Compare commits
26 Commits
v0.1.0
...
d530358359
| Author | SHA1 | Date | |
|---|---|---|---|
| d530358359 | |||
| 0e370a8e19 | |||
| b6aa28e1ee | |||
| 2e10842c54 | |||
| 0e2af1f2a3 | |||
| 80e1b20f27 | |||
| f68e45af26 | |||
| 345596923e | |||
| d5d4aa9014 | |||
| ee7b09bdb0 | |||
| 73613e266f | |||
| 0a03483aaf | |||
| fda06cef55 | |||
| 800b53b11f | |||
| 5a097e4d2a | |||
| 710b3c9497 | |||
| f540a80ec2 | |||
| 44ab31aebb | |||
| e4f1d7d4b0 | |||
| 7600804aa1 | |||
| a4589b6e09 | |||
| d0986a4608 | |||
| 683a76cc80 | |||
| dad707f71d | |||
| 419be8af4d | |||
| fafc4f2320 |
2
.gitlint
2
.gitlint
@@ -5,6 +5,6 @@ line-length=72
|
|||||||
[title-trailing-punctuation]
|
[title-trailing-punctuation]
|
||||||
[title-hard-tab]
|
[title-hard-tab]
|
||||||
[title-match-regex]
|
[title-match-regex]
|
||||||
regex=^(feat|fix|test|release|chore|security|docs|refactor):.*$
|
regex=^(feat|fix|test|release|chore|security|docs|refactor|style):.*$
|
||||||
[body-trailing-whitespace]
|
[body-trailing-whitespace]
|
||||||
[body-first-line-empty]
|
[body-first-line-empty]
|
||||||
|
|||||||
16
CHANGELOG.md
16
CHANGELOG.md
@@ -4,3 +4,19 @@
|
|||||||
- Implement the Double Ratchet, X3DH and OMEMO specific bits
|
- Implement the Double Ratchet, X3DH and OMEMO specific bits
|
||||||
- Add a Blind-Trust-Before-Verification TrustManager
|
- Add a Blind-Trust-Before-Verification TrustManager
|
||||||
- Supported OMEMO version: 0.8.3
|
- Supported OMEMO version: 0.8.3
|
||||||
|
|
||||||
|
## 0.1.3
|
||||||
|
|
||||||
|
- Fix bug with the Double Ratchet causing only the initial message to be decryptable
|
||||||
|
- Expose `getDeviceMap` as a developer usable function
|
||||||
|
|
||||||
|
## 0.2.0
|
||||||
|
|
||||||
|
- Add convenience functions `getDeviceId` and `getDeviceBundle`
|
||||||
|
- Creating a new ratchet with an id for which we already have a ratchet will now overwrite the old ratchet
|
||||||
|
- Ratchet now carry an "acknowledged" attribute
|
||||||
|
|
||||||
|
## 0.2.1
|
||||||
|
|
||||||
|
- Add `isRatchetAcknowledged`
|
||||||
|
- Ratchets that are created due to accepting a kex are now unacknowledged
|
||||||
|
|||||||
@@ -26,10 +26,10 @@ Include `omemo_dart` in your `pubspec.yaml` like this:
|
|||||||
# [...]
|
# [...]
|
||||||
|
|
||||||
dependencies:
|
dependencies:
|
||||||
omemo_dart:
|
omemo_dart:
|
||||||
hosted: https://git.polynom.me/api/packages/PapaTutuWawa/pub
|
hosted: https://git.polynom.me/api/packages/PapaTutuWawa/pub
|
||||||
version: ^0.1.0
|
version: ^0.2.0
|
||||||
# [...]
|
# [...]
|
||||||
|
|
||||||
# [...]
|
# [...]
|
||||||
```
|
```
|
||||||
|
|||||||
@@ -65,7 +65,7 @@ void main() async {
|
|||||||
// a new session. Let's also assume that Bob only has one device. We may, however,
|
// a new session. Let's also assume that Bob only has one device. We may, however,
|
||||||
// add more bundles to newSessions, if we know of more.
|
// add more bundles to newSessions, if we know of more.
|
||||||
newSessions: [
|
newSessions: [
|
||||||
await (await bobSession.getDevice()).toBundle(),
|
await bobSession.getDeviceBundle(),
|
||||||
],
|
],
|
||||||
);
|
);
|
||||||
|
|
||||||
|
|||||||
@@ -67,6 +67,7 @@ class OmemoDoubleRatchet {
|
|||||||
this.ik,
|
this.ik,
|
||||||
this.sessionAd,
|
this.sessionAd,
|
||||||
this.mkSkipped, // MKSKIPPED
|
this.mkSkipped, // MKSKIPPED
|
||||||
|
this.acknowledged,
|
||||||
);
|
);
|
||||||
|
|
||||||
factory OmemoDoubleRatchet.fromJson(Map<String, dynamic> data) {
|
factory OmemoDoubleRatchet.fromJson(Map<String, dynamic> data) {
|
||||||
@@ -83,6 +84,7 @@ class OmemoDoubleRatchet {
|
|||||||
'pn': 0,
|
'pn': 0,
|
||||||
'ik_pub': 'base/64/encoded',
|
'ik_pub': 'base/64/encoded',
|
||||||
'session_ad': 'base/64/encoded',
|
'session_ad': 'base/64/encoded',
|
||||||
|
'acknowledged': true | false,
|
||||||
'mkskipped': [
|
'mkskipped': [
|
||||||
{
|
{
|
||||||
'key': 'base/64/encoded',
|
'key': 'base/64/encoded',
|
||||||
@@ -117,6 +119,7 @@ class OmemoDoubleRatchet {
|
|||||||
),
|
),
|
||||||
base64.decode(data['session_ad']! as String),
|
base64.decode(data['session_ad']! as String),
|
||||||
mkSkipped,
|
mkSkipped,
|
||||||
|
data['acknowledged']! as bool,
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -148,6 +151,10 @@ class OmemoDoubleRatchet {
|
|||||||
|
|
||||||
final Map<SkippedKey, List<int>> mkSkipped;
|
final Map<SkippedKey, List<int>> mkSkipped;
|
||||||
|
|
||||||
|
/// Indicates whether we received an empty OMEMO message after building a session with
|
||||||
|
/// the device.
