i2pd/Garlic.cpp

685 lines
20 KiB
C++
Raw Normal View History

2013-11-24 01:35:15 +04:00
#include <inttypes.h>
#include "I2PEndian.h"
2013-11-24 01:35:15 +04:00
#include <map>
#include <string>
2016-05-11 22:12:38 +03:00
#include "Crypto.h"
2013-11-24 01:35:15 +04:00
#include "RouterContext.h"
2014-01-09 07:47:22 +04:00
#include "I2NPProtocol.h"
#include "Tunnel.h"
#include "TunnelPool.h"
#include "Transports.h"
2013-11-24 01:35:15 +04:00
#include "Timestamp.h"
2015-11-03 17:15:49 +03:00
#include "Log.h"
2013-11-24 01:35:15 +04:00
#include "Garlic.h"
namespace i2p
{
2013-11-25 03:10:27 +04:00
namespace garlic
{
2014-10-08 05:08:00 +04:00
GarlicRoutingSession::GarlicRoutingSession (GarlicDestination * owner,
2015-04-06 03:07:32 +03:00
std::shared_ptr<const i2p::data::RoutingDestination> destination, int numTags, bool attachLeaseSet):
2014-10-17 04:12:46 +04:00
m_Owner (owner), m_Destination (destination), m_NumTags (numTags),
2015-11-03 17:15:49 +03:00
m_LeaseSetUpdateStatus (attachLeaseSet ? eLeaseSetUpdated : eLeaseSetDoNotSend),
m_ElGamalEncryption (new i2p::crypto::ElGamalEncryption (destination->GetEncryptionPublicKey ()))
2013-11-24 01:35:15 +04:00
{
2014-01-17 17:12:57 +04:00
// create new session tags and session key
2015-11-03 17:15:49 +03:00
RAND_bytes (m_SessionKey, 32);
2014-05-12 06:37:33 +04:00
m_Encryption.SetKey (m_SessionKey);
2013-11-25 03:10:27 +04:00
}
2014-07-28 20:02:50 +04:00
GarlicRoutingSession::GarlicRoutingSession (const uint8_t * sessionKey, const SessionTag& sessionTag):
2015-04-06 03:07:32 +03:00
m_Owner (nullptr), m_Destination (nullptr), m_NumTags (1), m_LeaseSetUpdateStatus (eLeaseSetDoNotSend)
2014-07-28 19:54:34 +04:00
{
memcpy (m_SessionKey, sessionKey, 32);
m_Encryption.SetKey (m_SessionKey);
2014-10-17 04:12:46 +04:00
m_SessionTags.push_back (sessionTag);
2014-10-17 19:26:57 +04:00
m_SessionTags.back ().creationTime = i2p::util::GetSecondsSinceEpoch ();
2014-07-28 19:54:34 +04:00
}
2013-11-25 03:10:27 +04:00
GarlicRoutingSession::~GarlicRoutingSession ()
{
}
2016-02-11 06:51:08 +03:00
std::shared_ptr<GarlicRoutingPath> GarlicRoutingSession::GetSharedRoutingPath ()
{
if (!m_SharedRoutingPath) return nullptr;
uint32_t ts = i2p::util::GetSecondsSinceEpoch ();
2016-02-14 07:02:58 +03:00
if (m_SharedRoutingPath->numTimesUsed >= ROUTING_PATH_MAX_NUM_TIMES_USED ||
!m_SharedRoutingPath->outboundTunnel->IsEstablished () ||
2016-02-11 06:51:08 +03:00
ts*1000LL > m_SharedRoutingPath->remoteLease->endDate ||
ts > m_SharedRoutingPath->updateTime + ROUTING_PATH_EXPIRATION_TIMEOUT)
m_SharedRoutingPath = nullptr;
2016-02-14 07:02:58 +03:00
if (m_SharedRoutingPath) m_SharedRoutingPath->numTimesUsed++;
2016-02-11 06:51:08 +03:00
return m_SharedRoutingPath;
}
void GarlicRoutingSession::SetSharedRoutingPath (std::shared_ptr<GarlicRoutingPath> path)
{
if (path && path->outboundTunnel && path->remoteLease)
2016-02-14 07:02:58 +03:00
{
2016-02-11 06:51:08 +03:00
path->updateTime = i2p::util::GetSecondsSinceEpoch ();
2016-02-14 07:02:58 +03:00
path->numTimesUsed = 0;
}
2016-02-11 06:51:08 +03:00
else
path = nullptr;
m_SharedRoutingPath = path;
}
2014-10-17 04:12:46 +04:00
GarlicRoutingSession::UnconfirmedTags * GarlicRoutingSession::GenerateSessionTags ()
2013-11-25 03:10:27 +04:00
{
2014-10-17 04:12:46 +04:00
auto tags = new UnconfirmedTags (m_NumTags);
2014-10-17 19:26:57 +04:00
