We are no longer offering accounts on this server. Consider https://gitlab.freedesktop.org/ as a place to host projects.

Magicsig.php 10.5 KB
Newer Older
James Walker's avatar
James Walker committed
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
<?php
/**
 * StatusNet - the distributed open-source microblogging tool
 * Copyright (C) 2010, StatusNet, Inc.
 *
 * A sample module to show best practices for StatusNet plugins
 *
 * PHP version 5
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Affero General Public License for more details.
 *
 * You should have received a copy of the GNU Affero General Public License
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.
 *
 * @package   StatusNet
 * @author    James Walker <james@status.net>
 * @copyright 2010 StatusNet, Inc.
 * @license   http://www.fsf.org/licensing/licenses/agpl-3.0.html AGPL 3.0
 * @link      http://status.net/
 */

30 31 32 33
if (!defined('STATUSNET')) {
    exit(1);
}

34 35
require_once 'Crypt/RSA.php';

36
class Magicsig extends Managed_DataObject
James Walker's avatar
James Walker committed
37
{
38
    const PUBLICKEYREL = 'magic-public-key';
39

mattl's avatar
mattl committed
40 41 42
    const DEFAULT_KEYLEN = 1024;
    const DEFAULT_SIGALG = 'RSA-SHA256';

43 44
    public $__table = 'magicsig';

45 46 47 48 49
    /**
     * Key to user.id/profile.id for the local user whose key we're storing.
     *
     * @var int
     */
50
    public $user_id;
51 52 53 54 55 56 57 58

    /**
     * Flattened string representation of the key pair; callers should
     * usually use $this->publicKey and $this->privateKey directly,
     * which hold live Crypt_RSA key objects.
     *
     * @var string
     */
James Walker's avatar
James Walker committed
59
    public $keypair;
60 61 62 63 64 65

    /**
     * Crypto algorithm used for this key; currently only RSA-SHA256 is supported.
     *
     * @var string
     */
66
    public $alg;
67

68 69 70 71 72
    /**
     * Public RSA key; gets serialized in/out via $this->keypair string.
     *
     * @var Crypt_RSA
     */
James Walker's avatar
James Walker committed
73
    public $publicKey;
74 75 76 77 78 79

    /**
     * PrivateRSA key; gets serialized in/out via $this->keypair string.
     *
     * @var Crypt_RSA
     */
James Walker's avatar
James Walker committed
80
    public $privateKey;
81

mattl's avatar
mattl committed
82
    public function __construct($alg=self::DEFAULT_SIGALG)
83 84 85
    {
        $this->alg = $alg;
    }
86

87 88 89 90 91 92 93 94 95 96
    /**
     * Fetch a Magicsig object from the cache or database on a field match.
     *
     * @param string $k
     * @param mixed $v
     * @return Magicsig
     */
    static function getKV($k, $v=null)
    {
        $obj =  parent::getKV($k, $v);
97
        if ($obj instanceof Magicsig) {
mattl's avatar
mattl committed
98
            $obj->importKeys(); // Loads Crypt_RSA objects etc.
99

mattl's avatar
mattl committed
100
            // Throw out a big fat warning for keys of less than 1024 bits. (
101 102 103
            // The only case these show up in would be imported or
            // legacy very-old-StatusNet generated keypairs.
            if (strlen($obj->publicKey->modulus->toBits()) < 1024) {
mattl's avatar
mattl committed
104
                common_log(LOG_WARNING, sprintf('Salmon key with <1024 bits (%d) belongs to profile with id==%d',
105
                                            strlen($obj->publicKey->modulus->toBits()),
mattl's avatar
mattl committed
106
                                            $obj->user_id));
107 108 109 110 111 112
            }
        }

        return $obj;
    }

113
    public static function schemaDef()
James Walker's avatar
James Walker committed
114
    {
115
        return array(
116 117
            'fields' => array(
                'user_id' => array('type' => 'int', 'not null' => true, 'description' => 'user id'),
118
                'keypair' => array('type' => 'text', 'description' => 'keypair text representation'),
119 120 121 122
                'alg' => array('type' => 'varchar', 'length' => 64, 'description' => 'algorithm'),
            ),
            'primary key' => array('user_id'),
            'foreign keys' => array(
mattl's avatar
mattl committed
123
                'magicsig_user_id_fkey' => array('profile', array('user_id' => 'id')),
124
            ),
125
        );
James Walker's avatar
James Walker committed
126 127
    }

