aliquot-pay 0.5.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: ea8a43259ca5f437e1aa0d86b3c8ee3b93a257ec1ebcd20274cf1d3b0d7fdea6
+  data.tar.gz: f231c69d8d5d2314cc0f835cdb55b8e5b60a13200c37a5b6c5ec3eb7fee1c335
+SHA512:
+  metadata.gz: 7d7d6ef3b956607876f48f02c29e24a0b9015cbc569470974bcd8232da578f4f3964bc0936d5f579fe7f9ad44146c95913211cac323205aa5076140ab4d4f7b7
+  data.tar.gz: 3952d7c0b71eca60300e7cea0472392d96f2827abfa721417ec68a17b5e007237f14698d69f80c3ad1f6ae4b467eddd1970695629b1773b1c4deb72aa7530c52

data/lib/aliquot-pay/util.rb

@@ -0,0 +1,29 @@
+require 'openssl'
+require 'hkdf'
+
+module AliquotPay
+  class Util
+    def self.generate_ephemeral_key
+      OpenSSL::PKey::EC.new(AliquotPay::EC_CURVE).generate_key
+    end
+
+    def self.generate_shared_secret(private_key, public_key)
+      private_key.dh_compute_key(public_key)
+    end
+
+    def self.derive_keys(ephemeral_public_key, shared_secret, info)
+      ikm = ephemeral_public_key + shared_secret
+      hbytes = HKDF.new(ikm, algorithm: 'SHA256', info: info).next_bytes(32)
+
+      {
+        aes_key: hbytes[0..15],
+        mac_key: hbytes[16..32],
+      }
+    end
+
+    def self.calculate_tag(mac_key, encrypted_message)
+      digest = OpenSSL::Digest::SHA256.new
+      OpenSSL::HMAC.digest(digest, mac_key, encrypted_message)
+    end
+  end
+end

data/lib/aliquot-pay.rb

@@ -0,0 +1,107 @@
+require 'base64'
+require 'openssl'
+
+require 'aliquot-pay/util'
+
+module AliquotPay
+  class Error < StandardError; end
+
+  EC_CURVE = 'prime256v1'.freeze
+
+  DEFAULTS = {
+    info: 'Google',
+    merchant_id: 'merchant:0123456789',
+  }.freeze
+
+  def self.sign(key, encrypted_message)
+    d = OpenSSL::Digest::SHA256.new
+    def key.private?; private_key?; end
+    Base64.strict_encode64(key.sign(d, encrypted_message))
+  end
+
+  def self.encrypt(cleartext_message, recipient, info = 'Google')
+    eph = AliquotPay::Util.generate_ephemeral_key
+    ss  = AliquotPay::Util.generate_shared_secret(eph, recipient.public_key)
+
+    keys = AliquotPay::Util.derive_keys(eph.public_key.to_bn.to_s(2), ss, info)
+
+    c = OpenSSL::Cipher::AES128.new(:CTR)
+    c.encrypt
+    c.key = keys[:aes_key]
+
+    encrypted_message = c.update(cleartext_message) + c.final
+
+    tag = AliquotPay::Util.calculate_tag(keys[:mac_key], encrypted_message)
+
+    {
+      encryptedMessage: Base64.strict_encode64(encrypted_message),
+      ephemeralPublicKey: Base64.strict_encode64(eph.public_key.to_bn.to_s(2)),
+      tag: Base64.strict_encode64(tag),
+    }
+  end
+
+  # Return a default payment
+  def self.payment(
+    auth_method: :PAN_ONLY,
+    expiration: ((Time.now.to_f + 60 * 5) * 1000).round.to_s
+  )
+    id = Base64.strict_encode64(OpenSSL::Random.random_bytes(24))
+    p = {
+      'messageExpiration'    => expiration,
+      'messageId'            => id,
+      'paymentMethod'        => 'CARD',
+      'paymentMethodDetails' => {
+        'expirationYear'  => 2023,
+        'expirationMonth' => 12,
+        'pan'             => '4111111111111111',
+        'authMethod'      => 'PAN_ONLY',
+      },
+    }
+
+    if auth_method == :CRYPTOGRAM_3DS
+      p['paymentMethodDetails']['authMethod']   = 'CRYPTOGRAM_3DS'
+      p['paymentMethodDetails']['cryptogram']   = 'SOME CRYPTOGRAM'
+      p['paymentMethodDetails']['eciIndicator'] = '05'
+    end
+
+    p
+  end
+
+  # Return a string length as a 4byte little-endian integer, as a string
+  def self.four_byte_length(str)
+    [str.length].pack('V')
+  end
+
+  def self.signature_string(
+    message,
+    recipient_id     = DEFAULTS[:merchant_id],
+    sender_id        = DEFAULTS[:info],
+    protocol_version = 'ECv1'
+  )
+
+    four_byte_length(sender_id) +
+      sender_id +
+      four_byte_length(recipient_id) +
+      recipient_id +
+      four_byte_length(protocol_version) +
+      protocol_version +
+      four_byte_length(message) +
+      message
+  end
+
+  # payment:: Google Pay token as a ruby Hash
+  # signing_key:: OpenSSL::PKEY::EC
+  # recipient::   OpenSSL::PKey::EC
+  # message::     SignedMessage
+  def self.generate_token(payment, signing_key, recipient, message = nil)
+    message ||= AliquotPay.encrypt(JSON.unparse(payment), recipient)
+
+    signature_string = AliquotPay.signature_string(JSON.unparse(message))
+
+    {
+      'protocolVersion' => 'ECv1',
+      'signature' =>       AliquotPay.sign(signing_key, signature_string),
+      'signedMessage' =>   JSON.unparse(message),
+    }
+  end
+end

metadata

@@ -0,0 +1,73 @@
+--- !ruby/object:Gem::Specification
+name: aliquot-pay
+version: !ruby/object:Gem::Version
+  version: 0.5.0
+platform: ruby
+authors:
+- Clearhaus
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2018-09-28 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: hkdf
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.3'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.3'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3'
+description: 
+email: hello@clearhaus.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/aliquot-pay.rb
+- lib/aliquot-pay/util.rb
+homepage: https://github.com/clearhaus/aliquot-pay
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.7.7
+signing_key: 
+specification_version: 4
+summary: Generates Google Pay test dummy tokens
+test_files: []