tags->tagsCreationTime = i2p::util::GetSecondsSinceEpoch ();
2014-10-17 04:12:46 +04:00
for (int i = 0; i < m_NumTags; i++)
2014-10-17 19:26:57 +04:00
{
2015-11-03 17:15:49 +03:00
RAND_bytes (tags->sessionTags[i], 32);
2014-10-17 19:26:57 +04:00
tags->sessionTags[i].creationTime = tags->tagsCreationTime;
}
2014-10-17 04:12:46 +04:00
return tags;
2014-01-18 19:34:57 +04:00
}
2015-03-22 21:59:27 +03:00
void GarlicRoutingSession::MessageConfirmed (uint32_t msgID)
{
TagsConfirmed (msgID);
if (msgID == m_LeaseSetUpdateMsgID)
{
m_LeaseSetUpdateStatus = eLeaseSetUpToDate;
2015-12-18 09:59:43 +03:00
LogPrint (eLogInfo, "Garlic: LeaseSet update confirmed");
2015-03-22 21:59:27 +03:00
}
else
CleanupExpiredTags ();
}
2014-10-14 22:48:25 +04:00
void GarlicRoutingSession::TagsConfirmed (uint32_t msgID)
{
2016-07-08 05:39:20 +03:00
uint32_t ts = i2p::util::GetSecondsSinceEpoch ();
for (auto it = m_UnconfirmedTagsMsgs.begin (); it != m_UnconfirmedTagsMsgs.end ();)
2014-10-14 22:48:25 +04:00
{
2016-07-08 05:39:20 +03:00
auto& tags = *it;
if (tags->msgID == msgID)
{
if (ts < tags->tagsCreationTime + OUTGOING_TAGS_EXPIRATION_TIMEOUT)
{
for (int i = 0; i < tags->numTags; i++)
m_SessionTags.push_back (tags->sessionTags[i]);
}
it = m_UnconfirmedTagsMsgs.erase (it);
2014-10-17 05:11:02 +04:00
}
2016-07-08 05:39:20 +03:00
else if (ts >= tags->tagsCreationTime + OUTGOING_TAGS_CONFIRMATION_TIMEOUT)
{
if (m_Owner)
m_Owner->RemoveDeliveryStatusSession (tags->msgID);
it = m_UnconfirmedTagsMsgs.erase (it);
}
else
2016-08-05 21:23:54 +03:00
++it;
2014-10-14 22:48:25 +04:00
}
2015-01-23 18:07:11 +03:00
}
bool GarlicRoutingSession::CleanupExpiredTags ()
{
uint32_t ts = i2p::util::GetSecondsSinceEpoch ();
for (auto it = m_SessionTags.begin (); it != m_SessionTags.end ();)
{
if (ts >= it->creationTime + OUTGOING_TAGS_EXPIRATION_TIMEOUT)
it = m_SessionTags.erase (it);
else
2016-08-05 21:23:54 +03:00
++it;
2015-01-23 18:07:11 +03:00
}
CleanupUnconfirmedTags ();
return !m_SessionTags.empty () || !m_UnconfirmedTagsMsgs.empty ();
}
bool GarlicRoutingSession::CleanupUnconfirmedTags ()
{
bool ret = false;
uint32_t ts = i2p::util::GetSecondsSinceEpoch ();
2014-10-17 05:11:02 +04:00
// delete expired unconfirmed tags
for (auto it = m_UnconfirmedTagsMsgs.begin (); it != m_UnconfirmedTagsMsgs.end ();)
{
2016-07-08 05:39:20 +03:00
if (ts >= (*it)->tagsCreationTime + OUTGOING_TAGS_CONFIRMATION_TIMEOUT)
2014-10-17 05:11:02 +04:00
{
2015-01-23 18:07:11 +03:00
if (m_Owner)
2016-07-08 05:39:20 +03:00
m_Owner->RemoveDeliveryStatusSession ((*it)->msgID);
2014-10-17 05:11:02 +04:00
it = m_UnconfirmedTagsMsgs.erase (it);
ret = true;
2014-10-17 05:11:02 +04:00
}
else
2016-08-05 21:23:54 +03:00
++it;
2014-10-17 05:11:02 +04:00
}
return ret;
}
2014-10-14 22:48:25 +04:00
2015-11-03 17:15:49 +03:00
std::shared_ptr<I2NPMessage> GarlicRoutingSession::WrapSingleMessage (std::shared_ptr<const I2NPMessage> msg)
2014-01-18 19:34:57 +04:00
{
2015-11-24 21:09:12 +03:00
auto m = NewI2NPMessage ();
2014-11-26 19:04:49 +03:00
m->Align (12); // in order to get buf aligned to 16 (12 + 4)
2013-11-25 03:10:27 +04:00
size_t len = 0;
2013-11-24 01:35:15 +04:00
uint8_t * buf = m->GetPayload () + 4; // 4 bytes for length
2014-10-17 19:26:57 +04:00
// find non-expired tag
bool tagFound = false;
SessionTag tag;
if (m_NumTags > 0)
{
2014-10-17 19:26:57 +04:00