128 129 130 131 132 133 134 135
    /**
     * Save this keypair into the database.
     *
     * Overloads default insert behavior to encode the live key objects
     * as a flat string for storage.
     *
     * @return mixed
     */
136 137
    function insert()
    {
mattl's avatar
mattl committed
138
        $this->keypair = $this->toString(true);
139 140 141

        return parent::insert();
    }
James Walker's avatar
James Walker committed
142

143 144 145 146 147 148
    /**
     * Generate a new keypair for a local user and store in the database.
     *
     * Warning: this can be very slow on systems without the GMP module.
     * Runtimes of 20-30 seconds are not unheard-of.
     *
mattl's avatar
mattl committed
149 150 151
     * FIXME: More than 1024 bits please. But StatusNet _discards_ non-1024 bits,
     *        so we'll have to wait the last mohican out before switching defaults.
     *
152
     * @param User $user the local user (since we don't have remote private keys)
153
     */
mattl's avatar
mattl committed
154
    public static function generate(User $user, $bits=self::DEFAULT_KEYLEN, $alg=self::DEFAULT_SIGALG)
James Walker's avatar
James Walker committed
155
    {
mattl's avatar
mattl committed
156 157 158
        $magicsig = new Magicsig($alg);
        $magicsig->user_id = $user->id;

159
        $rsa = new Crypt_RSA();
160

161
        $keypair = $rsa->createKey($bits);
162

mattl's avatar
mattl committed
163 164 165 166 167
        $magicsig->privateKey = new Crypt_RSA();
        $magicsig->privateKey->loadKey($keypair['privatekey']);

        $magicsig->publicKey = new Crypt_RSA();
        $magicsig->publicKey->loadKey($keypair['publickey']);
168

mattl's avatar
mattl committed
169 170
        $magicsig->insert();        // will do $this->keypair = $this->toString(true);
        $magicsig->importKeys();    // seems it's necessary to re-read keys from text keypair
171

mattl's avatar
mattl committed
172
        return $magicsig;
James Walker's avatar
James Walker committed
173 174
    }

175 176 177
    /**
     * Encode the keypair or public key as a string.
     *
178
     * @param boolean $full_pair set to true to include the private key.
179 180
     * @return string
     */
mattl's avatar
mattl committed
181
    public function toString($full_pair=false, $base64url=true)
James Walker's avatar
James Walker committed
182
    {
mattl's avatar
mattl committed
183 184 185 186
        $base64_func = $base64url ? 'Magicsig::base64_url_encode' : 'base64_encode';
        $mod = call_user_func($base64_func, $this->publicKey->modulus->toBytes());
        $exp = call_user_func($base64_func, $this->publicKey->exponent->toBytes());

James Walker's avatar
James Walker committed
187
        $private_exp = '';
mattl's avatar
mattl committed
188
        if ($full_pair && $this->privateKey instanceof Crypt_RSA && $this->privateKey->exponent->toBytes()) {
mattl's avatar
mattl committed
189
            $private_exp = '.' . call_user_func($base64_func, $this->privateKey->exponent->toBytes());
James Walker's avatar
James Walker committed
190 191
        }

192
        return 'RSA.' . $mod . '.' . $exp . $private_exp;
James Walker's avatar
James Walker committed
193
    }
194

mattl's avatar
mattl committed
195 196 197 198 199 200
    public function toFingerprint()
    {
        // This assumes a specific behaviour from toString, to format as such:
        //    "RSA." + base64(pubkey.modulus_as_bytes) + "." + base64(pubkey.exponent_as_bytes)
        // We don't want the base64 string to be the "url encoding" version because it is not
        // as common in programming libraries. And we want it to be base64 encoded since ASCII
mattl's avatar
mattl committed
201 202
        // representation avoids any problems with NULL etc. in less forgiving languages and also
        // just easier to debug...
mattl's avatar
mattl committed
203 204 205
        return strtolower(hash('sha256', $this->toString(false, false)));
    }

206 207 208 209 210 211
    public function exportPublicKey($format=CRYPT_RSA_PUBLIC_FORMAT_PKCS1)
    {
        $this->publicKey->setPublicKey();
        return $this->publicKey->getPublicKey($format);
    }

mattl's avatar
mattl committed
212 213 214
    /**
     * importKeys will load the object's keypair string, which initiates
     * loadKey() and configures Crypt_RSA objects.
215 216
     *
     * @param string $keypair optional, otherwise the object's "keypair" property will be used
mattl's avatar
mattl committed
217
     */
218
    public function importKeys($keypair=null)
mattl's avatar
mattl committed
219
    {
220
        $this->keypair = $keypair===null ? $this->keypair : preg_replace('/\s+/', '', $keypair);
221