|
||||||
|
bool acknowledged;
|
||||||
|
|
||||||
/// Create an OMEMO session using the Signed Pre Key [spk], the shared secret [sk] that
|
/// Create an OMEMO session using the Signed Pre Key [spk], the shared secret [sk] that
|
||||||
/// was obtained using a X3DH and the associated data [ad] that was also obtained through
|
/// was obtained using a X3DH and the associated data [ad] that was also obtained through
|
||||||
/// a X3DH. [ik] refers to Bob's (the receiver's) IK public key.
|
/// a X3DH. [ik] refers to Bob's (the receiver's) IK public key.
|
||||||
@@ -169,6 +176,7 @@ class OmemoDoubleRatchet {
|
|||||||
ik,
|
ik,
|
||||||
ad,
|
ad,
|
||||||
{},
|
{},
|
||||||
|
false,
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -189,6 +197,7 @@ class OmemoDoubleRatchet {
|
|||||||
ik,
|
ik,
|
||||||
ad,
|
ad,
|
||||||
{},
|
{},
|
||||||
|
false,
|
||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -214,6 +223,7 @@ class OmemoDoubleRatchet {
|
|||||||
'ik_pub': base64.encode(await ik.getBytes()),
|
'ik_pub': base64.encode(await ik.getBytes()),
|
||||||
'session_ad': base64.encode(sessionAd),
|
'session_ad': base64.encode(sessionAd),
|
||||||
'mkskipped': mkSkippedSerialised,
|
'mkskipped': mkSkippedSerialised,
|
||||||
|
'acknowledged': acknowledged,
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -293,7 +303,11 @@ class OmemoDoubleRatchet {
|
|||||||
return plaintext;
|
return plaintext;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (header.dhPub != await dhr?.getBytes()) {
|
final dhPubMatches = listsEqual(
|
||||||
|
header.dhPub ?? <int>[],
|
||||||
|
await dhr?.getBytes() ?? <int>[],
|
||||||
|
);
|
||||||
|
if (!dhPubMatches) {
|
||||||
await _skipMessageKeys(header.pn!);
|
await _skipMessageKeys(header.pn!);
|
||||||
await _dhRatchet(header);
|
await _dhRatchet(header);
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -163,6 +163,23 @@ class Device {
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/// Returns a new device that is equal to this one with the exception that the new
|
||||||
|
/// device's id is a new number between 0 and 2**32 - 1.
|
||||||
|
@internal
|
||||||
|
Device withNewId() {
|
||||||
|
return Device(
|
||||||
|
jid,
|
||||||
|
generateRandom32BitNumber(),
|
||||||
|
ik,
|
||||||
|
spk,
|
||||||
|
spkId,
|
||||||
|
spkSignature,
|
||||||
|
oldSpk,
|
||||||
|
oldSpkId,
|
||||||
|
opks,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
/// Converts this device into an OmemoBundle that could be used for publishing.
|
/// Converts this device into an OmemoBundle that could be used for publishing.
|
||||||
Future<OmemoBundle> toBundle() async {
|
Future<OmemoBundle> toBundle() async {
|
||||||
final encodedOpks = <int, String>{};
|
final encodedOpks = <int, String>{};
|
||||||
|
|||||||
@@ -12,6 +12,14 @@ class RatchetModifiedEvent extends OmemoEvent {
|
|||||||
final OmemoDoubleRatchet ratchet;
|
final OmemoDoubleRatchet ratchet;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/// Triggered when a ratchet has been removed and should be removed from storage.
|
||||||
|
class RatchetRemovedEvent extends OmemoEvent {
|
||||||
|
|
||||||
|
RatchetRemovedEvent(this.jid, this.deviceId);
|
||||||
|
final String jid;
|
||||||
|
final int deviceId;
|
||||||
|
}
|
||||||
|
|
||||||
/// Triggered when the device map has been modified
|
/// Triggered when the device map has been modified
|
||||||
class DeviceMapModifiedEvent extends OmemoEvent {
|
class DeviceMapModifiedEvent extends OmemoEvent {
|
||||||
|
|
||||||
|
|||||||
@@ -50,6 +50,17 @@ class OmemoSessionManager {
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/// Deserialise the OmemoSessionManager from JSON data [data] that does not contain
|
||||||
|
/// the ratchet sessions.
|
||||||
|
factory OmemoSessionManager.fromJsonWithoutSessions(Map<String, dynamic> data, Map<RatchetMapKey, OmemoDoubleRatchet> ratchetMap, TrustManager trustManager) {
|
||||||
|
return OmemoSessionManager(
|
||||||
|
Device.fromJson(data['device']! as Map<String, dynamic>),
|
||||||
|
data['devices']! as Map<String, List<int>>,
|
||||||
|
ratchetMap,
|
||||||
|
trustManager,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
|
||||||
/// Generate a new cryptographic identity.
|
/// Generate a new cryptographic identity.
|
||||||
static Future<OmemoSessionManager> generateNewIdentity(String jid, TrustManager trustManager, { int opkAmount = 100 }) async {
|
static Future<OmemoSessionManager> generateNewIdentity(String jid, TrustManager trustManager, { int opkAmount = 100 }) async {
|
||||||
assert(opkAmount > 0, 'opkAmount must be bigger than 0.');
|
assert(opkAmount > 0, 'opkAmount must be bigger than 0.');
|
||||||
@@ -83,6 +94,7 @@ class OmemoSessionManager {
|
|||||||
/// A stream that receives events regarding the session
|
/// A stream that receives events regarding the session
|
||||||
Stream<OmemoEvent> get eventStream => _eventStreamController.stream;
|
Stream<OmemoEvent> get eventStream => _eventStreamController.stream;
|
||||||
|
|
||||||
|
/// Returns our own device.