uint32_t ts = i2p::util::GetSecondsSinceEpoch ();
2014-10-17 19:48:07 +04:00
while (!m_SessionTags.empty ())
{
2014-10-17 19:26:57 +04:00
if (ts < m_SessionTags.front ().creationTime + OUTGOING_TAGS_EXPIRATION_TIMEOUT)
{
tag = m_SessionTags.front ();
m_SessionTags.pop_front (); // use same tag only once
tagFound = true;
break;
}
else
m_SessionTags.pop_front (); // remove expired tag
}
}
// create message
2014-10-17 19:26:57 +04:00
if (!tagFound) // new session
2013-11-25 03:10:27 +04:00
{
2016-07-28 17:02:26 +03:00
LogPrint (eLogInfo, "Garlic: No tags available, will use ElGamal");
2014-07-28 19:54:34 +04:00
if (!m_Destination)
{
2015-12-18 09:59:43 +03:00
LogPrint (eLogError, "Garlic: Can't use ElGamal for unknown destination");
2014-07-28 19:54:34 +04:00
return nullptr;
}
2013-11-25 03:10:27 +04:00
// create ElGamal block
ElGamalBlock elGamal;
memcpy (elGamal.sessionKey, m_SessionKey, 32);
2015-11-03 17:15:49 +03:00
RAND_bytes (elGamal.preIV, 32); // Pre-IV
2013-11-25 03:10:27 +04:00
uint8_t iv[32]; // IV is first 16 bytes
2015-11-03 17:15:49 +03:00
SHA256(elGamal.preIV, 32, iv);
m_ElGamalEncryption->Encrypt ((uint8_t *)&elGamal, sizeof(elGamal), buf, true);
2014-05-12 06:37:33 +04:00
m_Encryption.SetIV (iv);
2014-01-18 19:34:57 +04:00
buf += 514;
len += 514;
2013-11-25 03:10:27 +04:00
}
else // existing session
{
// session tag
2014-10-17 04:12:46 +04:00
memcpy (buf, tag, 32);
2013-11-25 03:10:27 +04:00
uint8_t iv[32]; // IV is first 16 bytes
2015-11-03 17:15:49 +03:00
SHA256(tag, 32, iv);
2014-05-12 06:37:33 +04:00
m_Encryption.SetIV (iv);
2014-01-18 19:34:57 +04:00
buf += 32;
2014-10-17 04:12:46 +04:00
len += 32;
2013-11-25 03:10:27 +04:00
}
2014-01-18 19:34:57 +04:00
// AES block
2015-11-03 17:15:49 +03:00
len += CreateAESBlock (buf, msg);
htobe32buf (m->GetPayload (), len);
2013-11-25 03:10:27 +04:00
m->len += len + 4;
m->FillI2NPMessageHeader (eI2NPGarlic);
2013-11-25 03:10:27 +04:00
return m;
}
2015-11-03 17:15:49 +03:00
size_t GarlicRoutingSession::CreateAESBlock (uint8_t * buf, std::shared_ptr<const I2NPMessage> msg)
2013-11-25 03:10:27 +04:00
{
2013-11-24 01:35:15 +04:00
size_t blockSize = 0;
2015-01-23 18:07:11 +03:00
bool createNewTags = m_Owner && m_NumTags && ((int)m_SessionTags.size () <= m_NumTags*2/3);
2014-10-17 04:12:46 +04:00
UnconfirmedTags * newTags = createNewTags ? GenerateSessionTags () : nullptr;
htobuf16 (buf, newTags ? htobe16 (newTags->numTags) : 0); // tag count
2013-11-24 01:35:15 +04:00
blockSize += 2;
2014-10-17 04:12:46 +04:00
if (newTags) // session tags recreated
2014-01-17 17:12:57 +04:00
{
2014-10-17 04:12:46 +04:00
for (int i = 0; i < newTags->numTags; i++)
2014-07-28 20:02:50 +04:00
{
2014-10-17 04:12:46 +04:00
memcpy (buf + blockSize, newTags->sessionTags[i], 32); // tags
2014-07-28 20:02:50 +04:00
blockSize += 32;
}
2014-01-17 17:12:57 +04:00
}
2013-11-24 01:35:15 +04:00
uint32_t * payloadSize = (uint32_t *)(buf + blockSize);
blockSize += 4;
uint8_t * payloadHash = buf + blockSize;
blockSize += 32;
buf[blockSize] = 0; // flag
blockSize++;
2014-10-17 04:12:46 +04:00
size_t len = CreateGarlicPayload (buf + blockSize, msg, newTags);
2014-12-31 17:14:53 +03:00
htobe32buf (payloadSize, len);
2015-11-03 17:15:49 +03:00
SHA256(buf + blockSize, len, payloadHash);
2013-11-24 01:35:15 +04:00
blockSize += len;
size_t rem = blockSize % 16;
if (rem)
blockSize += (16-rem); //padding
