libervia-backend: sat/plugins/plugin_xep

annotate sat/plugins/plugin_xep_0448.py @ 4005:54a6b44f173b

component AP gateway: reset stream position after getting payload: the stream position needs to be reset, as the body may be read again to compute signature hash.

author	Goffi <goffi@goffi.org>
date	Thu, 16 Mar 2023 12:28:52 +0100
parents	e345d93fb6e5
children	78b5f356900c

rev	line source
3927 328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	1 #!/usr/bin/env python3
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	2
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	3 # Libervia plugin for handling stateless file sharing encryption
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	4 # Copyright (C) 2009-2022 Jérôme Poisson (goffi@goffi.org)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	5
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	6 # This program is free software: you can redistribute it and/or modify
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	7 # it under the terms of the GNU Affero General Public License as published by
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	8 # the Free Software Foundation, either version 3 of the License, or
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	9 # (at your option) any later version.
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	10
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	11 # This program is distributed in the hope that it will be useful,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	12 # but WITHOUT ANY WARRANTY; without even the implied warranty of
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	14 # GNU Affero General Public License for more details.
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	15
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	16 # You should have received a copy of the GNU Affero General Public License
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	17 # along with this program. If not, see <http://www.gnu.org/licenses/>.
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	18
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	19 import base64
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	20 from functools import partial
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	21 from pathlib import Path
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	22 import secrets
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	23 from textwrap import dedent
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	24 from typing import Any, Dict, Optional, Tuple, Union
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	25
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	26 from cryptography.exceptions import AlreadyFinalized
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	27 from cryptography.hazmat import backends
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	28 from cryptography.hazmat.primitives import ciphers
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	29 from cryptography.hazmat.primitives.ciphers import CipherContext, modes
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	30 from cryptography.hazmat.primitives.padding import PKCS7, PaddingContext
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	31 import treq
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	32 from twisted.internet import defer
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	33 from twisted.words.protocols.jabber.xmlstream import XMPPHandler
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	34 from twisted.words.xish import domish
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	35 from wokkel import disco, iwokkel
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	36 from zope.interface import implementer
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	37
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	38 from sat.core import exceptions
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	39 from sat.core.constants import Const as C
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	40 from sat.core.core_types import SatXMPPEntity
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	41 from sat.core.i18n import _
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	42 from sat.core.log import getLogger
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	43 from sat.tools import stream
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	44 from sat.tools.web import treq_client_no_ssl
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	45
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	46 log = getLogger(__name__)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	47
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	48 IMPORT_NAME = "XEP-0448"
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	49
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	50 PLUGIN_INFO = {
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	51 C.PI_NAME: "Encryption for Stateless File Sharing",
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	52 C.PI_IMPORT_NAME: IMPORT_NAME,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	53 C.PI_TYPE: C.PLUG_TYPE_EXP,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	54 C.PI_PROTOCOLS: ["XEP-0448"],
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	55 C.PI_DEPENDENCIES: [
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	56 "XEP-0103", "XEP-0300", "XEP-0334", "XEP-0363", "XEP-0384", "XEP-0447",
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	57 "DOWNLOAD", "ATTACH"
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	58 ],
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	59 C.PI_MAIN: "XEP_0448",
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	60 C.PI_HANDLER: "yes",
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	61 C.PI_DESCRIPTION: dedent(_("""\
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	62 Implementation of e2e encryption for media sharing
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	63 """)),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	64 }
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	65
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	66 NS_ESFS = "urn:xmpp:esfs:0"
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	67 NS_AES_128_GCM = "urn:xmpp:ciphers:aes-128-gcm-nopadding:0"
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	68 NS_AES_256_GCM = "urn:xmpp:ciphers:aes-256-gcm-nopadding:0"
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	69 NS_AES_256_CBC = "urn:xmpp:ciphers:aes-256-cbc-pkcs7:0"
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	70
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	71
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	72 class XEP_0448:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	73
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	74 def __init__(self, host):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	75 self.host = host
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	76 log.info(_("XEP_0448 plugin initialization"))
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	77 host.registerNamespace("esfs", NS_ESFS)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	78 self._u = host.plugins["XEP-0103"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	79 self._h = host.plugins["XEP-0300"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	80 self._hints = host.plugins["XEP-0334"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	81 self._http_upload = host.plugins["XEP-0363"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	82 self._o = host.plugins["XEP-0384"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	83 self._sfs = host.plugins["XEP-0447"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	84 self._sfs.register_source_handler(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	85 NS_ESFS, "encrypted", self.parse_encrypted_elt, encrypted=True
