// KeyCallBack implements a callback function to request keys from file-descriptor
func KeyCallBack(keyMgtFd int) (*os.File, func(*message.Curve25519Key) *message.Curve25519Key) {
knownKeys := make(map[message.Curve25519Key]message.Curve25519Key)
fd := os.NewFile(uintptr(keyMgtFd), "fd/"+strconv.Itoa(keyMgtFd))
return fd, func(pubkey *message.Curve25519Key) *message.Curve25519Key {
// KeyCallBack func(*Curve25519Key) *Curve25519Key
log.Sync()
if v, ok := knownKeys[*pubkey]; ok { // Return from cache if we can
return &v
}
b := make([]byte, 120)
log.Dataf("STATUS (KeyMGTRequest):\t%s\n", utils.B58encode(pubkey[:]))
log.Sync()
n, _ := fd.Read(b)
if n == 0 {
log.Datas("STATUS (KeyMGT):\tREAD FAILURE\n")
return nil
}
log.Datas("STATUS (KeyMGT):\tREAD DONE\n")
k1, k2 := utils.ParseKeyPair(strings.Trim(string(b[:n]), " \t\r\n"))
if k1 != nil {
pub1 := message.GenPubKey(k1) // Add to cache
knownKeys[*pub1] = *k1
}
if k2 != nil {
pub2 := message.GenPubKey(k2) // Add to cache
knownKeys[*pub2] = *k2
}
if v, ok := knownKeys[*pubkey]; ok { // Return from cache if we can
return &v
}
return nil
}
}
// CmdPost posts a message
func CmdPost() int {
var inData []byte
var err error
if OptionsVar.Server == "" {
log.Fatal("Server must be specified: --server")
return 1
}
maxInData := int64(GlobalConfigVar.BodyLength-(message.Curve25519KeySize*2)) * 5
inData, err = inputData(OptionsVar.Infile, maxInData)
if err != nil {
log.Fatalf("No input data: %s\n", err)
return 1
}
log.Datas("STATUS (Process):\tPOST\n")
proto := repproto.New(OptionsVar.Socksserver, OptionsVar.Server)
err = proto.PostSpecific(OptionsVar.Server, inData)
if err != nil {
log.Fatalf("Output failed: %s\n", err)
log.Datas("STATUS (Result):\tFAIL\n")
} else {
log.Datas("STATUS (Result):\tDONE\n")
}
log.Sync()
return 0
}
// selectPrivKey returns the selected private key as string.
// privkeyOpt is the data given on the commandline
// privkeyConfig is the data from the config file, which must be a key
// privkeyDefault is the default to use when the commandline option was empty
// supported commandline options are
// "" : (empty string) use default
// "-" : read from stdin,
// number : read from filedescriptor number
// "tty" : query user on tty
// key : return the key
func selectPrivKey(privkeyOpt, privkeyConfig, privkeyDefault string) string {
readFd := -1
if privkeyOpt == "" {
privkeyOpt = privkeyDefault
}
if privkeyOpt == "config" {
return privkeyConfig
}
if privkeyOpt == "tty" {
pass, err := readPassTTY("Private key(s): ")
if err != nil {
return ""
}
return string(pass)
}
if privkeyOpt == "-" {
readFd = 0
}
fdI, err := strconv.Atoi(privkeyOpt)
if err == nil {
readFd = fdI
}
if readFd >= 0 {
// Read from file descriptor
log.Sync()
fd := os.NewFile(uintptr(readFd), "fd/"+strconv.Itoa(readFd))
defer fd.Close()
b := make([]byte, 120)
log.Datas("STATUS (KeyMGT):\tENTER KEY\n")