|
||||||
Future<Device> getDevice() async {
|
Future<Device> getDevice() async {
|
||||||
Device? dev;
|
Device? dev;
|
||||||
await _deviceLock.synchronized(() async {
|
await _deviceLock.synchronized(() async {
|
||||||
@@ -92,27 +104,40 @@ class OmemoSessionManager {
|
|||||||
return dev!;
|
return dev!;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/// Returns the id attribute of our own device. This is just a short-hand for
|
||||||
|
/// ```await (session.getDevice()).id```.
|
||||||
|
Future<int> getDeviceId() async {
|
||||||
|
return _deviceLock.synchronized(() => _device.id);
|
||||||
|
}
|
||||||
|
|
||||||
|
/// Returns the device as an OmemoBundle. This is just a short-hand for
|
||||||
|
/// ```await (await session.getDevice()).toBundle()```.
|
||||||
|
Future<OmemoBundle> getDeviceBundle() async {
|
||||||
|
return _deviceLock.synchronized(() async => _device.toBundle());
|
||||||
|
}
|
||||||
|
|
||||||
/// Add a session [ratchet] with the [deviceId] to the internal tracking state.
|
/// Add a session [ratchet] with the [deviceId] to the internal tracking state.
|
||||||
Future<void> _addSession(String jid, int deviceId, OmemoDoubleRatchet ratchet) async {
|
Future<void> _addSession(String jid, int deviceId, OmemoDoubleRatchet ratchet) async {
|
||||||
await _lock.synchronized(() async {
|
await _lock.synchronized(() async {
|
||||||
// Add the bundle Id
|
// Add the bundle Id
|
||||||
if (!_deviceMap.containsKey(jid)) {
|
if (!_deviceMap.containsKey(jid)) {
|
||||||
_deviceMap[jid] = [deviceId];
|
_deviceMap[jid] = [deviceId];
|
||||||
} else {
|
|
||||||
_deviceMap[jid]!.add(deviceId);
|
|
||||||
}
|
|
||||||
|
|
||||||
// Commit the device map
|
// Commit the device map
|
||||||
_eventStreamController.add(DeviceMapModifiedEvent(_deviceMap));
|
_eventStreamController.add(DeviceMapModifiedEvent(_deviceMap));
|
||||||
|
} else {
|
||||||
|
// Prevent having the same device multiple times in the list
|
||||||
|
if (!_deviceMap[jid]!.contains(deviceId)) {
|
||||||
|
_deviceMap[jid]!.add(deviceId);
|
||||||
|
|
||||||
|
// Commit the device map
|
||||||
|
_eventStreamController.add(DeviceMapModifiedEvent(_deviceMap));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
// Add the ratchet session
|
// Add the ratchet session
|
||||||
final key = RatchetMapKey(jid, deviceId);
|
final key = RatchetMapKey(jid, deviceId);
|
||||||
if (!_ratchetMap.containsKey(key)) {
|
_ratchetMap[key] = ratchet;
|
||||||
_ratchetMap[key] = ratchet;
|
|
||||||
} else {
|
|
||||||
// TODO(PapaTutuWawa): What do we do now?
|
|
||||||
throw Exception();
|
|
||||||
}
|
|
||||||
|
|
||||||
// Commit the ratchet
|
// Commit the ratchet
|
||||||
_eventStreamController.add(RatchetModifiedEvent(jid, deviceId, ratchet));
|
_eventStreamController.add(RatchetModifiedEvent(jid, deviceId, ratchet));
|
||||||
@@ -387,11 +412,90 @@ class OmemoSessionManager {
|
|||||||
});
|
});
|
||||||
}
|
}
|
||||||
|
|
||||||
@visibleForTesting
|
/// Returns the device map, i.e. the mapping of bare Jid to its device identifiers
|
||||||
OmemoDoubleRatchet getRatchet(String jid, int deviceId) => _ratchetMap[RatchetMapKey(jid, deviceId)]!;
|
/// we have built sessions with.
|
||||||
|
Future<Map<String, List<int>>> getDeviceMap() async {
|
||||||
|
return _lock.synchronized(() => _deviceMap);
|
||||||
|
}
|
||||||
|
|
||||||
|
/// Removes the ratchet identified by [jid] and [deviceId] from the session manager.
|
||||||
|
/// Also triggers events for commiting the new device map to storage and removing
|
||||||
|
/// the old ratchet.
|
||||||
|
Future<void> removeRatchet(String jid, int deviceId) async {
|
||||||
|
await _lock.synchronized(() async {
|
||||||
|
// Remove the ratchet
|
||||||
|
_ratchetMap.remove(RatchetMapKey(jid, deviceId));
|
||||||
|
// Commit it
|
||||||
|
_eventStreamController.add(RatchetRemovedEvent(jid, deviceId));
|
||||||
|
|
||||||
|
// Remove the device from jid
|
||||||
|
_deviceMap[jid]!.remove(deviceId);
|
||||||
|
if (_deviceMap[jid]!.isEmpty) {
|
||||||
|
_deviceMap.remove(jid);
|
||||||
|
}
|
||||||
|
// Commit it
|
||||||
|
_eventStreamController.add(DeviceMapModifiedEvent(_deviceMap));
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
/// Returns the list of device identifiers belonging to [jid] that are yet unacked, i.e.
|
||||||
|
/// we have not yet received an empty OMEMO message from.
|
||||||
|
Future<List<int>?> getUnacknowledgedRatchets(String jid) async {
|
||||||
|
return _lock.synchronized(() async {
|
||||||
|
final ret = List<int>.empty(growable: true);
|
||||||
|
final devices = _deviceMap[jid];
|
||||||
|
if (devices == null) return null;
|
||||||
|
|
||||||
|
for (final device in devices) {
|
||||||
|
final ratchet = _ratchetMap[RatchetMapKey(jid, device)]!;
|
||||||
|
if (!ratchet.acknowledged) ret.add(device);
|
||||||
|
}
|
||||||
|
|
||||||
|
return ret;
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
/// Returns true if the ratchet for [jid] with device identifier [deviceId] is
|
||||||
|
/// acknowledged. Returns false if not.
|
||||||
|
Future<bool> isRatchetAcknowledged(String jid, int deviceId) async {
|
||||||
|
return _lock.synchronized(() => _ratchetMap[RatchetMapKey(jid, deviceId)]!.acknowledged);
|
||||||
|
}
|
||||||
|
|
||||||
|
/// Mark the ratchet for device [deviceId] from [jid] as acked.