2014-05-12 06:37:33 +04:00
m_Encryption.Encrypt(buf, blockSize, buf);
2013-11-25 03:10:27 +04:00
return blockSize;
2013-11-24 01:35:15 +04:00
}
2015-11-03 17:15:49 +03:00
size_t GarlicRoutingSession::CreateGarlicPayload (uint8_t * payload, std::shared_ptr<const I2NPMessage> msg, UnconfirmedTags * newTags)
2013-11-24 01:35:15 +04:00
{
uint64_t ts = i2p::util::GetMillisecondsSinceEpoch ();
2015-11-03 17:15:49 +03:00
uint32_t msgID;
RAND_bytes ((uint8_t *)&msgID, 4);
2013-11-24 01:35:15 +04:00
size_t size = 0;
2013-12-31 05:46:33 +04:00
uint8_t * numCloves = payload + size;
*numCloves = 0;
2013-11-24 01:35:15 +04:00
size++;
2014-01-17 17:12:57 +04:00
2014-10-08 05:08:00 +04:00
if (m_Owner)
{
2015-03-22 21:59:27 +03:00
// resubmit non-confirmed LeaseSet
if (m_LeaseSetUpdateStatus == eLeaseSetSubmitted && ts > m_LeaseSetSubmissionTime + LEASET_CONFIRMATION_TIMEOUT)
{
m_LeaseSetUpdateStatus = eLeaseSetUpdated;
SetSharedRoutingPath (nullptr); // invalidate path since leaseset was not confirmed
}
2015-03-22 21:59:27 +03:00
// attach DeviveryStatus if necessary
if (newTags || m_LeaseSetUpdateStatus == eLeaseSetUpdated) // new tags created or leaseset updated
{
// clove is DeliveryStatus
2015-06-04 18:31:22 +03:00
auto cloveSize = CreateDeliveryStatusClove (payload + size, msgID);
if (cloveSize > 0) // successive?
{
2015-06-04 18:31:22 +03:00
size += cloveSize;
(*numCloves)++;
2015-03-22 21:59:27 +03:00
if (newTags) // new tags created
2016-07-08 05:39:20 +03:00
{
newTags->msgID = msgID;
m_UnconfirmedTagsMsgs.emplace_back (newTags);
2016-11-16 20:10:13 +03:00
newTags = nullptr; // got acquired
2016-07-08 05:39:20 +03:00
}
2015-01-22 23:31:34 +03:00
m_Owner->DeliveryStatusSent (shared_from_this (), msgID);
}
else
2015-12-18 09:59:43 +03:00
LogPrint (eLogWarning, "Garlic: DeliveryStatus clove was not created");
}
2015-03-22 21:59:27 +03:00
// attach LeaseSet
if (m_LeaseSetUpdateStatus == eLeaseSetUpdated)
{
2015-03-22 21:59:27 +03:00
m_LeaseSetUpdateStatus = eLeaseSetSubmitted;
m_LeaseSetUpdateMsgID = msgID;
m_LeaseSetSubmissionTime = ts;
// clove if our leaseSet must be attached
2014-10-08 05:08:00 +04:00
auto leaseSet = CreateDatabaseStoreMsg (m_Owner->GetLeaseSet ());
2015-11-03 17:15:49 +03:00
size += CreateGarlicClove (payload + size, leaseSet, false);
(*numCloves)++;
}
2013-12-31 05:46:33 +04:00
}
2014-01-09 07:47:22 +04:00
if (msg) // clove message ifself if presented
2013-12-31 05:46:33 +04:00
{
2014-07-28 19:54:34 +04:00
size += CreateGarlicClove (payload + size, msg, m_Destination ? m_Destination->IsDestination () : false);
2013-12-31 05:46:33 +04:00
(*numCloves)++;
}
memset (payload + size, 0, 3); // certificate of message
size += 3;
htobe32buf (payload + size, msgID); // MessageID
2013-12-31 05:46:33 +04:00
size += 4;
htobe64buf (payload + size, ts + 8000); // Expiration of message, 8 sec
2013-12-31 05:46:33 +04:00
size += 8;
2016-11-16 20:10:13 +03:00
if (newTags) delete newTags; // not acquired, delete
2013-12-31 05:46:33 +04:00
return size;
}
2015-11-03 17:15:49 +03:00
size_t GarlicRoutingSession::CreateGarlicClove (uint8_t * buf, std::shared_ptr<const I2NPMessage> msg, bool isDestination)
2013-12-31 05:46:33 +04:00
{
uint64_t ts = i2p::util::GetMillisecondsSinceEpoch () + 8000; // 8 sec
2013-12-31 05:46:33 +04:00
size_t size = 0;
2014-07-28 19:54:34 +04:00
if (isDestination && m_Destination)
{