log.Sync()
n, _ := fd.Read(b)
log.Datas("STATUS (KeyMGT):\tREAD DONE\n")
if n == 0 {
return ""
}
return strings.Trim(string(b[:n]), " \t\r\n")
}
return privkeyOpt
}
func testCommands() bool {
i := 0
for _, x := range commands {
if *x {
i++
}
}
if i > 1 {
log.Fatal("Only one command may be specified")
log.Sync()
return false
}
if i == 0 {
if len(flag.Args()) > 0 {
*commands[cmdDecrypt] = true
} else {
*commands[cmdEncrypt] = true
}
}
return true
}
func runCommands() (retval int) {
log.SetMinLevel(log.LevelPrint)
if options.Appdata {
log.SetMinLevel(log.LevelData)
}
if options.Verbose {
log.SetMinLevel(log.LevelDebug)
}
if options.KEYVERB {
log.SetMinLevel(log.LevelSecret)
}
usercfgfile := client.UserConfigFile()
if options.Configfile != "" || usercfgfile != "" {
configFile := usercfgfile
if options.Configfile != "" {
configFile = options.Configfile
}
globalconfigT, err := client.LoadConfigFile(configFile)
if err == nil {
globalconfig = globalconfigT
} else {
log.Errorf("Config file failed to load: %s\n", err)
}
}
for k, v := range commands {
if *v {
if callFunc[k] != nil {
client.OptionsVar = options
client.GlobalConfigVar = globalconfig
retval = callFunc[k]()
} else {
log.Fatal("Command not implemented")
return 100
}
log.Sync()
break
}
}
return
}
// CmdEncrypt encrypts data.
func CmdEncrypt() int {
var privkey, embedConstantPrivKey, embedTemporaryPrivKey, embedConstantPubKey, embedTemporaryPubKey *message.Curve25519Key
var err error
var inData, encMessage []byte
var meta *message.MetaDataSend
var signKeyPair *message.SignKeyPair
var removeFile string
if OptionsVar.Server == "" {
getPeers(false)
}
// OptionsVar.anonymous . disable private key and signkey
if OptionsVar.Anonymous {
OptionsVar.Signkey = ""
OptionsVar.Privkey = ""
GlobalConfigVar.PrivateKey = ""
}
mindelay := uint32(OptionsVar.Mindelay)
maxdelay := uint32(OptionsVar.Maxdelay)
// Read input data
maxInData := int64(GlobalConfigVar.BodyLength - (message.Curve25519KeySize * 2) - innerHeader)
//maxInData := int64(MsgSizeLimit)
if OptionsVar.Repost {
maxInData -= utils.RepostHeaderSize - message.KeyHeaderSize - message.SignHeaderSize
}
log.Debugf("Size limit: %d\n", maxInData)
inData, err = inputData(OptionsVar.Infile, maxInData)
if err != nil {
log.Fatalf("No input data: %s\n", err)
return 1
}
// Verify list contents
if OptionsVar.MessageType == message.MsgTypeList {
err := utils.VerifyListContent(inData)
if err != nil {
log.Errorf("Could not verify list input: %s\n", err)
return 1
}
}
// Select private key to use
privkeystr := selectPrivKey(OptionsVar.Privkey, GlobalConfigVar.PrivateKey, "")
// Parse privkey
if privkeystr != "" {
privkey = new(message.Curve25519Key)
copy(privkey[:], utils.B58decode(privkeystr))
}
// Generate embedded keypairs
if OptionsVar.Embedkey {
if OptionsVar.Notrace || privkey == nil {