|
||||||
|
Future<void> ratchetAcknowledged(String jid, int deviceId) async {
|
||||||
|
await _lock.synchronized(() async {
|
||||||
|
final ratchet = _ratchetMap[RatchetMapKey(jid, deviceId)]!
|
||||||
|
..acknowledged = true;
|
||||||
|
|
||||||
|
// Commit it
|
||||||
|
_eventStreamController.add(RatchetModifiedEvent(jid, deviceId, ratchet));
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
/// Generates an entirely new device. May be useful when the user wants to reset their cryptographic
|
||||||
|
/// identity. Triggers an event to commit it to storage.
|
||||||
|
Future<void> regenerateDevice({ int opkAmount = 100 }) async {
|
||||||
|
await _deviceLock.synchronized(() async {
|
||||||
|
_device = await Device.generateNewDevice(_device.jid, opkAmount: opkAmount);
|
||||||
|
|
||||||
|
// Commit it
|
||||||
|
_eventStreamController.add(DeviceModifiedEvent(_device));
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
|
/// Make our device have a new identifier. Only useful before publishing it as a bundle
|
||||||
|
/// to make sure that our device has a id that is account unique.
|
||||||
|
Future<void> regenerateDeviceId() async {
|
||||||
|
await _deviceLock.synchronized(() async {
|
||||||
|
_device = _device.withNewId();
|
||||||
|
|
||||||
|
// Commit it
|
||||||
|
_eventStreamController.add(DeviceModifiedEvent(_device));
|
||||||
|
});
|
||||||
|
}
|
||||||
|
|
||||||
@visibleForTesting
|
@visibleForTesting
|
||||||
Map<String, List<int>> getDeviceMap() => _deviceMap;
|
OmemoDoubleRatchet getRatchet(String jid, int deviceId) => _ratchetMap[RatchetMapKey(jid, deviceId)]!;
|
||||||
|
|
||||||
@visibleForTesting
|
@visibleForTesting
|
||||||
Map<RatchetMapKey, OmemoDoubleRatchet> getRatchetMap() => _ratchetMap;
|
Map<RatchetMapKey, OmemoDoubleRatchet> getRatchetMap() => _ratchetMap;
|
||||||
@@ -414,7 +518,6 @@ class OmemoSessionManager {
|
|||||||
},
|
},
|
||||||
...
|
...
|
||||||
],
|
],
|
||||||
'trust': { ... }
|
|
||||||
}
|
}
|
||||||
*/
|
*/
|
||||||
|
|
||||||
@@ -430,8 +533,25 @@ class OmemoSessionManager {
|
|||||||
'devices': _deviceMap,
|
'devices': _deviceMap,
|
||||||
'device': await (await getDevice()).toJson(),
|
'device': await (await getDevice()).toJson(),
|
||||||
'sessions': sessions,
|
'sessions': sessions,
|
||||||
// TODO(PapaTutuWawa): Implement
|
};
|
||||||
'trust': <String, dynamic>{},
|
}
|
||||||
|
|
||||||
|
/// Serialise the entire session manager into a JSON object.
|
||||||
|
Future<Map<String, dynamic>> toJsonWithoutSessions() async {
|
||||||
|
/*
|
||||||
|
{
|
||||||
|
'devices': {
|
||||||
|
'alice@...': [1, 2, ...],
|
||||||
|
'bob@...': [1],
|
||||||
|
...
|
||||||
|
},
|
||||||
|
'device': { ... },
|
||||||
|
}
|
||||||
|
*/
|
||||||
|
|
||||||
|
return {
|
||||||
|
'devices': _deviceMap,
|
||||||
|
'device': await (await getDevice()).toJson(),
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
name: omemo_dart
|
name: omemo_dart
|
||||||
description: An XMPP library independent OMEMO library
|
description: An XMPP library independent OMEMO library
|
||||||
version: 0.1.0
|
version: 0.2.1
|
||||||
homepage: https://github.com/PapaTutuWawa/omemo_dart
|
homepage: https://github.com/PapaTutuWawa/omemo_dart
|
||||||
publish_to: https://git.polynom.me/api/packages/PapaTutuWawa/pub
|
publish_to: https://git.polynom.me/api/packages/PapaTutuWawa/pub
|
||||||
|
|
||||||
@@ -11,7 +11,7 @@ dependencies:
|
|||||||
collection: ^1.16.0
|
collection: ^1.16.0
|
||||||
cryptography: ^2.0.5
|
cryptography: ^2.0.5
|
||||||
hex: ^0.2.0
|
hex: ^0.2.0
|
||||||
meta: ^1.8.0
|
meta: ^1.7.0
|
||||||
pinenacl: ^0.5.1
|
pinenacl: ^0.5.1
|
||||||
synchronized: ^3.0.0+2
|
synchronized: ^3.0.0+2
|
||||||
|
|
||||||
|
|||||||
@@ -7,7 +7,6 @@ void main() {
|
|||||||
test('Test using OMEMO sessions with only one device per user', () async {
|
test('Test using OMEMO sessions with only one device per user', () async {
|
||||||
const aliceJid = 'alice@server.example';
|
const aliceJid = 'alice@server.example';
|
||||||
const bobJid = 'bob@other.server.example';
|
const bobJid = 'bob@other.server.example';
|
||||||
|
|
||||||
// Alice and Bob generate their sessions
|
// Alice and Bob generate their sessions
|
||||||
var deviceModified = false;
|
var deviceModified = false;
|
||||||
var ratchetModified = 0;
|
var ratchetModified = 0;
|
