CKKSPeer.m   [plain text]

/*
* Copyright (c) 2017 Apple Inc. All Rights Reserved.
*
* @APPLE_LICENSE_HEADER_START@
*
* This file contains Original Code and/or Modifications of Original Code
* as defined in and that are subject to the Apple Public Source License
* Version 2.0 (the 'License'). You may not use this file except in
* compliance with the License. Please obtain a copy of the License at
* http://www.opensource.apple.com/apsl/ and read it before using this
* file.
*
* The Original Code and all software distributed under the License are
* distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
* EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
* INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
* FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
* Please see the License for the specific language governing rights and
* limitations under the License.
*
* @APPLE_LICENSE_HEADER_END@
*/

#if OCTAGON

#import "keychain/ckks/CKKSPeer.h"
#import "keychain/ckks/CKKSViewManager.h"

NSString* const CKKSSOSPeerPrefix = @"spid-";

@implementation CKKSSelves
- (instancetype)initWithCurrent:(id<CKKSSelfPeer>)selfPeer
allSelves:(NSSet<id<CKKSSelfPeer>>*)allSelves {
if((self = [super init])) {
_currentSelf = selfPeer;

// Ensure allSelves contains selfPeer
_allSelves = allSelves ? [allSelves setByAddingObject:selfPeer] :
(selfPeer ? [NSSet setWithObject:selfPeer] : [NSSet set]);
}
return self;
}

- (NSString*)description {
NSMutableSet* pastSelves = [self.allSelves mutableCopy];
[pastSelves removeObject:self.currentSelf];
return [NSString stringWithFormat:@"<CKKSSelves: %@ %@>", self.currentSelf, pastSelves.count == 0u ? @"(no past selves)" : pastSelves ];
}

@end

#pragma mark - CKKSActualPeer

@implementation CKKSActualPeer
- (NSString*)description {
// Return the first 16 bytes of the public keys (for reading purposes)
return [NSString stringWithFormat:@"<CKKSActualPeer(%@): pubEnc:%@ pubSign:%@ views:%d>",
self.peerID,
[self.publicEncryptionKey.keyData subdataWithRange:NSMakeRange(0, MIN(16u,self.publicEncryptionKey.keyData.length))],
[self.publicSigningKey.keyData subdataWithRange:NSMakeRange(0, MIN(16u,self.publicSigningKey.keyData.length))],
(int)self.viewList.count];
}

- (instancetype)initWithPeerID:(NSString*)syncingPeerID
encryptionPublicKey:(SFECPublicKey*)encryptionKey
signingPublicKey:(SFECPublicKey*)signingKey
viewList:(NSSet<NSString*>*)viewList
{
if((self = [super init])) {
_peerID = syncingPeerID;

_publicEncryptionKey = encryptionKey;
_publicSigningKey = signingKey;
_viewList = viewList;
}
return self;
}

- (bool)matchesPeer:(id<CKKSPeer>)peer {
return (self.peerID == nil && peer.peerID == nil) ||
[self.peerID isEqualToString:peer.peerID];
}

- (BOOL)shouldHaveView:(NSString *)viewName
{
return [self.viewList containsObject:viewName];
}

+ (BOOL)supportsSecureCoding {
return YES;
}

- (void)encodeWithCoder:(nonnull NSCoder*)coder
{
[coder encodeObject:self.peerID forKey:@"peerID"];
[coder encodeObject:self.publicEncryptionKey.encodeSubjectPublicKeyInfo forKey:@"encryptionKey"];
[coder encodeObject:self.publicSigningKey.encodeSubjectPublicKeyInfo forKey:@"signingKey"];
[coder encodeObject:self.viewList forKey:@"viewList"];
}

- (nullable instancetype)initWithCoder:(nonnull NSCoder*)decoder
{
self = [super init];
if(self) {
_peerID = [decoder decodeObjectOfClass:[NSString class] forKey:@"peerID"];

NSData* encryptionSPKI = [decoder decodeObjectOfClass:[NSData class] forKey:@"encryptionKey"];
if(encryptionSPKI) {
_publicEncryptionKey = [SFECPublicKey keyWithSubjectPublicKeyInfo:encryptionSPKI];
}

NSData* signingSPKI = [decoder decodeObjectOfClass:[NSData class] forKey:@"signingKey"];
if(signingSPKI) {
_publicSigningKey = [SFECPublicKey keyWithSubjectPublicKeyInfo:signingSPKI];
}

_viewList = [decoder decodeObjectOfClasses:[NSSet setWithArray:@[[NSSet class], [NSString class]]] forKey:@"viewList"];
}
return self;
}
@end

#pragma mark - CKKSSOSPeer

@interface CKKSSOSPeer ()
@property NSString* spid;
@property NSSet<NSString*>* viewList;
@end

@implementation CKKSSOSPeer
@synthesize publicEncryptionKey = _publicEncryptionKey;
@synthesize publicSigningKey = _publicSigningKey;