embedConstantPrivKey, err = message.GenLongTermKey(OptionsVar.Hidden, OptionsVar.Sync)
if err != nil {
log.Errorf("Key generation error:%s\n", err)
return 1
}
} else {
embedConstantPrivKey = privkey
}
embedConstantPubKey = message.GenPubKey(embedConstantPrivKey)
embedTemporaryPrivKey, err = message.GenRandomKey()
if err != nil {
log.Errorf("Key generation error:%s\n", err)
return 1
}
embedTemporaryPubKey = message.GenPubKey(embedTemporaryPrivKey)
}
embedded := utils.EncodeEmbedded(embedConstantPubKey, embedTemporaryPubKey)
recipientConstantPubKey, recipientTemporaryPubKey := utils.ParseKeyPair(OptionsVar.Recipientkey)
// Find a signature keypair if we can
signKeyDir := ""
if GlobalConfigVar.KeyDir != "" {
signKeyDir = GlobalConfigVar.KeyDir
}
if OptionsVar.Signdir != "" {
signKeyDir = OptionsVar.Signdir
}
if OptionsVar.Signkey != "" {
var d []byte
d, err = utils.MaxReadFile(2048, OptionsVar.Signkey)
if err == nil {
signKeyPair = new(message.SignKeyPair)
kp, err := signKeyPair.Unmarshal(d)
if err != nil {
log.Errorf("Sign keypair decode error: %s\n", err)
signKeyPair = nil
} else {
signKeyPair = kp
}
} else {
log.Errorf("Sign keypair read error: %s\n", err)
}
}
if signKeyPair == nil && signKeyDir != "" {
var d []byte
d, removeFile, err = utils.ReadRandomFile(signKeyDir, 2048)
if err == nil {
signKeyPair = new(message.SignKeyPair)
kp, err := signKeyPair.Unmarshal(d)
if err != nil {
log.Errorf("Sign keypair decode error: %s\n", err)
signKeyPair = nil
removeFile = ""
} else {
signKeyPair = kp
}
} else {
log.Errorf("Sign keypair read error: %s\n", err)
}
}
// Set up sender parameters
sender := message.Sender{
Signer: signKeyPair,
SenderPrivateKey: privkey,
ReceiveConstantPublicKey: recipientConstantPubKey,
ReceiveTemporaryPublicKey: recipientTemporaryPubKey,
TotalLength: GlobalConfigVar.BodyLength,
PadToLength: GlobalConfigVar.PadToLength,
HashCashBits: GlobalConfigVar.MinHashCash,
}
// We want encryption output in realtime
log.Sync()
inData = append(embedded, inData...)
if OptionsVar.Repost {
// Generate a repost-message
encMessage, meta, err = sender.EncryptRepost(byte(OptionsVar.MessageType), inData)
if err == nil {
rph := utils.EncodeRepostHeader(meta.PadKey, mindelay, maxdelay)
encMessage = append(rph[:], encMessage...)
log.Datas("STATUS (Process):\tPREPOST\n")
log.Dataf("STATUS (RepostSettings):\t%d %d\n", mindelay, maxdelay)
}
} else {
// Generate a normal message
encMessage, meta, err = sender.Encrypt(byte(OptionsVar.MessageType), inData)
if err == nil {
log.Datas("STATUS (Process):\tPOST\n")
}
}
if err != nil {
log.Fatalf("Encryption failed: %s\n", err)
return 1
}
log.Sync()
// Output. repost is only written to stdout or file
if OptionsVar.Outfile == "-" || (OptionsVar.Repost && OptionsVar.Outfile == "") {
err = utils.WriteStdout(encMessage)
// Display data as necessary
if err == nil {