||||||
@@ -39,7 +38,7 @@ void main() {
|
|||||||
bobJid,
|
bobJid,
|
||||||
messagePlaintext,
|
messagePlaintext,
|
||||||
newSessions: [
|
newSessions: [
|
||||||
await (await bobSession.getDevice()).toBundle(),
|
await bobSession.getDeviceBundle(),
|
||||||
],
|
],
|
||||||
);
|
);
|
||||||
expect(aliceMessage.encryptedKeys.length, 1);
|
expect(aliceMessage.encryptedKeys.length, 1);
|
||||||
@@ -51,7 +50,7 @@ void main() {
|
|||||||
final bobMessage = await bobSession.decryptMessage(
|
final bobMessage = await bobSession.decryptMessage(
|
||||||
aliceMessage.ciphertext,
|
aliceMessage.ciphertext,
|
||||||
aliceJid,
|
aliceJid,
|
||||||
(await aliceSession.getDevice()).id,
|
await aliceSession.getDeviceId(),
|
||||||
aliceMessage.encryptedKeys,
|
aliceMessage.encryptedKeys,
|
||||||
);
|
);
|
||||||
expect(messagePlaintext, bobMessage);
|
expect(messagePlaintext, bobMessage);
|
||||||
@@ -82,7 +81,7 @@ void main() {
|
|||||||
final aliceReceivedMessage = await aliceSession.decryptMessage(
|
final aliceReceivedMessage = await aliceSession.decryptMessage(
|
||||||
bobResponseMessage.ciphertext,
|
bobResponseMessage.ciphertext,
|
||||||
bobJid,
|
bobJid,
|
||||||
(await bobSession.getDevice()).id,
|
await bobSession.getDeviceId(),
|
||||||
bobResponseMessage.encryptedKeys,
|
bobResponseMessage.encryptedKeys,
|
||||||
);
|
);
|
||||||
expect(bobResponseText, aliceReceivedMessage);
|
expect(bobResponseText, aliceReceivedMessage);
|
||||||
@@ -116,8 +115,8 @@ void main() {
|
|||||||
bobJid,
|
bobJid,
|
||||||
messagePlaintext,
|
messagePlaintext,
|
||||||
newSessions: [
|
newSessions: [
|
||||||
await (await bobSession.getDevice()).toBundle(),
|
await bobSession.getDeviceBundle(),
|
||||||
await (await bobSession2.getDevice()).toBundle(),
|
await bobSession2.getDeviceBundle(),
|
||||||
],
|
],
|
||||||
);
|
);
|
||||||
expect(aliceMessage.encryptedKeys.length, 2);
|
expect(aliceMessage.encryptedKeys.length, 2);
|
||||||
@@ -131,7 +130,7 @@ void main() {
|
|||||||
final bobMessage = await bobSession.decryptMessage(
|
final bobMessage = await bobSession.decryptMessage(
|
||||||
aliceMessage.ciphertext,
|
aliceMessage.ciphertext,
|
||||||
aliceJid,
|
aliceJid,
|
||||||
(await aliceSession.getDevice()).id,
|
await aliceSession.getDeviceId(),
|
||||||
aliceMessage.encryptedKeys,
|
aliceMessage.encryptedKeys,
|
||||||
);
|
);
|
||||||
expect(messagePlaintext, bobMessage);
|
expect(messagePlaintext, bobMessage);
|
||||||
@@ -150,7 +149,7 @@ void main() {
|
|||||||
final aliceReceivedMessage = await aliceSession.decryptMessage(
|
final aliceReceivedMessage = await aliceSession.decryptMessage(
|
||||||
bobResponseMessage.ciphertext,
|
bobResponseMessage.ciphertext,
|
||||||
bobJid,
|
bobJid,
|
||||||
(await bobSession.getDevice()).id,
|
await bobSession.getDeviceId(),
|
||||||
bobResponseMessage.encryptedKeys,
|
bobResponseMessage.encryptedKeys,
|
||||||
);
|
);
|
||||||
expect(bobResponseText, aliceReceivedMessage);
|
expect(bobResponseText, aliceReceivedMessage);
|
||||||
@@ -193,8 +192,8 @@ void main() {
|
|||||||
[bobJid, aliceJid],
|
[bobJid, aliceJid],
|
||||||
messagePlaintext,
|
messagePlaintext,
|
||||||
newSessions: [
|
newSessions: [
|
||||||
await (await bobSession.getDevice()).toBundle(),
|
await bobSession.getDeviceBundle(),
|
||||||
await (await aliceSession2.getDevice()).toBundle(),
|
await aliceSession2.getDeviceBundle(),
|
||||||
],
|
],
|
||||||
);
|
);
|
||||||
expect(aliceMessage.encryptedKeys.length, 2);
|
expect(aliceMessage.encryptedKeys.length, 2);
|
||||||
@@ -206,7 +205,7 @@ void main() {
|
|||||||
final bobMessage = await bobSession.decryptMessage(
|
final bobMessage = await bobSession.decryptMessage(
|
||||||
aliceMessage.ciphertext,
|
aliceMessage.ciphertext,
|
||||||
aliceJid,
|
aliceJid,
|
||||||
(await aliceSession1.getDevice()).id,
|
await aliceSession1.getDeviceId(),
|
||||||
aliceMessage.encryptedKeys,
|
aliceMessage.encryptedKeys,
|
||||||
);
|
);
|
||||||
expect(messagePlaintext, bobMessage);
|
expect(messagePlaintext, bobMessage);
|
||||||
@@ -215,7 +214,7 @@ void main() {
|
|||||||
final aliceMessage2 = await aliceSession2.decryptMessage(
|
final aliceMessage2 = await aliceSession2.decryptMessage(
|
||||||
aliceMessage.ciphertext,
|
aliceMessage.ciphertext,
|
||||||
aliceJid,
|
aliceJid,
|
||||||
(await aliceSession1.getDevice()).id,
|