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	86 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	87 self._attach = host.plugins["ATTACH"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	88 self._attach.register(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	89 self.can_handle_attachment, self.attach, encrypted=True, priority=1000
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	90 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	91 host.plugins["DOWNLOAD"].register_download_handler(NS_ESFS, self.download)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	92 host.trigger.add("XEP-0363_upload_pre_slot", self._upload_pre_slot)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	93 host.trigger.add("XEP-0363_upload", self._upload_trigger)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	94
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	95 def getHandler(self, client):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	96 return XEP0448Handler()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	97
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	98 def parse_encrypted_elt(self, encrypted_elt: domish.Element) -> Dict[str, Any]:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	99 """Parse an <encrypted> element and return corresponding source data
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	100
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	101 @param encrypted_elt: element to parse
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	102 @raise exceptions.DataError: the element is invalid
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	103
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	104 """
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	105 sources = self._sfs.parse_sources_elt(encrypted_elt)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	106 if not sources:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	107 raise exceptions.NotFound("sources are missing in {encrypted_elt.toXml()}")
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	108 if len(sources) > 1:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	109 log.debug(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	110 "more that one sources has been found, this is not expected, only the "
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	111 "first one will be used"
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	112 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	113 source = sources[0]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	114 source["type"] = NS_ESFS
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	115 try:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	116 encrypted_data = source["encrypted_data"] = {
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	117 "cipher": encrypted_elt["cipher"],
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	118 "key": str(next(encrypted_elt.elements(NS_ESFS, "key"))),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	119 "iv": str(next(encrypted_elt.elements(NS_ESFS, "iv"))),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	120 }
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	121 except (KeyError, StopIteration):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	122 raise exceptions.DataError(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	123 "invalid <encrypted/> element: {encrypted_elt.toXml()}"
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	124 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	125 try:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	126 hash_algo, hash_value = self._h.parseHashElt(encrypted_elt)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	127 except exceptions.NotFound:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	128 pass
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	129 else:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	130 encrypted_data["hash_algo"] = hash_algo
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	131 encrypted_data["hash"] = base64.b64encode(hash_value.encode()).decode()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	132 return source
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	133
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	134 async def download(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	135 self,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	136 client: SatXMPPEntity,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	137 attachment: Dict[str, Any],
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	138 source: Dict[str, Any],
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	139 dest_path: Union[Path, str],
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	140 extra: Optional[Dict[str, Any]] = None
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	141 ) -> Tuple[str, defer.Deferred]:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	142 # TODO: check hash
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	143 if extra is None:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	144 extra = {}
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	145 try:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	146 encrypted_data = source["encrypted_data"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	147 cipher = encrypted_data["cipher"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	148 iv = base64.b64decode(encrypted_data["iv"])
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	149 key = base64.b64decode(encrypted_data["key"])
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	150 except KeyError as e:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	151 raise ValueError(f"{source} has incomplete encryption data: {e}")
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	152 try:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	153 download_url = source["url"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	154 except KeyError:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	155 raise ValueError(f"{source} has missing URL")
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	156
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	157 if extra.get('ignore_tls_errors', False):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	158 log.warning(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	159 "TLS certificate check disabled, this is highly insecure"
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	160 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	161 treq_client = treq_client_no_ssl
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	162 else:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	163 treq_client = treq
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	164
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	165 try:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	166 file_size = int(attachment["size"])
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	167 except (KeyError, ValueError):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	168 head_data = await treq_client.head(download_url)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	169 content_length = int(head_data.headers.getRawHeaders('content-length')[0])
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	170 # the 128 bits tag is put at the end
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	171 file_size = content_length - 16
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	172