2013-12-31 05:46:33 +04:00
buf[size] = eGarlicDeliveryTypeDestination << 5;// delivery instructions flag destination
size++;
2014-07-28 19:54:34 +04:00
memcpy (buf + size, m_Destination->GetIdentHash (), 32);
size += 32;
}
else
{
2013-12-31 05:46:33 +04:00
buf[size] = 0;// delivery instructions flag local
size++;
}
2013-12-31 05:46:33 +04:00
memcpy (buf + size, msg->GetBuffer (), msg->GetLength ());
2013-11-24 01:35:15 +04:00
size += msg->GetLength ();
2015-11-03 17:15:49 +03:00
uint32_t cloveID;
RAND_bytes ((uint8_t *)&cloveID, 4);
htobe32buf (buf + size, cloveID); // CloveID
2013-11-24 01:35:15 +04:00
size += 4;
htobe64buf (buf + size, ts); // Expiration of clove
2013-11-24 01:35:15 +04:00
size += 8;
2013-12-31 05:46:33 +04:00
memset (buf + size, 0, 3); // certificate of clove
2013-11-24 01:35:15 +04:00
size += 3;
return size;
}
2014-01-09 07:47:22 +04:00
size_t GarlicRoutingSession::CreateDeliveryStatusClove (uint8_t * buf, uint32_t msgID)
{
size_t size = 0;
2014-10-08 05:08:00 +04:00
if (m_Owner)
{
auto inboundTunnel = m_Owner->GetTunnelPool ()->GetNextInboundTunnel ();
if (inboundTunnel)
{
buf[size] = eGarlicDeliveryTypeTunnel << 5; // delivery instructions flag tunnel
size++;
// hash and tunnelID sequence is reversed for Garlic
memcpy (buf + size, inboundTunnel->GetNextIdentHash (), 32); // To Hash
size += 32;
htobe32buf (buf + size, inboundTunnel->GetNextTunnelID ()); // tunnelID
size += 4;
// create msg
2015-06-24 17:45:58 +03:00
auto msg = CreateDeliveryStatusMsg (msgID);
2014-11-19 22:56:47 +03:00
if (m_Owner)
{
//encrypt
uint8_t key[32], tag[32];
2015-11-03 17:15:49 +03:00
RAND_bytes (key, 32); // random session key
RAND_bytes (tag, 32); // random session tag
2014-12-09 05:28:11 +03:00
m_Owner->SubmitSessionKey (key, tag);
2014-11-19 22:56:47 +03:00
GarlicRoutingSession garlic (key, tag);
msg = garlic.WrapSingleMessage (msg);
}
memcpy (buf + size, msg->GetBuffer (), msg->GetLength ());
size += msg->GetLength ();
// fill clove
uint64_t ts = i2p::util::GetMillisecondsSinceEpoch () + 8000; // 8 sec
2015-11-03 17:15:49 +03:00
uint32_t cloveID;
RAND_bytes ((uint8_t *)&cloveID, 4);
htobe32buf (buf + size, cloveID); // CloveID
size += 4;
htobe64buf (buf + size, ts); // Expiration of clove
size += 8;
memset (buf + size, 0, 3); // certificate of clove
size += 3;
}
else
2015-12-18 09:59:43 +03:00
LogPrint (eLogError, "Garlic: No inbound tunnels in the pool for DeliveryStatus");
2014-01-09 07:47:22 +04:00
}
else
2015-12-18 09:59:43 +03:00
LogPrint (eLogWarning, "Garlic: Missing local LeaseSet");
2014-01-09 07:47:22 +04:00
return size;
}
2013-11-25 03:10:27 +04:00
GarlicDestination::~GarlicDestination ()
2013-11-25 03:10:27 +04:00
{
}
void GarlicDestination::AddSessionKey (const uint8_t * key, const uint8_t * tag)
{
if (key)
{
2014-11-19 22:56:47 +03:00
uint32_t ts = i2p::util::GetSecondsSinceEpoch ();
auto decryption = std::make_shared<i2p::crypto::CBCDecryption>();
decryption->SetKey (key);
2014-11-19 22:56:47 +03:00
m_Tags[SessionTag(tag, ts)] = decryption;
}
}
bool GarlicDestination::SubmitSessionKey (const uint8_t * key, const uint8_t * tag)
{
AddSessionKey (key, tag);
return true;
}
2015-06-16 17:14:14 +03:00
void GarlicDestination::HandleGarlicMessage (std::shared_ptr<I2NPMessage> msg)
{
uint8_t * buf = msg->GetPayload ();
uint32_t length = bufbe32toh (buf);
2015-05-18 02:40:46 +03:00