await aliceSession1.getDeviceId(),
|
||||||
aliceMessage.encryptedKeys,
|
aliceMessage.encryptedKeys,
|
||||||
);
|
);
|
||||||
expect(messagePlaintext, aliceMessage2);
|
expect(messagePlaintext, aliceMessage2);
|
||||||
@@ -242,7 +241,7 @@ void main() {
|
|||||||
bobJid,
|
bobJid,
|
||||||
null,
|
null,
|
||||||
newSessions: [
|
newSessions: [
|
||||||
await (await bobSession.getDevice()).toBundle(),
|
await bobSession.getDeviceBundle(),
|
||||||
],
|
],
|
||||||
);
|
);
|
||||||
expect(aliceMessage.encryptedKeys.length, 1);
|
expect(aliceMessage.encryptedKeys.length, 1);
|
||||||
@@ -255,13 +254,13 @@ void main() {
|
|||||||
final bobMessage = await bobSession.decryptMessage(
|
final bobMessage = await bobSession.decryptMessage(
|
||||||
aliceMessage.ciphertext,
|
aliceMessage.ciphertext,
|
||||||
aliceJid,
|
aliceJid,
|
||||||
(await aliceSession.getDevice()).id,
|
await aliceSession.getDeviceId(),
|
||||||
aliceMessage.encryptedKeys,
|
aliceMessage.encryptedKeys,
|
||||||
);
|
);
|
||||||
expect(bobMessage, null);
|
expect(bobMessage, null);
|
||||||
|
|
||||||
// This call must not cause an exception
|
// This call must not cause an exception
|
||||||
bobSession.getRatchet(aliceJid, (await aliceSession.getDevice()).id);
|
bobSession.getRatchet(aliceJid, await aliceSession.getDeviceId());
|
||||||
});
|
});
|
||||||
|
|
||||||
test('Test rotating the Signed Prekey', () async {
|
test('Test rotating the Signed Prekey', () async {
|
||||||
@@ -317,7 +316,7 @@ void main() {
|
|||||||
bobJid,
|
bobJid,
|
||||||
messagePlaintext,
|
messagePlaintext,
|
||||||
newSessions: [
|
newSessions: [
|
||||||
await (await bobSession.getDevice()).toBundle(),
|
await bobSession.getDeviceBundle(),
|
||||||
],
|
],
|
||||||
);
|
);
|
||||||
expect(aliceMessage.encryptedKeys.length, 1);
|
expect(aliceMessage.encryptedKeys.length, 1);
|
||||||
@@ -332,7 +331,7 @@ void main() {
|
|||||||
final bobMessage = await bobSession.decryptMessage(
|
final bobMessage = await bobSession.decryptMessage(
|
||||||
aliceMessage.ciphertext,
|
aliceMessage.ciphertext,
|
||||||
aliceJid,
|
aliceJid,
|
||||||
(await aliceSession.getDevice()).id,
|
await aliceSession.getDeviceId(),
|
||||||
aliceMessage.encryptedKeys,
|
aliceMessage.encryptedKeys,
|
||||||
);
|
);
|
||||||
expect(messagePlaintext, bobMessage);
|
expect(messagePlaintext, bobMessage);
|
||||||
@@ -359,7 +358,7 @@ void main() {
|
|||||||
bobJid,
|
bobJid,
|
||||||
null,
|
null,
|
||||||
newSessions: [
|
newSessions: [
|
||||||
await (await bobSession.getDevice()).toBundle(),
|
await bobSession.getDeviceBundle(),
|
||||||
],
|
],
|
||||||
);
|
);
|
||||||
|
|
||||||
@@ -367,4 +366,252 @@ void main() {
|
|||||||
// untrusted device.
|
// untrusted device.
|
||||||
expect(aliceMessage.encryptedKeys.length, 1);
|
expect(aliceMessage.encryptedKeys.length, 1);
|
||||||
});
|
});
|
||||||
|
|
||||||
|
test('Test by sending multiple messages back and forth', () async {
|
||||||
|
const aliceJid = 'alice@server.example';
|
||||||
|
const bobJid = 'bob@other.server.example';
|
||||||
|
// Alice and Bob generate their sessions
|
||||||
|
final aliceSession = await OmemoSessionManager.generateNewIdentity(
|
||||||
|
aliceJid,
|
||||||
|
AlwaysTrustingTrustManager(),
|
||||||
|
opkAmount: 1,
|
||||||
|
);
|
||||||
|
final bobSession = await OmemoSessionManager.generateNewIdentity(
|
||||||
|
bobJid,
|
||||||
|
AlwaysTrustingTrustManager(),
|
||||||
|
opkAmount: 1,
|
||||||
|
);
|
||||||
|
|
||||||
|
// Alice encrypts a message for Bob
|
||||||
|
final aliceMessage = await aliceSession.encryptToJid(
|
||||||
|
bobJid,
|
||||||
|
'Hello Bob!',
|
||||||
|
newSessions: [
|
||||||
|
await bobSession.getDeviceBundle(),
|
||||||
|
],
|
||||||
|
);
|
||||||
|
|
||||||
|
// Alice sends the message to Bob
|
||||||
|
// ...
|
||||||
|
|
||||||
|
await bobSession.decryptMessage(
|
||||||
|
aliceMessage.ciphertext,
|
||||||
|
aliceJid,
|
||||||
|
await aliceSession.getDeviceId(),
|
||||||
|
aliceMessage.encryptedKeys,
|
||||||
|
);
|
||||||
|
|
||||||
|
for (var i = 0; i < 100; i++) {
|
||||||
|
final messageText = 'Test Message #$i';
|
||||||
|
// Bob responds to Alice
|
||||||
|
final bobResponseMessage = await bobSession.encryptToJid(
|
||||||
|
aliceJid,
|
||||||
|
messageText,
|
||||||
|
);
|
||||||
|
|
||||||
|
// Bob sends the message to Alice
|
||||||
|
// ...