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	173 file_obj = stream.SatFile(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	174 self.host,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	175 client,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	176 dest_path,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	177 mode="wb",
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	178 size = file_size,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	179 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	180
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	181 if cipher in (NS_AES_128_GCM, NS_AES_256_GCM):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	182 decryptor = ciphers.Cipher(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	183 ciphers.algorithms.AES(key),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	184 modes.GCM(iv),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	185 backend=backends.default_backend(),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	186 ).decryptor()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	187 decrypt_cb = partial(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	188 self.gcm_decrypt,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	189 client=client,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	190 file_obj=file_obj,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	191 decryptor=decryptor,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	192 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	193 finalize_cb = None
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	194 elif cipher == NS_AES_256_CBC:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	195 cipher_algo = ciphers.algorithms.AES(key)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	196 decryptor = ciphers.Cipher(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	197 cipher_algo,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	198 modes.CBC(iv),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	199 backend=backends.default_backend(),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	200 ).decryptor()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	201 unpadder = PKCS7(cipher_algo.block_size).unpadder()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	202 decrypt_cb = partial(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	203 self.cbc_decrypt,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	204 client=client,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	205 file_obj=file_obj,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	206 decryptor=decryptor,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	207 unpadder=unpadder
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	208 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	209 finalize_cb = partial(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	210 self.cbc_decrypt_finalize,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	211 file_obj=file_obj,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	212 decryptor=decryptor,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	213 unpadder=unpadder
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	214 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	215 else:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	216 msg = f"cipher {cipher!r} is not supported"
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	217 file_obj.close(error=msg)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	218 log.warning(msg)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	219 raise exceptions.CancelError(msg)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	220
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	221 progress_id = file_obj.uid
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	222
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	223 resp = await treq_client.get(download_url, unbuffered=True)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	224 if resp.code == 200:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	225 d = treq.collect(resp, partial(decrypt_cb))
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	226 if finalize_cb is not None:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	227 d.addCallback(lambda __: finalize_cb())
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	228 else:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	229 d = defer.Deferred()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	230 self.host.plugins["DOWNLOAD"].errback_download(file_obj, d, resp)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	231 return progress_id, d
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	232
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	233 async def can_handle_attachment(self, client, data):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	234 # FIXME: check if SCE is supported without checking which e2ee algo is used
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	235 if client.encryption.get_namespace(data["to"]) != self._o.NS_TWOMEMO:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	236 # we need SCE, and it is currently supported only by TWOMEMO, thus we can't
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	237 # handle the attachment if it's not activated
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	238 return False
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	239 try:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	240 await self._http_upload.getHTTPUploadEntity(client)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	241 except exceptions.NotFound:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	242 return False
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	243 else:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	244 return True
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	245
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	246 async def _upload_cb(self, client, filepath, filename, extra):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	247 attachment = extra["attachment"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	248 extra["encryption"] = IMPORT_NAME
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	249 attachment["encryption_data"] = extra["encryption_data"] = {
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	250 "algorithm": C.ENC_AES_GCM,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	251 "iv": secrets.token_bytes(12),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	252 "key": secrets.token_bytes(32),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	253 }
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	254 attachment["filename"] = filename
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	255 return await self._http_upload.file_http_upload(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	256 client=client,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	257 filepath=filepath,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	258 filename="encrypted",
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	259 extra=extra
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	260 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	261
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	262 async def attach(self, client, data):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	263 # XXX: for now, XEP-0447/XEP-0448 only allow to send one file per <message/>, thus
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	264 # we need to send each file in a separate message, in the same way as for
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	265 # plugin_sec_aesgcm.
