|
return
|
|
if own_id not in omemo_message.keys:
|
|
log.warning('OMEMO message does not contain our device key')
|
|
return
|
|
|
|
encrypted_key, prekey = omemo_message.keys[own_id]
|
|
|
|
if prekey:
|
|
try:
|
|
key = self.handlePreKeyWhisperMessage(
|
|
jid, omemo_message.sid, encrypted_key)
|
|
except Exception as error:
|
|
log.warning(error)
|
|
return
|
|
|
|
else:
|
|
try:
|
|
key = self.handleWhisperMessage(
|
|
jid, omemo_message.sid, encrypted_key)
|
|
except Exception as error:
|
|
log.warning(error)
|
|
return
|
|
|
|
if omemo_message.payload is None:
|
|
result = None
|
|
log.debug("Decrypted Key Exchange Message")
|
|
else:
|
|
result = aes_decrypt(key, omemo_message.iv, omemo_message.payload)
|
|
log.debug("Decrypted Message => %s", result)
|
|
return result
|
|
|
|
def create_msg(self, from_jid, jid, plaintext):
|
|
encrypted_keys = {}
|
|
|
|
devices_list = self.device_list_for(jid)
|
|
if not devices_list:
|
|
log.error('No known devices')
|
|
return
|
|
|
|
result = aes_encrypt(plaintext)
|
|
|
|
# Encrypt the message key with for each of receivers devices
|
|
for device in devices_list:
|
|
try:
|
|
if self.isTrusted(jid, device) == TRUSTED:
|
|
cipher = self.get_session_cipher(jid, device)
|
|
cipher_key = cipher.encrypt(result.key)
|
|
prekey = isinstance(cipher_key, PreKeyWhisperMessage)
|
|
encrypted_keys[device] = (cipher_key.serialize(), prekey)
|
|
else:
|
|
log.debug('Skipped Device because Trust is: %s',
|
|
self.isTrusted(jid, device))
|
|
except Exception:
|
|
log.warning('Failed to find key for device: %s', device)
|
|
|
|
if not encrypted_keys:
|
|
log.error('Encrypted keys empty')
|
|
raise NoValidSessions('Encrypted keys empty')
|
|
|
|
my_other_devices = set(self.own_devices) - set({self.own_device_id})
|
|
# Encrypt the message key with for each of our own devices
|
|
for device in my_other_devices:
|
|
try:
|
|
if self.isTrusted(from_jid, device) == TRUSTED:
|
|
cipher = self.get_session_cipher(from_jid, device)
|
|
cipher_key = cipher.encrypt(result.key)
|
|
prekey = isinstance(cipher_key, PreKeyWhisperMessage)
|
|
encrypted_keys[device] = (cipher_key.serialize(), prekey)
|
|
else:
|
|
log.debug('Skipped own Device because Trust is: %s',
|
|
self.isTrusted(from_jid, device))
|
|
except Exception:
|
|
log.warning('Failed to find key for device: %s', device)
|
|
|
|
log.debug('Finished encrypting message')
|
|
return OMEMOMessage(sid=self.own_device_id,
|
|
keys=encrypted_keys,
|
|
iv=result.iv,
|
|
payload=result.payload)
|
|
|
|
def create_gc_msg(self, from_jid, jid, plaintext):
|
|
encrypted_keys = {}
|
|
room = jid
|
|
encrypted_jids = []
|
|
|
|
devices_list = self.device_list_for(jid, True)
|
|
|
|
result = aes_encrypt(plaintext, append_tag=True)
|
|
|
|
for tup in devices_list:
|
|
self.get_session_cipher(tup[0], tup[1])
|
|
|
|
# Encrypt the message key with for each of receivers devices
|
|
for nick in self.xmpp_con.groupchat[room]:
|
|
jid_to = self.xmpp_con.groupchat[room][nick]
|
|
if jid_to == self.own_jid:
|
|
continue
|
|
if jid_to in encrypted_jids: # We already encrypted to this JID
|
|
continue
|
|
if jid_to not in self.session_ciphers:
