@anonympins/fingerprint 0.7.5 → 0.8.1

package/src/php/Tests/QuicFingerprintTest.php

@@ -1,54 +1,116 @@
-<?php
-
-declare(strict_types=1);
-
-namespace Anonympins\Fingerprint\Tests;
-
-use Anonympins\Fingerprint\RequestContext;
-use Anonympins\Fingerprint\Utils\RequestUtils;
-use PHPUnit\Framework\TestCase;
-
-class QuicFingerprintTest extends TestCase
-{
-    public function testGetProtocolAnomalyScoreReturnsZeroIfNoFp(): void
-    {
-        $context = $this->createMock(RequestContext::class);
-        $context->method('getHeader')->willReturn(null);
-        $res = RequestUtils::getProtocolAnomalyScore($context);
-        $this->assertEquals(0.0, $res['protocolAnomalyScore']);
-    }
-
-    public function testGetProtocolAnomalyScoreDetectsSpoofedChrome(): void
-    {
-        $context = $this->createMock(RequestContext::class);
-        $context->method('getHeader')->willReturnCallback(function($name) {
-            if ($name === 'user-agent') {
-                return 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
-            }
-            if ($name === 'x-quic-fp') {
-                return '1;1=65536,4=50;i=0';
-            }
-            return null;
-        });
-
-        $res = RequestUtils::getProtocolAnomalyScore($context);
-        $this->assertEquals(100.0, $res['protocolAnomalyScore']);
-    }
-
-    public function testGetProtocolAnomalyScoreAllowsLegitChrome(): void
-    {
-        $context = $this->createMock(RequestContext::class);
-        $context->method('getHeader')->willReturnCallback(function($name) {
-            if ($name === 'user-agent') {
-                return 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
-            }
-            if ($name === 'x-quic-fp') {
-                return '1;1=1572864,4=100;u=2,i';
-            }
-            return null;
-        });
-
-        $res = RequestUtils::getProtocolAnomalyScore($context);
-        $this->assertEquals(0.0, $res['protocolAnomalyScore']);
-    }
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Tests;
+
+use Anonympins\Fingerprint\RequestContext;
+use Anonympins\Fingerprint\Utils\RequestUtils;
+use PHPUnit\Framework\TestCase;
+
+class QuicFingerprintTest extends TestCase
+{
+    public function testGetProtocolAnomalyScoreReturnsZeroIfNoFp(): void
+    {
+        $context = $this->createMock(RequestContext::class);
+        $context->method('getHeader')->willReturn(null);
+        $res = RequestUtils::getProtocolAnomalyScore($context);
+        $this->assertEquals(0.0, $res['protocolAnomalyScore']);
+    }
+
+    public function testGetProtocolAnomalyScoreDetectsSpoofedChrome(): void
+    {
+        $context = $this->createMock(RequestContext::class);
+        $context->method('getHeader')->willReturnCallback(function($name) {
+            if ($name === 'user-agent') {
+                return 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
+            }
+            if ($name === 'x-quic-fp') {
+                return '1;1=65536,4=50;i=0';
+            }
+            return null;
+        });
+
+        $res = RequestUtils::getProtocolAnomalyScore($context);
+        $this->assertEquals(100.0, $res['protocolAnomalyScore']);
+    }
+
+    public function testGetProtocolAnomalyScoreAllowsLegitChrome(): void
+    {
+        $context = $this->createMock(RequestContext::class);
+        $context->method('getHeader')->willReturnCallback(function($name) {
+            if ($name === 'user-agent') {