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	266 attachments = data["extra"][C.MESS_KEY_ATTACHMENTS]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	267 if not data['message'] or data['message'] == {'': ''}:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	268 extra_attachments = attachments[1:]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	269 del attachments[1:]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	270 else:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	271 # we have a message, we must send first attachment separately
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	272 extra_attachments = attachments[:]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	273 attachments.clear()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	274 del data["extra"][C.MESS_KEY_ATTACHMENTS]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	275
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	276 if attachments:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	277 if len(attachments) > 1:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	278 raise exceptions.InternalError(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	279 "There should not be more that one attachment at this point"
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	280 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	281 await self._attach.upload_files(client, data, upload_cb=self._upload_cb)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	282 self._hints.addHintElements(data["xml"], [self._hints.HINT_STORE])
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	283 for attachment in attachments:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	284 encryption_data = attachment.pop("encryption_data")
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	285 file_hash = (attachment["hash_algo"], attachment["hash"])
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	286 file_sharing_elt = self._sfs.get_file_sharing_elt(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	287 [],
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	288 name=attachment["filename"],
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	289 size=attachment["size"],
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	290 file_hash=file_hash
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	291 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	292 encrypted_elt = file_sharing_elt.sources.addElement(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	293 (NS_ESFS, "encrypted")
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	294 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	295 encrypted_elt["cipher"] = NS_AES_256_GCM
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	296 encrypted_elt.addElement(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	297 "key",
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	298 content=base64.b64encode(encryption_data["key"]).decode()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	299 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	300 encrypted_elt.addElement(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	301 "iv",
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	302 content=base64.b64encode(encryption_data["iv"]).decode()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	303 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	304 encrypted_elt.addChild(self._h.buildHashElt(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	305 attachment["encrypted_hash"],
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	306 attachment["encrypted_hash_algo"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	307 ))
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	308 encrypted_elt.addChild(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	309 self._sfs.get_sources_elt(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	310 [self._u.get_url_data_elt(attachment["url"])]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	311 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	312 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	313 data["xml"].addChild(file_sharing_elt)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	314
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	315 for attachment in extra_attachments:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	316 # we send all remaining attachment in a separate message
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	317 await client.sendMessage(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	318 to_jid=data['to'],
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	319 message={'': ''},
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	320 subject=data['subject'],
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	321 mess_type=data['type'],
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	322 extra={C.MESS_KEY_ATTACHMENTS: [attachment]},
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	323 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	324
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	325 if ((not data['extra']
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	326 and (not data['message'] or data['message'] == {'': ''})
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	327 and not data['subject'])):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	328 # nothing left to send, we can cancel the message
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	329 raise exceptions.CancelError("Cancelled by XEP_0448 attachment handling")
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	330
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	331 def gcm_decrypt(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	332 self,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	333 data: bytes,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	334 client: SatXMPPEntity,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	335 file_obj: stream.SatFile,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	336 decryptor: CipherContext
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	337 ) -> None:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	338 if file_obj.tell() + len(data) > file_obj.size: # type: ignore
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	339 # we're reaching end of file with this bunch of data
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	340 # we may still have a last bunch if the tag is incomplete
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	341 bytes_left = file_obj.size - file_obj.tell() # type: ignore
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	342 if bytes_left > 0:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	343 decrypted = decryptor.update(data[:bytes_left])
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	344 file_obj.write(decrypted)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	345 tag = data[bytes_left:]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	346 else:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	347 tag = data
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	348 if len(tag) < 16:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	349 # the tag is incomplete, either we'll get the rest in next data bunch
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	350 # or we have already the other part from last bunch of data
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	351 try:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	352 # we store partial tag in decryptor._sat_tag
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	353 tag = decryptor._sat_tag + tag
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	354 except AttributeError:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	355 # no other part, we'll get the rest at next bunch
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	356 decryptor.sat_tag = tag
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	357 else:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	358 # we have the complete tag, it must be 128 bits
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	359 if len(tag) != 16:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	360 raise ValueError(f"Invalid tag: {tag}")
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	361 remain = decryptor.finalize_with_tag(tag)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	362 file_obj.write(remain)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	363 file_obj.close()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	364 else:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	365 decrypted = decryptor.update(data)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	366 file_obj.write(decrypted)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	367