if (length > msg->GetLength ())
{
2015-12-18 09:59:43 +03:00
LogPrint (eLogWarning, "Garlic: message length ", length, " exceeds I2NP message length ", msg->GetLength ());
2015-05-18 02:40:46 +03:00
return;
}
2014-11-19 22:56:47 +03:00
buf += 4; // length
auto it = m_Tags.find (SessionTag(buf));
if (it != m_Tags.end ())
{
// tag found. Use AES
2015-05-18 02:40:46 +03:00
if (length >= 32)
{
uint8_t iv[32]; // IV is first 16 bytes
2015-11-03 17:15:49 +03:00
SHA256(buf, 32, iv);
2015-05-18 02:40:46 +03:00
it->second->SetIV (iv);
it->second->Decrypt (buf + 32, length - 32, buf + 32);
HandleAESBlock (buf + 32, length - 32, it->second, msg->from);
}
else
2015-12-18 09:59:43 +03:00
LogPrint (eLogWarning, "Garlic: message length ", length, " is less than 32 bytes");
2015-05-18 02:40:46 +03:00
m_Tags.erase (it); // tag might be used only once
}
else
{
// tag not found. Use ElGamal
ElGamalBlock elGamal;
2015-05-18 02:40:46 +03:00
if (length >= 514 && i2p::crypto::ElGamalDecrypt (GetEncryptionPrivateKey (), buf, (uint8_t *)&elGamal, true))
{
auto decryption = std::make_shared<i2p::crypto::CBCDecryption>();
decryption->SetKey (elGamal.sessionKey);
uint8_t iv[32]; // IV is first 16 bytes
2015-11-03 17:15:49 +03:00
SHA256(elGamal.preIV, 32, iv);
decryption->SetIV (iv);
decryption->Decrypt(buf + 514, length - 514, buf + 514);
HandleAESBlock (buf + 514, length - 514, decryption, msg->from);
}
else
2015-12-18 09:59:43 +03:00
LogPrint (eLogError, "Garlic: Failed to decrypt message");
}
2014-07-08 06:25:32 +04:00
}
2014-01-18 19:34:57 +04:00
void GarlicDestination::HandleAESBlock (uint8_t * buf, size_t len, std::shared_ptr<i2p::crypto::CBCDecryption> decryption,
2015-02-06 02:53:43 +03:00
std::shared_ptr<i2p::tunnel::InboundTunnel> from)
{
uint16_t tagCount = bufbe16toh (buf);
2014-12-08 05:00:19 +03:00
buf += 2; len -= 2;
if (tagCount > 0)
{
2014-12-08 05:00:19 +03:00
if (tagCount*32 > len)
{
2015-12-18 09:59:43 +03:00
LogPrint (eLogError, "Garlic: Tag count ", tagCount, " exceeds length ", len);
return ;
2014-12-08 05:00:19 +03:00
}
2014-10-17 19:26:57 +04:00
uint32_t ts = i2p::util::GetSecondsSinceEpoch ();
for (int i = 0; i < tagCount; i++)
2014-10-17 19:26:57 +04:00
m_Tags[SessionTag(buf + i*32, ts)] = decryption;
}
buf += tagCount*32;
2014-12-08 05:00:19 +03:00
len -= tagCount*32;
uint32_t payloadSize = bufbe32toh (buf);
if (payloadSize > len)
{
2015-12-18 09:59:43 +03:00
LogPrint (eLogError, "Garlic: Unexpected payload size ", payloadSize);
return;
}
buf += 4;
uint8_t * payloadHash = buf;
buf += 32;// payload hash.
if (*buf) // session key?
buf += 32; // new session key
buf++; // flag
// payload
2015-11-03 17:15:49 +03:00
uint8_t digest[32];
SHA256 (buf, payloadSize, digest);
if (memcmp (payloadHash, digest, 32)) // payload hash doesn't match
{
2015-12-18 09:59:43 +03:00
LogPrint (eLogError, "Garlic: wrong payload hash");
return;
}
HandleGarlicPayload (buf, payloadSize, from);
}
2015-02-06 02:53:43 +03:00
void GarlicDestination::HandleGarlicPayload (uint8_t * buf, size_t len, std::shared_ptr<i2p::tunnel::InboundTunnel> from)
{
2015-04-22 01:59:35 +03:00
const uint8_t * buf1 = buf;
int numCloves = buf[0];
2015-12-18 09:59:43 +03:00
LogPrint (eLogDebug, "Garlic: ", numCloves," cloves");
buf++;
for (int i = 0; i < numCloves; i++)
{
// delivery instructions
uint8_t flag = buf[0];
buf++; // flag
if (flag & 0x80) // encrypted?