+                return 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
+            }
+            if ($name === 'x-quic-fp') {
+                return '1;1=1572864,4=100;u=2,i';
+            }
+            return null;
+        });
+
+        $res = RequestUtils::getProtocolAnomalyScore($context);
+        $this->assertEquals(0.0, $res['protocolAnomalyScore']);
+    }
+
+    public function testRfc9218PriorityWithoutIncrementalFlag(): void
+    {
+        $context = $this->createMock(RequestContext::class);
+        $context->method('getHeader')->willReturnCallback(function($name) {
+            if ($name === 'user-agent') return 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
+            if ($name === 'x-quic-fp') return '1;1=1572864,4=100;u=2'; // Manque le drapeau 'i'
+            return null;
+        });
+        $res = RequestUtils::getProtocolAnomalyScore($context);
+        $this->assertEquals(40.0, $res['quicAnomalyScore']);
+    }
+
+    public function testCompressionRatioPenalty(): void
+    {
+        $context = $this->createMock(RequestContext::class);
+        $context->method('getHeader')->willReturnCallback(function($name) {
+            if ($name === 'user-agent') return 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
+            if ($name === 'x-compression-info') return 'req_count:5,hpack_ratio:0.2';
+            return null;
+        });
+        $res = RequestUtils::getProtocolAnomalyScore($context);
+        $this->assertEquals(40.0, $res['http2AnomalyScore']);
+    }
+
+    public function testRfc9218UrgencyOutOfRange(): void
+    {
+        $context = $this->createMock(RequestContext::class);
+        $context->method('getHeader')->willReturnCallback(function($name) {
+            if ($name === 'user-agent') return 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
+            if ($name === 'x-quic-fp') return '1;1=1572864,4=100;u=9,i';
+            return null;
+        });
+        $res = RequestUtils::getProtocolAnomalyScore($context);
+        $this->assertGreaterThanOrEqual(50.0, $res['quicAnomalyScore']);
+    }
+
+    public function testHttp2DefaultGoScraperDependencyTree(): void
+    {
+        $context = $this->createMock(RequestContext::class);
+        $context->method('getHeader')->willReturnCallback(function($name) {
+            if ($name === 'user-agent') return 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
+            if ($name === 'x-http2-fingerprint') return 's:1:65536,2:0,3:1000,4:6291456,6:262144|15663105|1:0:0:16|m,a,s,p|p:3,w:4,c:1';
+            return null;
+        });
+        $context->httpVersion = '2.0';
+        $res = RequestUtils::getProtocolAnomalyScore($context);
+        $this->assertGreaterThanOrEqual(55.0, $res['http2AnomalyScore']);
+    }
+
+    public function testScraperWithZeroDynamicTableEntries(): void
+    {
+        $context = $this->createMock(RequestContext::class);
+        $context->method('getHeader')->willReturnCallback(function($name) {
+            if ($name === 'user-agent') return 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
+            if ($name === 'x-compression-info') return 'req_count:5,dynamic_table_entries:0';
+            return null;
+        });
+        $context->httpVersion = '2.0';
+        $res = RequestUtils::getProtocolAnomalyScore($context);
+        $this->assertGreaterThanOrEqual(45.0, $res['http2AnomalyScore']);
+    }
 }