|
||||||
|
|
||||||
|
// Alice decrypts it
|
||||||
|
final aliceReceivedMessage = await aliceSession.decryptMessage(
|
||||||
|
bobResponseMessage.ciphertext,
|
||||||
|
bobJid,
|
||||||
|
await bobSession.getDeviceId(),
|
||||||
|
bobResponseMessage.encryptedKeys,
|
||||||
|
);
|
||||||
|
expect(messageText, aliceReceivedMessage);
|
||||||
|
}
|
||||||
|
});
|
||||||
|
|
||||||
|
group('Test removing a ratchet', () {
|
||||||
|
test('Test removing a ratchet when the user has multiple', () async {
|
||||||
|
const aliceJid = 'alice@server.local';
|
||||||
|
const bobJid = 'bob@some.server.local';
|
||||||
|
final aliceSession = await OmemoSessionManager.generateNewIdentity(
|
||||||
|
aliceJid,
|
||||||
|
AlwaysTrustingTrustManager(),
|
||||||
|
opkAmount: 1,
|
||||||
|
);
|
||||||
|
final bobSession1 = await OmemoSessionManager.generateNewIdentity(
|
||||||
|
bobJid,
|
||||||
|
AlwaysTrustingTrustManager(),
|
||||||
|
opkAmount: 1,
|
||||||
|
);
|
||||||
|
final bobSession2 = await OmemoSessionManager.generateNewIdentity(
|
||||||
|
bobJid,
|
||||||
|
AlwaysTrustingTrustManager(),
|
||||||
|
opkAmount: 1,
|
||||||
|
);
|
||||||
|
|
||||||
|
// Alice sends a message to those two Bobs
|
||||||
|
await aliceSession.encryptToJid(
|
||||||
|
bobJid,
|
||||||
|
'Hallo Welt',
|
||||||
|
newSessions: [
|
||||||
|
await bobSession1.getDeviceBundle(),
|
||||||
|
await bobSession2.getDeviceBundle(),
|
||||||
|
],
|
||||||
|
);
|
||||||
|
|
||||||
|
// One of those two sessions is broken, so Alice removes the session2 ratchet
|
||||||
|
final id1 = await bobSession1.getDeviceId();
|
||||||
|
final id2 = await bobSession2.getDeviceId();
|
||||||
|
await aliceSession.removeRatchet(bobJid, id1);
|
||||||
|
|
||||||
|
final map = aliceSession.getRatchetMap();
|
||||||
|
expect(map.containsKey(RatchetMapKey(bobJid, id1)), false);
|
||||||
|
expect(map.containsKey(RatchetMapKey(bobJid, id2)), true);
|
||||||
|
final deviceMap = await aliceSession.getDeviceMap();
|
||||||
|
expect(deviceMap.containsKey(bobJid), true);
|
||||||
|
expect(deviceMap[bobJid], [id2]);
|
||||||
|
});
|
||||||
|
|
||||||
|
test('Test removing a ratchet when the user has only one', () async {
|
||||||
|
const aliceJid = 'alice@server.local';
|
||||||
|
const bobJid = 'bob@some.server.local';
|
||||||
|
final aliceSession = await OmemoSessionManager.generateNewIdentity(
|
||||||
|
aliceJid,
|
||||||
|
AlwaysTrustingTrustManager(),
|
||||||
|
opkAmount: 1,
|
||||||
|
);
|
||||||
|
final bobSession = await OmemoSessionManager.generateNewIdentity(
|
||||||
|
bobJid,
|
||||||
|
AlwaysTrustingTrustManager(),
|
||||||
|
opkAmount: 1,
|
||||||
|
);
|
||||||
|
|
||||||
|
// Alice sends a message to those two Bobs
|
||||||
|
await aliceSession.encryptToJid(
|
||||||
|
bobJid,
|
||||||
|
'Hallo Welt',
|
||||||
|
newSessions: [
|
||||||
|
await bobSession.getDeviceBundle(),
|
||||||
|
],
|
||||||
|
);
|
||||||
|
|
||||||
|
// One of those two sessions is broken, so Alice removes the session2 ratchet
|
||||||
|
final id = await bobSession.getDeviceId();
|
||||||
|
await aliceSession.removeRatchet(bobJid, id);
|
||||||
|
|
||||||
|
final map = aliceSession.getRatchetMap();
|
||||||
|
expect(map.containsKey(RatchetMapKey(bobJid, id)), false);
|
||||||
|
final deviceMap = await aliceSession.getDeviceMap();
|
||||||
|
expect(deviceMap.containsKey(bobJid), false);
|
||||||
|
});
|
||||||
|
});
|
||||||
|
|
||||||
|
test('Test acknowledging a ratchet', () async {
|
||||||
|
const aliceJid = 'alice@server.example';
|
||||||
|
const bobJid = 'bob@other.server.example';
|
||||||
|
// Alice and Bob generate their sessions
|
||||||
|
final aliceSession = await OmemoSessionManager.generateNewIdentity(
|
||||||
|
aliceJid,
|
||||||
|
AlwaysTrustingTrustManager(),
|
||||||
|
opkAmount: 1,
|
||||||
|
);
|
||||||
|
final bobSession = await OmemoSessionManager.generateNewIdentity(
|
||||||
|
bobJid,
|
||||||
|
AlwaysTrustingTrustManager(),
|
||||||
|
opkAmount: 1,
|
||||||
|
);
|
||||||
|
|
||||||
|
// Alice sends Bob a message
|
||||||
|
await aliceSession.encryptToJid(
|
||||||
|
bobJid,
|
||||||
|
'Hallo Welt',
|
||||||
|
newSessions: [
|
||||||
|
await bobSession.getDeviceBundle(),
|
||||||
|
],
|
||||||
|
);
|
||||||
|
expect(
|
||||||
|
await aliceSession.getUnacknowledgedRatchets(bobJid),
|
||||||
|
[
|
||||||
|
await bobSession.getDeviceId(),
|
||||||
|
],
|
||||||
|
);
|
||||||
|
|
||||||
|
// Bob sends alice an empty message
|
||||||
|
// ...
|
||||||
|
|
||||||
|
// Alice decrypts it
|
||||||
|
// ...