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	368 def cbc_decrypt(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	369 self,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	370 data: bytes,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	371 client: SatXMPPEntity,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	372 file_obj: stream.SatFile,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	373 decryptor: CipherContext,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	374 unpadder: PaddingContext
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	375 ) -> None:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	376 decrypted = decryptor.update(data)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	377 file_obj.write(unpadder.update(decrypted))
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	378
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	379 def cbc_decrypt_finalize(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	380 self,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	381 file_obj: stream.SatFile,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	382 decryptor: CipherContext,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	383 unpadder: PaddingContext
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	384 ) -> None:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	385 decrypted = decryptor.finalize()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	386 file_obj.write(unpadder.update(decrypted))
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	387 file_obj.write(unpadder.finalize())
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	388 file_obj.close()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	389
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	390 def _upload_pre_slot(self, client, extra, file_metadata):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	391 if extra.get('encryption') != IMPORT_NAME:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	392 return True
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	393 # the tag is appended to the file
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	394 file_metadata["size"] += 16
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	395 return True
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	396
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	397 def _encrypt(self, data: bytes, encryptor: CipherContext, attachment: dict) -> bytes:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	398 if data:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	399 attachment["hasher"].update(data)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	400 ret = encryptor.update(data)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	401 attachment["encrypted_hasher"].update(ret)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	402 return ret
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	403 else:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	404 try:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	405 # end of file is reached, me must finalize
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	406 fin = encryptor.finalize()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	407 tag = encryptor.tag
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	408 ret = fin + tag
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	409 hasher = attachment.pop("hasher")
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	410 attachment["hash"] = hasher.hexdigest()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	411 encrypted_hasher = attachment.pop("encrypted_hasher")
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	412 encrypted_hasher.update(ret)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	413 attachment["encrypted_hash"] = encrypted_hasher.hexdigest()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	414 return ret
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	415 except AlreadyFinalized:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	416 # as we have already finalized, we can now send EOF
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	417 return b''
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	418
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	419 def _upload_trigger(self, client, extra, sat_file, file_producer, slot):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	420 if extra.get('encryption') != IMPORT_NAME:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	421 return True
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	422 attachment = extra["attachment"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	423 encryption_data = extra["encryption_data"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	424 log.debug("encrypting file with AES-GCM")
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	425 iv = encryption_data["iv"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	426 key = encryption_data["key"]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	427
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	428 # encrypted data size will be bigger than original file size
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	429 # so we need to check with final data length to avoid a warning on close()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	430 sat_file.check_size_with_read = True
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	431
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	432 # file_producer get length directly from file, and this cause trouble as
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	433 # we have to change the size because of encryption. So we adapt it here,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	434 # else the producer would stop reading prematurely
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	435 file_producer.length = sat_file.size
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	436
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	437 encryptor = ciphers.Cipher(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	438 ciphers.algorithms.AES(key),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	439 modes.GCM(iv),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	440 backend=backends.default_backend(),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	441 ).encryptor()
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	442
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	443 if sat_file.data_cb is not None:
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	444 raise exceptions.InternalError(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	445 f"data_cb was expected to be None, it is set to {sat_file.data_cb}")
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	446
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	447 attachment.update({
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	448 "hash_algo": self._h.ALGO_DEFAULT,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	449 "hasher": self._h.getHasher(),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	450 "encrypted_hash_algo": self._h.ALGO_DEFAULT,
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	451 "encrypted_hasher": self._h.getHasher(),
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	452 })
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	453
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	454 # with data_cb we encrypt the file on the fly
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	455 sat_file.data_cb = partial(
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	456 self._encrypt, encryptor=encryptor, attachment=attachment
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	457 )
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	458 return True
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	459
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	460
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	461 @implementer(iwokkel.IDisco)
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	462 class XEP0448Handler(XMPPHandler):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	463
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	464 def getDiscoInfo(self, requestor, target, nodeIdentifier=""):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	465 return [disco.DiscoFeature(NS_ESFS)]
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	466
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	467 def getDiscoItems(self, requestor, target, nodeIdentifier=""):
328869756cf4 plugin XEP-0448: Encryption for stateless file sharing implementation: Goffi <goffi@goffi.org> parents: diff changeset	468 return []

Mercurial > libervia-backend

annotate sat/plugins/plugin_xep_0448.py @ 4005:54a6b44f173b