James Walker's avatar
James Walker committed
222
        // parse components
223
        if (!preg_match('/RSA\.([^\.]+)\.([^\.]+)(\.([^\.]+))?/', $this->keypair, $matches)) {
224
            common_debug('Magicsig error: RSA key not found in provided string.');
mattl's avatar
mattl committed
225
            throw new ServerException('RSA key not found in keypair string.');
James Walker's avatar
James Walker committed
226
        }
227

228 229
        $mod = $matches[1];
        $exp = $matches[2];
230
        if (!empty($matches[4])) {
231
            $private_exp = $matches[4];
232 233
        } else {
            $private_exp = false;
James Walker's avatar
James Walker committed
234 235
        }

mattl's avatar
mattl committed
236
        $this->loadKey($mod, $exp, 'public');
James Walker's avatar
James Walker committed
237
        if ($private_exp) {
mattl's avatar
mattl committed
238
            $this->loadKey($mod, $private_exp, 'private');
James Walker's avatar
James Walker committed
239 240 241
        }
    }

242 243 244 245 246 247 248 249
    /**
     * Fill out $this->privateKey or $this->publicKey with a Crypt_RSA object
     * representing the give key (as mod/exponent pair).
     *
     * @param string $mod base64-encoded
     * @param string $exp base64-encoded exponent
     * @param string $type one of 'public' or 'private'
     */
250 251
    public function loadKey($mod, $exp, $type = 'public')
    {
252
        $rsa = new Crypt_RSA();
253
        $rsa->setSignatureMode(CRYPT_RSA_SIGNATURE_PKCS1);
254
        $rsa->setHash($this->getHash());
255
        $rsa->modulus = new Math_BigInteger(Magicsig::base64_url_decode($mod), 256);
256
        $rsa->k = strlen($rsa->modulus->toBytes());
257
        $rsa->exponent = new Math_BigInteger(Magicsig::base64_url_decode($exp), 256);
258 259 260 261 262 263 264

        if ($type == 'private') {
            $this->privateKey = $rsa;
        } else {
            $this->publicKey = $rsa;
        }
    }
265

266 267 268 269 270
    /**
     * Returns the name of the crypto algorithm used for this key.
     *
     * @return string
     */
James Walker's avatar
James Walker committed
271 272
    public function getName()
    {
James Walker's avatar
er typo  
James Walker committed
273
        return $this->alg;
James Walker's avatar
James Walker committed
274 275
    }

276 277 278 279 280
    /**
     * Returns the name of a hash function to use for signing with this key.
     *
     * @return string
     */
281 282 283 284
    public function getHash()
    {
        switch ($this->alg) {
        case 'RSA-SHA256':
James Walker's avatar
James Walker committed
285
            return 'sha256';
286
        }
287
        throw new ServerException('Unknown or unsupported hash algorithm for Salmon');
288
    }
289

290 291 292 293 294
    /**
     * Generate base64-encoded signature for the given byte string
     * using our private key.
     *
     * @param string $bytes as raw byte string
295
     * @return string base64url-encoded signature
296
     */
James Walker's avatar
James Walker committed
297 298
    public function sign($bytes)
    {
299
        $sig = $this->privateKey->sign($bytes);
300 301 302
        if ($sig === false) {
            throw new ServerException('Could not sign data');
        }
303
        return Magicsig::base64_url_encode($sig);
James Walker's avatar
James Walker committed
304 305
    }

306 307 308
    /**
     *
     * @param string $signed_bytes as raw byte string
309
     * @param string $signature as base64url encoded
310 311
     * @return boolean
     */
James Walker's avatar
James Walker committed
312 313
    public function verify($signed_bytes, $signature)
    {
314
        $signature = self::base64_url_decode($signature);
315
        return $this->publicKey->verify($signed_bytes, $signature);
James Walker's avatar
James Walker committed
316 317
    }

318 319 320 321 322 323
    /**
     * URL-encoding-friendly base64 variant encoding.
     *
     * @param string $input
     * @return string
     */
324 325 326 327 328
    public static function base64_url_encode($input)
    {
        return strtr(base64_encode($input), '+/', '-_');
    }

329 330 331 332 333 334
    /**
     * URL-encoding-friendly base64 variant decoding.
     *
     * @param string $input
     * @return string
     */
335 336 337 338
    public static function base64_url_decode($input)
    {
        return base64_decode(strtr($input, '-_', '+/'));
    }
339
}