log.Dataf("STATUS (RecPubKey):\t%s\n", utils.B58encode(meta.ReceiverConstantPubKey[:]))
if OptionsVar.Embedkey {
log.Dataf("STATUS (EmbedPublicKey):\t%s_%s\n", utils.B58encode(embedConstantPubKey[:]), utils.B58encode(embedTemporaryPubKey[:]))
log.Dataf("STATUS (EmbedPrivateKey):\t%s_%s\n", utils.B58encode(embedConstantPrivKey[:]), utils.B58encode(embedTemporaryPrivKey[:]))
}
if meta.MessageKey != nil {
log.Dataf("STATUS (ListInput):\tNULL %s %s\n", utils.B58encode(meta.MessageID[:]), utils.B58encode(meta.MessageKey[:]))
log.Dataf("STATUS (Message):\t%s_%s\n", utils.B58encode(meta.MessageID[:]), utils.B58encode(meta.MessageKey[:]))
} else {
log.Dataf("STATUS (ListInput):\tNULL %s NULL\n", utils.B58encode(meta.MessageID[:]))
log.Dataf("STATUS (MessageID):\t%s\n", utils.B58encode(meta.MessageID[:]))
}
}
} else if OptionsVar.Outfile != "" || OptionsVar.Repost {
err = utils.WriteNewFile(OptionsVar.Outfile, encMessage)
// Display data as necessary
log.Dataf("STATUS (RecPubKey):\t%s\n", utils.B58encode(meta.ReceiverConstantPubKey[:]))
if err == nil {
if OptionsVar.Embedkey {
log.Dataf("STATUS (EmbedPublicKey):\t%s_%s\n", utils.B58encode(embedConstantPubKey[:]), utils.B58encode(embedTemporaryPubKey[:]))
log.Dataf("STATUS (EmbedPrivateKey):\t%s_%s\n", utils.B58encode(embedConstantPrivKey[:]), utils.B58encode(embedTemporaryPrivKey[:]))
}
if meta.MessageKey != nil {
log.Dataf("STATUS (ListInput):\tNULL %s %s\n", utils.B58encode(meta.MessageID[:]), utils.B58encode(meta.MessageKey[:]))
log.Dataf("STATUS (Message):\t%s_%s\n", utils.B58encode(meta.MessageID[:]), utils.B58encode(meta.MessageKey[:]))
log.Printf("Pastebin Address:\t%s_%s\n", utils.B58encode(meta.MessageID[:]), utils.B58encode(meta.MessageKey[:]))
} else {
log.Dataf("STATUS (ListInput):\tNULL %s NULL\n", utils.B58encode(meta.MessageID[:]))
log.Dataf("STATUS (MessageID):\t%s\n", utils.B58encode(meta.MessageID[:]))
log.Printf("Pastebin Address:\t%s\n", utils.B58encode(meta.MessageID[:]))
}
}
} else {
// Post to server
server := OptionsVar.Server
proto := repproto.New(OptionsVar.Socksserver, OptionsVar.Server, GlobalConfigVar.PasteServers...)
if server == "" {
server, err = proto.Post(meta.MessageID[:], encMessage)
} else {
err = proto.PostSpecific(server, encMessage)
}
sep := "/"
if server != "" && server[len(server)-1] == '/' {
sep = ""
}
if err == nil {
if meta.MessageKey != nil {
log.Dataf("STATUS (URL):\t%s/%s_%s\n", server, utils.B58encode(meta.MessageID[:]), utils.B58encode(meta.MessageKey[:]))
}
if OptionsVar.Embedkey {
log.Dataf("STATUS (EmbedPublicKey):\t%s_%s\n", utils.B58encode(embedConstantPubKey[:]), utils.B58encode(embedTemporaryPubKey[:]))
log.Dataf("STATUS (EmbedPrivateKey):\t%s_%s\n", utils.B58encode(embedConstantPrivKey[:]), utils.B58encode(embedTemporaryPrivKey[:]))
}
if meta.MessageKey != nil {
