mirror of
https://github.com/ipfs/kubo.git
synced 2026-02-25 12:27:43 +08:00
c84a714b16
this is a major refactor of the entire codebase it changes the monolithic peer.Peer into using a peer.ID and a peer.Peerstore. Other changes: - removed handshake3. - testutil vastly simplified peer - secio bugfix + debugging logs - testutil: RandKeyPair - backpressure bugfix: w.o.w. - peer: added hex enc/dec - peer: added a PeerInfo struct PeerInfo is a small struct used to pass around a peer with a set of addresses and keys. This is not meant to be a complete view of the system, but rather to model updates to the peerstore. It is used by things like the routing system. - updated peer/queue + peerset - latency metrics - testutil: use crand for PeerID gen RandPeerID generates random "valid" peer IDs. it does not NEED to generate keys because it is as if we lost the key right away. fine to read some randomness and hash it. to generate proper keys and an ID, use: sk, pk, _ := testutil.RandKeyPair() id, _ := peer.IDFromPublicKey(pk) Also added RandPeerIDFatal helper - removed old spipe - updated seccat - core: cleanup initIdentity - removed old getFromPeerList
127 lines
2.7 KiB
Go
127 lines
2.7 KiB
Go
package crypto
|
|
|
|
import (
|
|
"crypto"
|
|
"crypto/rand"
|
|
"crypto/rsa"
|
|
"crypto/sha256"
|
|
"crypto/x509"
|
|
"errors"
|
|
|
|
proto "github.com/jbenet/go-ipfs/Godeps/_workspace/src/code.google.com/p/goprotobuf/proto"
|
|
|
|
pb "github.com/jbenet/go-ipfs/crypto/internal/pb"
|
|
)
|
|
|
|
type RsaPrivateKey struct {
|
|
sk *rsa.PrivateKey
|
|
pk *rsa.PublicKey
|
|
}
|
|
|
|
type RsaPublicKey struct {
|
|
k *rsa.PublicKey
|
|
}
|
|
|
|
func (pk *RsaPublicKey) Verify(data, sig []byte) (bool, error) {
|
|
hashed := sha256.Sum256(data)
|
|
err := rsa.VerifyPKCS1v15(pk.k, crypto.SHA256, hashed[:], sig)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
return true, nil
|
|
}
|
|
|
|
func (pk *RsaPublicKey) Bytes() ([]byte, error) {
|
|
b, err := x509.MarshalPKIXPublicKey(pk.k)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
pbmes := new(pb.PublicKey)
|
|
typ := pb.KeyType_RSA
|
|
pbmes.Type = &typ
|
|
pbmes.Data = b
|
|
return proto.Marshal(pbmes)
|
|
}
|
|
|
|
func (pk *RsaPublicKey) Encrypt(b []byte) ([]byte, error) {
|
|
return rsa.EncryptPKCS1v15(rand.Reader, pk.k, b)
|
|
}
|
|
|
|
// Equals checks whether this key is equal to another
|
|
func (pk *RsaPublicKey) Equals(k Key) bool {
|
|
return KeyEqual(pk, k)
|
|
}
|
|
|
|
func (pk *RsaPublicKey) Hash() ([]byte, error) {
|
|
return KeyHash(pk)
|
|
}
|
|
|
|
func (sk *RsaPrivateKey) GenSecret() []byte {
|
|
buf := make([]byte, 16)
|
|
rand.Read(buf)
|
|
return buf
|
|
}
|
|
|
|
func (sk *RsaPrivateKey) Sign(message []byte) ([]byte, error) {
|
|
hashed := sha256.Sum256(message)
|
|
return rsa.SignPKCS1v15(rand.Reader, sk.sk, crypto.SHA256, hashed[:])
|
|
}
|
|
|
|
func (sk *RsaPrivateKey) GetPublic() PubKey {
|
|
if sk.pk == nil {
|
|
sk.pk = &sk.sk.PublicKey
|
|
}
|
|
return &RsaPublicKey{sk.pk}
|
|
}
|
|
|
|
func (sk *RsaPrivateKey) Decrypt(b []byte) ([]byte, error) {
|
|
return rsa.DecryptPKCS1v15(rand.Reader, sk.sk, b)
|
|
}
|
|
|
|
func (sk *RsaPrivateKey) Bytes() ([]byte, error) {
|
|
b := x509.MarshalPKCS1PrivateKey(sk.sk)
|
|
pbmes := new(pb.PrivateKey)
|
|
typ := pb.KeyType_RSA
|
|
pbmes.Type = &typ
|
|
pbmes.Data = b
|
|
return proto.Marshal(pbmes)
|
|
}
|
|
|
|
// Equals checks whether this key is equal to another
|
|
func (sk *RsaPrivateKey) Equals(k Key) bool {
|
|
return KeyEqual(sk, k)
|
|
}
|
|
|
|
func (sk *RsaPrivateKey) Hash() ([]byte, error) {
|
|
return KeyHash(sk)
|
|
}
|
|
|
|
func UnmarshalRsaPrivateKey(b []byte) (*RsaPrivateKey, error) {
|
|
sk, err := x509.ParsePKCS1PrivateKey(b)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return &RsaPrivateKey{sk: sk}, nil
|
|
}
|
|
|
|
func MarshalRsaPrivateKey(k *RsaPrivateKey) []byte {
|
|
return x509.MarshalPKCS1PrivateKey(k.sk)
|
|
}
|
|
|
|
func UnmarshalRsaPublicKey(b []byte) (*RsaPublicKey, error) {
|
|
pub, err := x509.ParsePKIXPublicKey(b)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
pk, ok := pub.(*rsa.PublicKey)
|
|
if !ok {
|
|
return nil, errors.New("Not actually an rsa public key.")
|
|
}
|
|
return &RsaPublicKey{pk}, nil
|
|
}
|
|
|
|
func MarshalRsaPublicKey(k *RsaPublicKey) ([]byte, error) {
|
|
return x509.MarshalPKIXPublicKey(k.k)
|
|
}
|