|
|
continue
|
|
for rid, cipher in self.session_ciphers[jid_to].items():
|
|
try:
|
|
if self.isTrusted(jid_to, rid) == TRUSTED:
|
|
cipher_key = cipher.encrypt(result.key)
|
|
prekey = isinstance(cipher_key, PreKeyWhisperMessage)
|
|
encrypted_keys[rid] = (cipher_key.serialize(), prekey)
|
|
else:
|
|
log.debug('Skipped Device because Trust is: %s',
|
|
self.isTrusted(jid_to, rid))
|
|
except Exception:
|
|
log.exception('ERROR:')
|
|
log.warning('Failed to find key for device %s', rid)
|
|
encrypted_jids.append(jid_to)
|
|
|
|
my_other_devices = set(self.own_devices) - set({self.own_device_id})
|
|
# Encrypt the message key with for each of our own devices
|
|
for dev in my_other_devices:
|
|
try:
|
|
cipher = self.get_session_cipher(from_jid, dev)
|
|
if self.isTrusted(from_jid, dev) == TRUSTED:
|
|
cipher_key = cipher.encrypt(result.key)
|
|
prekey = isinstance(cipher_key, PreKeyWhisperMessage)
|
|
encrypted_keys[dev] = (cipher_key.serialize(), prekey)
|
|
else:
|
|
log.debug('Skipped own Device because Trust is: %s',
|
|
self.isTrusted(from_jid, dev))
|
|
except Exception:
|
|
log.exception('ERROR:')
|
|
log.warning('Failed to find key for device: %s', dev)
|
|
|
|
if not encrypted_keys:
|
|
log.error('Encrypted keys empty')
|
|
raise NoValidSessions('Encrypted keys empty')
|
|
|
|
log.debug('Finished encrypting message')
|
|
return OMEMOMessage(sid=self.own_device_id,
|
|
keys=encrypted_keys,
|
|
iv=result.iv,
|
|
payload=result.payload)
|
|
|
|
def device_list_for(self, jid, gc=False):
|
|
""" Return a list of known device ids for the specified jid.
|
|
Parameters
|
|
----------
|
|
jid : string
|
|
The contacts jid
|
|
gc : bool
|
|
Groupchat Message
|
|
"""
|
|
if gc:
|
|
room = jid
|
|
devicelist = []
|
|
for nick in self.xmpp_con.groupchat[room]:
|
|
jid_to = self.xmpp_con.groupchat[room][nick]
|
|
if jid_to == self.own_jid:
|
|
continue
|
|
try:
|
|
for device in self.device_ids[jid_to]:
|
|
devicelist.append((jid_to, device))
|
|
except KeyError:
|
|
log.warning('no device ids found for %s', jid_to)
|
|
continue
|
|
return devicelist
|
|
|
|
if jid == self.own_jid:
|
|
return set(self.own_devices) - set({self.own_device_id})
|
|
if jid not in self.device_ids:
|
|
return set()
|
|
return set(self.device_ids[jid])
|
|
|
|
def isTrusted(self, recipient_id, device_id):
|
|
record = self.store.loadSession(recipient_id, device_id)
|
|
identity_key = record.getSessionState().getRemoteIdentityKey()
|
|
return self.store.isTrustedIdentity(recipient_id, identity_key)
|
|
|
|
def getTrustedFingerprints(self, recipient_id):
|
|
inactive = self.store.getInactiveSessionsKeys(recipient_id)
|
|
trusted = self.store.getTrustedFingerprints(recipient_id)
|
|
trusted = set(trusted) - set(inactive)
|
|
|
|
return trusted
|
|
|
|
def getUndecidedFingerprints(self, recipient_id):
|
|
inactive = self.store.getInactiveSessionsKeys(recipient_id)
|
|
undecided = self.store.getUndecidedFingerprints(recipient_id)
|
|
undecided = set(undecided) - set(inactive)
|
|
|
|
return undecided
|
|
|
|
def devices_without_sessions(self, jid):
|
|
""" List device_ids for the given jid which have no axolotl session.