|
||||||
|
|
||||||
|
// Alice marks the ratchet as acknowledged
|
||||||
|
await aliceSession.ratchetAcknowledged(bobJid, await bobSession.getDeviceId());
|
||||||
|
expect(
|
||||||
|
(await aliceSession.getUnacknowledgedRatchets(bobJid))!.isEmpty,
|
||||||
|
true,
|
||||||
|
);
|
||||||
|
});
|
||||||
|
|
||||||
|
test('Test overwriting sessions', () async {
|
||||||
|
const aliceJid = 'alice@server.example';
|
||||||
|
const bobJid = 'bob@other.server.example';
|
||||||
|
// Alice and Bob generate their sessions
|
||||||
|
final aliceSession = await OmemoSessionManager.generateNewIdentity(
|
||||||
|
aliceJid,
|
||||||
|
AlwaysTrustingTrustManager(),
|
||||||
|
opkAmount: 1,
|
||||||
|
);
|
||||||
|
final bobSession = await OmemoSessionManager.generateNewIdentity(
|
||||||
|
bobJid,
|
||||||
|
AlwaysTrustingTrustManager(),
|
||||||
|
opkAmount: 2,
|
||||||
|
);
|
||||||
|
|
||||||
|
// Alice sends Bob a message
|
||||||
|
final msg1 = await aliceSession.encryptToJid(
|
||||||
|
bobJid,
|
||||||
|
'Hallo Welt',
|
||||||
|
newSessions: [
|
||||||
|
await bobSession.getDeviceBundle(),
|
||||||
|
],
|
||||||
|
);
|
||||||
|
await bobSession.decryptMessage(
|
||||||
|
msg1.ciphertext,
|
||||||
|
aliceJid,
|
||||||
|
await aliceSession.getDeviceId(),
|
||||||
|
msg1.encryptedKeys,
|
||||||
|
);
|
||||||
|
final aliceRatchet1 = aliceSession.getRatchet(
|
||||||
|
bobJid,
|
||||||
|
await bobSession.getDeviceId(),
|
||||||
|
);
|
||||||
|
final bobRatchet1 = bobSession.getRatchet(
|
||||||
|
aliceJid,
|
||||||
|
await aliceSession.getDeviceId(),
|
||||||
|
);
|
||||||
|
|
||||||
|
// Alice is impatient and immediately sends another message before the original one
|
||||||
|
// can be acknowledged by Bob
|
||||||
|
final msg2 = await aliceSession.encryptToJid(
|
||||||
|
bobJid,
|
||||||
|
"Why don't you answer?",
|
||||||
|
newSessions: [
|
||||||
|
await bobSession.getDeviceBundle(),
|
||||||
|
],
|
||||||
|
);
|
||||||
|
await bobSession.decryptMessage(
|
||||||
|
msg2.ciphertext,
|
||||||
|
aliceJid,
|
||||||
|
await aliceSession.getDeviceId(),
|
||||||
|
msg2.encryptedKeys,
|
||||||
|
);
|
||||||
|
final aliceRatchet2 = aliceSession.getRatchet(
|
||||||
|
bobJid,
|
||||||
|
await bobSession.getDeviceId(),
|
||||||
|
);
|
||||||
|
final bobRatchet2 = bobSession.getRatchet(
|
||||||
|
aliceJid,
|
||||||
|
await aliceSession.getDeviceId(),
|
||||||
|
);
|
||||||
|
|
||||||
|
// Both should only have one ratchet
|
||||||
|
expect(aliceSession.getRatchetMap().length, 1);
|
||||||
|
expect(bobSession.getRatchetMap().length, 1);
|
||||||
|
|
||||||
|
// The ratchets should both be different
|
||||||
|
expect(await aliceRatchet1.equals(aliceRatchet2), false);
|
||||||
|
expect(await bobRatchet1.equals(bobRatchet2), false);
|
||||||
|
});
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -49,16 +49,16 @@ void main() {
|
|||||||
bobJid,
|
bobJid,
|
||||||
'Hello Bob!',
|
'Hello Bob!',
|
||||||
newSessions: [
|
newSessions: [
|
||||||
await (await bobSession.getDevice()).toBundle(),
|
await bobSession.getDeviceBundle(),
|
||||||
],
|
],
|
||||||
);
|
);
|
||||||
await bobSession.decryptMessage(
|
await bobSession.decryptMessage(
|
||||||
aliceMessage.ciphertext,
|
aliceMessage.ciphertext,
|
||||||
aliceJid,
|
aliceJid,
|
||||||
(await aliceSession.getDevice()).id,
|
await aliceSession.getDeviceId(),
|
||||||
aliceMessage.encryptedKeys,
|
aliceMessage.encryptedKeys,
|
||||||
);
|
);
|
||||||
final aliceOld = aliceSession.getRatchet(bobJid, (await bobSession.getDevice()).id);
|
final aliceOld = aliceSession.getRatchet(bobJid, await bobSession.getDeviceId());
|
||||||
final aliceSerialised = await aliceOld.toJson();
|
final aliceSerialised = await aliceOld.toJson();
|
||||||
final aliceNew = OmemoDoubleRatchet.fromJson(aliceSerialised);
|
final aliceNew = OmemoDoubleRatchet.fromJson(aliceSerialised);
|
||||||
|
|
||||||
@@ -79,8 +79,8 @@ void main() {
|
|||||||
);
|
);
|
||||||
await oldSession.addSessionFromBundle(
|
await oldSession.addSessionFromBundle(
|
||||||
'bob@localhost',
|
'bob@localhost',
|
||||||
(await bobSession.getDevice()).id,
|
await bobSession.getDeviceId(),
|
||||||
await (await bobSession.getDevice()).toBundle(),
|
await bobSession.getDeviceBundle(),
|
||||||
);
|
);
|
||||||
|
|
||||||
// Serialise and deserialise
|
// Serialise and deserialise
|
||||||
@@ -93,7 +93,7 @@ void main() {
|
|||||||
final oldDevice = await oldSession.getDevice();
|
final oldDevice = await oldSession.getDevice();
|
||||||
final newDevice = await newSession.getDevice();
|
final newDevice = await newSession.getDevice();
|
||||||
expect(await oldDevice.equals(newDevice), true);
|
expect(await oldDevice.equals(newDevice), true);
|
||||||
expect(oldSession.getDeviceMap(), newSession.getDeviceMap());
|
expect(await oldSession.getDeviceMap(), await newSession.getDeviceMap());
|
||||||
|
|
||||||
expect(oldSession.getRatchetMap().length, newSession.getRatchetMap().length);
|
expect(oldSession.getRatchetMap().length, newSession.getRatchetMap().length);
|
||||||
for (final session in oldSession.getRatchetMap().entries) {
|
for (final session in oldSession.getRatchetMap().entries) {
|
||||||
|
|||||||
Reference in New Issue
Block a user