- (NSString*)description {
// Return the first 16 bytes of the public keys (for reading purposes)
return [NSString stringWithFormat:@"<CKKSSOSPeer(%@): pubEnc:%@ pubSign:%@ views:%d>",
self.peerID,
[self.publicEncryptionKey.keyData subdataWithRange:NSMakeRange(0, MIN(16u,self.publicEncryptionKey.keyData.length))],
[self.publicSigningKey.keyData subdataWithRange:NSMakeRange(0, MIN(16u,self.publicSigningKey.keyData.length))],
(int)self.viewList.count];
}

- (instancetype)initWithSOSPeerID:(NSString*)syncingPeerID
encryptionPublicKey:(SFECPublicKey*)encryptionKey
signingPublicKey:(SFECPublicKey*)signingKey
viewList:(NSSet<NSString*>* _Nullable)viewList
{
if((self = [super init])) {
if([syncingPeerID hasPrefix:CKKSSOSPeerPrefix]) {
_spid = [syncingPeerID substringFromIndex:CKKSSOSPeerPrefix.length];
} else {
_spid = syncingPeerID;
}
_publicEncryptionKey = encryptionKey;
_publicSigningKey = signingKey;
_viewList = viewList;
}
return self;
}

- (NSString*)peerID {
return [NSString stringWithFormat:@"%@%@", CKKSSOSPeerPrefix, self.spid];
}

- (bool)matchesPeer:(id<CKKSPeer>)peer {
return (self.peerID == nil && peer.peerID == nil) ||
[self.peerID isEqualToString:peer.peerID];
}

- (BOOL)shouldHaveView:(NSString *)viewName
{
return [self.viewList containsObject:viewName];
}

+ (BOOL)supportsSecureCoding {
return YES;
}

- (void)encodeWithCoder:(nonnull NSCoder*)coder
{
[coder encodeObject:self.spid forKey:@"spid"];
[coder encodeObject:self.publicEncryptionKey.encodeSubjectPublicKeyInfo forKey:@"encryptionKey"];
[coder encodeObject:self.publicSigningKey.encodeSubjectPublicKeyInfo forKey:@"signingKey"];
}

- (nullable instancetype)initWithCoder:(nonnull NSCoder*)decoder
{
self = [super init];
if(self) {
_spid = [decoder decodeObjectOfClass:[NSString class] forKey:@"spid"];

NSData* encryptionSPKI = [decoder decodeObjectOfClass:[NSData class] forKey:@"encryptionKey"];
if(encryptionSPKI) {
_publicEncryptionKey = [SFECPublicKey keyWithSubjectPublicKeyInfo:encryptionSPKI];
}

NSData* signingSPKI = [decoder decodeObjectOfClass:[NSData class] forKey:@"signingKey"];
if(signingSPKI) {
_publicSigningKey = [SFECPublicKey keyWithSubjectPublicKeyInfo:signingSPKI];
}
}
return self;
}
@end

@interface CKKSSOSSelfPeer ()
@property NSString* spid;
@end

@implementation CKKSSOSSelfPeer
- (NSString*)description {
return [NSString stringWithFormat:@"<CKKSSOSSelfPeer(%@): pubEnc:%@ pubSign:%@ views:%d>",
self.peerID,
[self.publicEncryptionKey.keyData subdataWithRange:NSMakeRange(0, MIN(16u,self.publicEncryptionKey.keyData.length))],
[self.publicSigningKey.keyData subdataWithRange:NSMakeRange(0, MIN(16u,self.publicSigningKey.keyData.length))],
(int)self.viewList.count];
}

- (instancetype)initWithSOSPeerID:(NSString*)syncingPeerID
encryptionKey:(SFECKeyPair*)encryptionKey
signingKey:(SFECKeyPair*)signingKey
viewList:(NSSet<NSString*>* _Nullable)viewList
{
if((self = [super init])) {
if([syncingPeerID hasPrefix:CKKSSOSPeerPrefix]) {
_spid = [syncingPeerID substringFromIndex:CKKSSOSPeerPrefix.length];
} else {
_spid = syncingPeerID;
}
_encryptionKey = encryptionKey;
_signingKey = signingKey;
_viewList = viewList;
}
return self;
}

-(SFECPublicKey*)publicEncryptionKey {
return self.encryptionKey.publicKey;
}
-(SFECPublicKey*)publicSigningKey {
return self.signingKey.publicKey;
}
- (NSString*)peerID {
return [NSString stringWithFormat:@"%@%@", CKKSSOSPeerPrefix, self.spid];
}

- (bool)matchesPeer:(id<CKKSPeer>)peer {
return (self.peerID == nil && peer.peerID == nil) ||
[self.peerID isEqualToString:peer.peerID];
}

- (BOOL)shouldHaveView:(NSString *)viewName
{
return [self.viewList containsObject:viewName];
}
@end

NSSet<Class>* CKKSPeerClasses(void)
{
return [NSSet setWithArray:@[[CKKSSOSPeer class], [CKKSActualPeer class]]];
}

#endif // OCTAGON