|
|
|
|
Parameters
|
|
----------
|
|
jid : string
|
|
The contacts jid
|
|
|
|
Returns
|
|
-------
|
|
[int]
|
|
A list of device_ids
|
|
"""
|
|
known_devices = self.device_list_for(jid)
|
|
missing_devices = [dev
|
|
for dev in known_devices
|
|
if not self.store.containsSession(jid, dev)]
|
|
if missing_devices:
|
|
log.info(self.account + ' => Missing device sessions for ' +
|
|
jid + ': ' + str(missing_devices))
|
|
return missing_devices
|
|
|
|
def get_session_cipher(self, jid, device_id):
|
|
if jid not in self.session_ciphers:
|
|
self.session_ciphers[jid] = {}
|
|
|
|
if device_id not in self.session_ciphers[jid]:
|
|
cipher = SessionCipher(self.store, self.store, self.store,
|
|
self.store, jid, device_id)
|
|
self.session_ciphers[jid][device_id] = cipher
|
|
|
|
return self.session_ciphers[jid][device_id]
|
|
|
|
def handlePreKeyWhisperMessage(self, recipient_id, device_id, key):
|
|
preKeyWhisperMessage = PreKeyWhisperMessage(serialized=key)
|
|
if not preKeyWhisperMessage.getPreKeyId():
|
|
raise Exception("Received PreKeyWhisperMessage without PreKey =>" +
|
|
recipient_id)
|
|
sessionCipher = self.get_session_cipher(recipient_id, device_id)
|
|
try:
|
|
log.debug(self.account +
|
|
" => Received PreKeyWhisperMessage from " +
|
|
recipient_id)
|
|
key = sessionCipher.decryptPkmsg(preKeyWhisperMessage)
|
|
# Publish new bundle after PreKey has been used
|
|
# for building a new Session
|
|
self.xmpp_con.set_bundle()
|
|
self.add_device(recipient_id, device_id)
|
|
return key
|
|
except UntrustedIdentityException as e:
|
|
log.info(self.account + " => Received WhisperMessage " +
|
|
"from Untrusted Fingerprint! => " + e.getName())
|
|
|
|
def handleWhisperMessage(self, recipient_id, device_id, key):
|
|
whisperMessage = WhisperMessage(serialized=key)
|
|
log.debug(self.account + " => Received WhisperMessage from " +
|
|
recipient_id)
|
|
if self.isTrusted(recipient_id, device_id):
|
|
sessionCipher = self.get_session_cipher(recipient_id, device_id)
|
|
key = sessionCipher.decryptMsg(whisperMessage, textMsg=False)
|
|
self.add_device(recipient_id, device_id)
|
|
return key
|
|
else:
|
|
raise Exception("Received WhisperMessage "
|
|
"from Untrusted Fingerprint! => " + recipient_id)
|
|
|
|
def checkPreKeyAmount(self):
|
|
# Check if enough PreKeys are available
|
|
preKeyCount = self.store.preKeyStore.getPreKeyCount()
|
|
if preKeyCount < MIN_PREKEY_AMOUNT:
|
|
newKeys = DEFAULT_PREKEY_AMOUNT - preKeyCount
|
|
self.store.preKeyStore.generateNewPreKeys(newKeys)
|
|
log.info(self.account + ' => ' + str(newKeys) +
|
|
' PreKeys created')
|
|
|
|
def cycleSignedPreKey(self, identityKeyPair):
|
|
# Publish every SPK_CYCLE_TIME a new SignedPreKey
|
|
# Delete all exsiting SignedPreKeys that are older
|
|
# then SPK_ARCHIVE_TIME
|
|
|
|
# Check if SignedPreKey exist and create if not
|
|
if not self.store.getCurrentSignedPreKeyId():
|
|
signedPreKey = KeyHelper.generateSignedPreKey(
|
|
identityKeyPair, self.store.getNextSignedPreKeyId())
|
|
self.store.storeSignedPreKey(signedPreKey.getId(), signedPreKey)
|
|
log.debug(self.account +
|
|
' => New SignedPreKey created, because none existed')
|
|
|
|
# if SPK_CYCLE_TIME is reached, generate a new SignedPreKey
|
|
now = int(time.time())
|
|
timestamp = self.store.getSignedPreKeyTimestamp(
|
|
self.store.getCurrentSignedPreKeyId())
|
|
|
|
if int(timestamp) < now - SPK_CYCLE_TIME:
|
|
signedPreKey = KeyHelper.generateSignedPreKey(
|
|
identityKeyPair, self.store.getNextSignedPreKeyId())
|
|
self.store.storeSignedPreKey(signedPreKey.getId(), signedPreKey)
|
|
log.debug(self.account + ' => Cycled SignedPreKey')
|
|
|
|
# Delete all SignedPreKeys that are older than SPK_ARCHIVE_TIME
|
|
timestamp = now - SPK_ARCHIVE_TIME
|
|
self.store.removeOldSignedPreKeys(timestamp)
|
|
|
|
|
|
class NoValidSessions(Exception):
|
|
pass
|