log.Dataf("STATUS (ListInput):\t%s %s %s\n", server, utils.B58encode(meta.MessageID[:]), utils.B58encode(meta.MessageKey[:]))
log.Dataf("STATUS (Message):\t%s_%s\n", utils.B58encode(meta.MessageID[:]), utils.B58encode(meta.MessageKey[:]))
log.Printf("Pastebin Address:\t%s%s%s_%s\n", server, sep, utils.B58encode(meta.MessageID[:]), utils.B58encode(meta.MessageKey[:]))
} else {
log.Dataf("STATUS (ListInput):\t%s %s NULL\n", server, utils.B58encode(meta.MessageID[:]))
log.Dataf("STATUS (MessageID):\t%s\n", utils.B58encode(meta.MessageID[:]))
log.Printf("Pastebin Address:\t%s%s%s\n", server, sep, utils.B58encode(meta.MessageID[:]))
}
}
}
if err != nil {
log.Fatalf("Output failed: %s\n", err)
log.Sync()
return 1
}
if removeFile != "" {
// Operation has been successful, remove signer keyfile (if any)
os.Remove(removeFile)
}
return 0
}
// CmdIndex returns the index for a private key
func CmdIndex() int {
var server string
var err error
var pubkey *message.Curve25519Key
var privkey message.Curve25519Key
var messages []*structs.MessageStruct
var moreMessages bool
if OptionsVar.Server == "" {
getPeers(false)
}
if OptionsVar.Outdir != "" && !isDir(OptionsVar.Outdir) {
log.Fatalf("outdir does not exist or is no directory: %s", OptionsVar.Outdir)
return 1
}
// privkey must be set
privkeystr := selectPrivKey(OptionsVar.Privkey, GlobalConfigVar.PrivateKey, "tty")
if privkeystr == "" {
log.Fatal("Private key missing: --privkey\n")
return 1
}
privT := utils.B58decode(privkeystr)
copy(privkey[:], privT)
pubkey = message.CalcPub(&privkey)
if OptionsVar.Server != "" {
server = OptionsVar.Server
}
proto := repproto.New(OptionsVar.Socksserver, OptionsVar.Server)
log.Dataf("STATUS (Process):\tLIST\n")
if server != "" {
fmt.Println("Specific server")
messages, moreMessages, err = proto.ListSpecific(server, pubkey[:], privkey[:], OptionsVar.Start, OptionsVar.Count)
} else {
fmt.Println("Any server")
server, messages, moreMessages, err = proto.List(pubkey[:], privkey[:], OptionsVar.Start, OptionsVar.Count)
}
if err != nil {
log.Fatalf("List error: %s\n", err)
return 1
}
if len(messages) > 0 {
fmt.Print("Index\t\tMessageID\n")
fmt.Print("------------------------------------------------------------\n")
}
for _, msg := range messages {
log.Dataf("STATUS (MessageList):\t%d %s %s %d %d\n", msg.Counter, utils.B58encode(msg.MessageID[:]), utils.B58encode(msg.SignerPub[:]), msg.PostTime, msg.ExpireTime)
fmt.Printf("%d\t\t%s\n", msg.Counter, utils.B58encode(msg.MessageID[:]))
}
log.Dataf("STATUS (ListResult):\t%d %d %t\n", OptionsVar.Start, OptionsVar.Count, moreMessages)
if len(messages) > 0 {
fmt.Print("------------------------------------------------------------\n")
}
if moreMessages {
fmt.Print("More messages may be available\n")
} else {
fmt.Print("Listing complete\n")
}
if OptionsVar.Outdir != "" {
log.Dataf("STATUS (Process):\tFETCHMANY\n")
fmt.Print("Fetching messages...")