{
// TODO: implement
2015-12-18 09:59:43 +03:00
LogPrint (eLogWarning, "Garlic: clove encrypted");
buf += 32;
}
GarlicDeliveryType deliveryType = (GarlicDeliveryType)((flag >> 5) & 0x03);
switch (deliveryType)
{
case eGarlicDeliveryTypeLocal:
2015-12-18 09:59:43 +03:00
LogPrint (eLogDebug, "Garlic: type local");
HandleI2NPMessage (buf, len, from);
break;
2014-10-12 05:27:55 +04:00
case eGarlicDeliveryTypeDestination:
2015-12-18 09:59:43 +03:00
LogPrint (eLogDebug, "Garlic: type destination");
buf += 32; // destination. check it later or for multiple destinations
HandleI2NPMessage (buf, len, from);
2014-10-12 05:27:55 +04:00
break;
case eGarlicDeliveryTypeTunnel:
{
2015-12-18 09:59:43 +03:00
LogPrint (eLogDebug, "Garlic: type tunnel");
// gwHash and gwTunnel sequence is reverted
uint8_t * gwHash = buf;
buf += 32;
uint32_t gwTunnel = bufbe32toh (buf);
buf += 4;
auto msg = CreateI2NPMessage (buf, GetI2NPMessageLength (buf), from);
if (from) // received through an inbound tunnel
{
std::shared_ptr<i2p::tunnel::OutboundTunnel> tunnel;
if (from->GetTunnelPool ())
tunnel = from->GetTunnelPool ()->GetNextOutboundTunnel ();
else
LogPrint (eLogError, "Garlic: Tunnel pool is not set for inbound tunnel");
if (tunnel) // we have send it through an outbound tunnel
tunnel->SendTunnelDataMsg (gwHash, gwTunnel, msg);
else
LogPrint (eLogWarning, "Garlic: No outbound tunnels available for garlic clove");
}
else // received directly
i2p::transport::transports.SendMessage (gwHash, i2p::CreateTunnelGatewayMsg (gwTunnel, msg)); // send directly
break;
}
case eGarlicDeliveryTypeRouter:
{
uint8_t * ident = buf;
buf += 32;
if (!from) // received directly
i2p::transport::transports.SendMessage (ident,
CreateI2NPMessage (buf, GetI2NPMessageLength (buf)));
else
LogPrint (eLogWarning, "Garlic: type router for inbound tunnels not supported");
break;
}
default:
2015-12-18 09:59:43 +03:00
LogPrint (eLogWarning, "Garlic: unknown delivery type ", (int)deliveryType);
}
buf += GetI2NPMessageLength (buf); // I2NP
buf += 4; // CloveID
buf += 8; // Date
buf += 3; // Certificate
2015-04-22 01:59:35 +03:00
if (buf - buf1 > (int)len)
{
2015-12-18 09:59:43 +03:00
LogPrint (eLogError, "Garlic: clove is too long");
2015-04-22 01:59:35 +03:00
break;
}
}
}
2015-06-22 05:29:50 +03:00
std::shared_ptr<I2NPMessage> GarlicDestination::WrapMessage (std::shared_ptr<const i2p::data::RoutingDestination> destination,
std::shared_ptr<I2NPMessage> msg, bool attachLeaseSet)
{
auto session = GetRoutingSession (destination, attachLeaseSet);
2015-04-06 03:07:32 +03:00
return session->WrapSingleMessage (msg);
}
2015-01-22 23:31:34 +03:00
std::shared_ptr<GarlicRoutingSession> GarlicDestination::GetRoutingSession (
2015-04-06 03:07:32 +03:00
std::shared_ptr<const i2p::data::RoutingDestination> destination, bool attachLeaseSet)
2013-11-25 03:10:27 +04:00
{
2016-01-25 21:34:04 +03:00
GarlicRoutingSessionPtr session;
{
std::unique_lock<std::mutex> l(m_SessionsMutex);
auto it = m_Sessions.find (destination->GetIdentHash ());
if (it != m_Sessions.end ())
session = it->second;
}
2013-11-25 03:10:27 +04:00
if (!session)
{
2015-04-06 03:07:32 +03:00
session = std::make_shared<GarlicRoutingSession> (this, destination,