hasErrors := 0
for _, msg := range messages {
log.Dataf("STATUS (Fetch):\t%s\n", utils.B58encode(msg.MessageID[:]))
err = loadStoreMessage(server, msg.MessageID[:], OptionsVar.Outdir+string(os.PathSeparator)+utils.B58encode(msg.MessageID[:])) // use index server for download, store with name messageID
if err != nil {
fmt.Print(".F")
hasErrors++
log.Dataf("STATUS (FetchError):\t%s\n", utils.B58encode(msg.MessageID[:]))
} else {
fmt.Print(".o")
log.Dataf("STATUS (FetchComplete):\t%s\n", utils.B58encode(msg.MessageID[:]))
}
}
if hasErrors > 0 {
fmt.Print(". Some errors during download.\n")
log.Dataf("STATUS (FetchResult):\tERROS %d\n", hasErrors)
} else {
fmt.Print(". Download complete.\n")
log.Dataf("STATUS (FetchResult):\tOK\n")
}
}
log.Sync()
// server can be set
return 0
}
// CmdIndex returns the index for a private key
func CmdIndex() int {
var server string
var err error
var pubkey *message.Curve25519Key
var privkey message.Curve25519Key
var messages []*structs.MessageStruct
var moreMessages bool
if OptionsVar.Server == "" {
// getPeers(false). Meaningless for index calls
log.Fatal("--index requires --server to be specified.\n")
return 1
}
server = OptionsVar.Server
if OptionsVar.Outdir != "" && !isDir(OptionsVar.Outdir) {
log.Fatalf("outdir does not exist or is no directory: %s", OptionsVar.Outdir)
return 1
}
// privkey must be set
privkeystr := selectPrivKey(OptionsVar.Privkey, GlobalConfigVar.PrivateKey, "tty")
if privkeystr == "" {
log.Fatal("Private key missing: --privkey\n")
return 1
}
// Test if long key is given, if yes, use only first part
if pos := strings.Index(privkeystr, "_"); pos > 0 {
privkeystr = privkeystr[:pos]
}
privT := utils.B58decode(privkeystr)
copy(privkey[:], privT)
pubkey = message.CalcPub(&privkey)
proto := repproto.New(OptionsVar.Socksserver, OptionsVar.Server)
// If we want to change to using the server list instead. Not a great idea
// proto := repproto.New(OptionsVar.Socksserver, OptionsVar.Server, GlobalConfigVar.PasteServers...)
// re-enable if we want to use the server list: server, messages, moreMessages, err = proto.List(pubkey[:], privkey[:], OptionsVar.Start, OptionsVar.Count)
log.Dataf("STATUS (Process):\tLIST\n")
messages, moreMessages, err = proto.ListSpecific(server, pubkey[:], privkey[:], OptionsVar.Start, OptionsVar.Count)
if err != nil {
log.Fatalf("List error: %s\n", err)
return 1
}
if len(messages) > 0 {
fmt.Print("Index\t\tMessageID\n")
fmt.Print("------------------------------------------------------------\n")
}
for _, msg := range messages {
log.Dataf("STATUS (MessageList):\t%d %s %s %d %d\n", msg.Counter, utils.B58encode(msg.MessageID[:]), utils.B58encode(msg.SignerPub[:]), msg.PostTime, msg.ExpireTime)
fmt.Printf("%d\t\t%s\n", msg.Counter, utils.B58encode(msg.MessageID[:]))
}
log.Dataf("STATUS (ListResult):\t%d %d %t\n", OptionsVar.Start, OptionsVar.Count, moreMessages)
if len(messages) > 0 {
fmt.Print("------------------------------------------------------------\n")
}
if moreMessages {
fmt.Print("More messages may be available\n")
} else {
fmt.Print("Listing complete\n")
}
if OptionsVar.Outdir != "" {
log.Dataf("STATUS (Process):\tFETCHMANY\n")
fmt.Print("Fetching messages...")
hasErrors := 0
for _, msg := range messages {
log.Dataf("STATUS (Fetch):\t%s\n", utils.B58encode(msg.MessageID[:]))
err = loadStoreMessage(server, msg.MessageID[:], OptionsVar.Outdir+string(os.PathSeparator)+utils.B58encode(msg.MessageID[:])) // use index server for download, store with name messageID
if err != nil {
fmt.Print(".F")
hasErrors++
log.Dataf("STATUS (FetchError):\t%s\n", utils.B58encode(msg.MessageID[:]))
} else {
fmt.Print(".o")
log.Dataf("STATUS (FetchComplete):\t%s\n", utils.B58encode(msg.MessageID[:]))
}
}
if hasErrors > 0 {
fmt.Print(". Some errors during download.\n")
log.Dataf("STATUS (FetchResult):\tERROS %d\n", hasErrors)
} else {
fmt.Print(". Download complete.\n")
log.Dataf("STATUS (FetchResult):\tOK\n")
}
}
log.Sync()
// server can be set
return 0
}