attachLeaseSet ? m_NumTags : 4, attachLeaseSet); // specified num tags for connections and 4 for LS requests
2014-08-25 21:07:14 +04:00
std::unique_lock<std::mutex> l(m_SessionsMutex);
2015-01-29 05:37:08 +03:00
m_Sessions[destination->GetIdentHash ()] = session;
2013-11-25 03:10:27 +04:00
}
2014-08-30 06:10:00 +04:00
return session;
}
2015-01-23 18:07:11 +03:00
void GarlicDestination::CleanupExpiredTags ()
2015-01-23 18:07:11 +03:00
{
// incoming
uint32_t ts = i2p::util::GetSecondsSinceEpoch ();
int numExpiredTags = 0;
for (auto it = m_Tags.begin (); it != m_Tags.end ();)
{
if (ts > it->first.creationTime + INCOMING_TAGS_EXPIRATION_TIMEOUT)
{
numExpiredTags++;
it = m_Tags.erase (it);
}
else
2016-08-05 21:23:54 +03:00
++it;
}
if (numExpiredTags > 0)
LogPrint (eLogDebug, "Garlic: ", numExpiredTags, " tags expired for ", GetIdentHash().ToBase64 ());
// outgoing
2015-01-23 18:07:11 +03:00
std::unique_lock<std::mutex> l(m_SessionsMutex);
for (auto it = m_Sessions.begin (); it != m_Sessions.end ();)
{
2016-02-11 06:51:08 +03:00
it->second->GetSharedRoutingPath (); // delete shared path if necessary
2015-01-23 18:07:11 +03:00
if (!it->second->CleanupExpiredTags ())
2015-01-23 20:48:25 +03:00
{
LogPrint (eLogInfo, "Routing session to ", it->first.ToBase32 (), " deleted");
2015-01-23 18:07:11 +03:00
it = m_Sessions.erase (it);
2015-01-23 20:48:25 +03:00
}
2015-01-23 18:07:11 +03:00
else
2016-08-05 21:23:54 +03:00
++it;
2015-01-23 18:07:11 +03:00
}
}
2016-01-25 21:34:04 +03:00
void GarlicDestination::RemoveDeliveryStatusSession (uint32_t msgID)
2015-01-23 18:07:11 +03:00
{
2016-01-25 21:34:04 +03:00
m_DeliveryStatusSessions.erase (msgID);
2015-01-23 18:07:11 +03:00
}
2016-01-25 21:34:04 +03:00
void GarlicDestination::DeliveryStatusSent (GarlicRoutingSessionPtr session, uint32_t msgID)
2014-08-30 06:10:00 +04:00
{
2016-01-25 21:34:04 +03:00
m_DeliveryStatusSessions[msgID] = session;
2016-08-05 21:23:54 +03:00
}
2014-01-17 17:12:57 +04:00
2015-06-16 17:14:14 +03:00
void GarlicDestination::HandleDeliveryStatusMessage (std::shared_ptr<I2NPMessage> msg)
2014-01-17 17:12:57 +04:00
{
2014-12-30 23:33:11 +03:00
uint32_t msgID = bufbe32toh (msg->GetPayload ());
2014-01-17 17:12:57 +04:00
{
2016-01-25 21:34:04 +03:00
auto it = m_DeliveryStatusSessions.find (msgID);
2016-08-05 21:23:54 +03:00
if (it != m_DeliveryStatusSessions.end ())
2014-08-31 16:56:03 +04:00
{
2015-03-22 21:59:27 +03:00
it->second->MessageConfirmed (msgID);
2016-01-25 21:34:04 +03:00
m_DeliveryStatusSessions.erase (it);
2015-12-18 09:59:43 +03:00
LogPrint (eLogDebug, "Garlic: message ", msgID, " acknowledged");
2016-08-05 21:23:54 +03:00
}
2014-10-08 05:47:32 +04:00
}
}
void GarlicDestination::SetLeaseSetUpdated ()
{
2016-08-05 21:23:54 +03:00
std::unique_lock<std::mutex> l(m_SessionsMutex);
for (auto& it: m_Sessions)
it.second->SetLeaseSetUpdated ();
}
2015-06-16 17:14:14 +03:00
void GarlicDestination::ProcessGarlicMessage (std::shared_ptr<I2NPMessage> msg)
{
HandleGarlicMessage (msg);
}
2015-06-16 17:14:14 +03:00
void GarlicDestination::ProcessDeliveryStatusMessage (std::shared_ptr<I2NPMessage> msg)
{
HandleDeliveryStatusMessage (msg);
}
2013-11-25 03:10:27 +04:00
}
}