package/src/php/Tests/ThreatIntelTest.php

@@ -70,7 +70,7 @@ class ThreatIntelTest extends TestCase
             'differentialPrivacy' => [
                 'enabled' => true,
                 'epsilon' => 1.0,
-                'dummyRate' => 1.0 // Forcer l'injection d'un leurre pour le test
+                'dummyRate' => 1.0 // Force decoy injection for test
             ]
         ];
 
@@ -93,6 +93,6 @@ class ThreatIntelTest extends TestCase
         $realZkpY = 'realzkpykey12345';
         $broadcastMethod->invoke($engineSub, $realZkpY);
 
-        $this->assertCount(2, $postedCalls, 'Doit diffuser à la fois la clé réelle et la clé leurre');
+        $this->assertCount(2, $postedCalls, 'Should broadcast both real and decoy keys');
     }
 }

package/src/php/Utils/BigInt.php

@@ -1,203 +1,203 @@
-<?php
-
-declare(strict_types=1);
-
-namespace Anonympins\Fingerprint\Utils;
-
-class BigInt
-{
-    private static ?bool $useGmp = null;
-    /** @var \GMP|string */
-    private $value;
-
-    private static function useGmp(): bool
-    {
-        if (self::$useGmp === null) {
-            self::$useGmp = extension_loaded('gmp');
-        }
-        return self::$useGmp;
-    }
-
-    /**
-     * @param \GMP|string|int $number Le nombre initial.
-     */
-    public function __construct($number)
-    {
-        if (self::useGmp()) {
-            if ($number instanceof \GMP) {
-                $this->value = $number;
-            } else {
-                $str = (string)$number;
-                if (($dot = strpos($str, '.')) !== false) {
-                    $str = substr($str, 0, $dot);
-                }
-                $this->value = gmp_init($str);
-            }
-        } else {
-            if ($number instanceof BigInt) {
-                $this->value = $number->value;
-            } else {
-                $str = (string)$number;
-                if (($dot = strpos($str, '.')) !== false) {
-                    $str = substr($str, 0, $dot);
-                }
-                $this->value = $str;
-            }
-        }
-    }
-
-    /**
-     * Crée une instance à partir d'une chaîne hexadécimale.
-     */
-    public static function fromHex(string $hex): BigInt
-    {
-        $hex = trim(strtolower($hex));
-        if (substr($hex, 0, 2) === '0x') {
-            $hex = substr($hex, 2);
-        }
-        if (self::useGmp()) {
-            return new self(gmp_init($hex, 16));
-        } else {
-            $dec = '0';
-            $len = strlen($hex);
-            for ($i = 0; $i < $len; $i++) {
-                $dec = bcadd(bcmul($dec, '16', 0), (string)hexdec($hex[$i]), 0);
-            }
-            return new self($dec);
-        }
-    }
-
-    /**
-     * Compare cette instance avec une autre.
-     * @return int < 0 si this < other, 0 si this == other, > 0 si this > other.
-     */
-    public function compareTo(BigInt $other): int
-    {
-        if (self::useGmp()) {
-            return gmp_cmp($this->value, $other->value);
-        } else {
-            return bccomp($this->value, $other->value, 0);
-        }
-    }
-
-    /**
-     * Effectue un décalage de bits vers la gauche (<<).
-     */
-    public function shiftLeft(int $bits): BigInt
-    {
-        if (self::useGmp()) {
-            return new self(gmp_mul($this->value, gmp_pow("2", $bits)));
-        } else {
-            return new self(bcmul($this->value, bcpow("2", (string)$bits, 0), 0));
-        }
-    }
-
-    /**
-     * Effectue un décalage de bits vers la droite (>>).
-     */
-    public function shiftRight(int $bits): BigInt
-    {
-        if (self::useGmp()) {
-            return new self(gmp_div_q($this->value, gmp_pow("2", $bits)));
-        } else {
-            return new self(bcdiv($this->value, bcpow("2", (string)$bits, 0), 0));
-        }
-    }
-
-    /**
-     * Retourne la représentation en chaîne de caractères.
-     */
-    public function __toString(): string
-    {
-        if (self::useGmp()) {
-            return gmp_strval($this->value);
-        } else {
-            return $this->value;
-        }
-    }
-
-    /**
-     * Retourne la représentation hexadécimale.
-     */
-    public function toHex(): string
-    {
-        if (self::useGmp()) {
-            return gmp_strval($this->value, 16);
-        } else {
-            $hex = '';
-            $dec = $this->value;
-            while (bccomp($dec, '0', 0) > 0) {
-                $rem = bcmod($dec, '16', 0);
-                $hex = dechex((int)$rem) . $hex;
-                $dec = bcdiv($dec, '16', 0);
-            }
-            return $hex ?: '0';
-        }
-    }
-
-    /**
-     * Crée une instance à partir d'une puissance de 2.
-     */
-    public static function pow(int $base, int $exp): BigInt
-    {
-        if (self::useGmp()) {
-            return new self(gmp_pow((string)$base, $exp));
-        } else {
-            return new self(bcpow((string)$base, (string)$exp, 0));
-        }
-    }
-
-    /**
-     * Soustrait un autre BigInt.
-     */
-    public function sub(BigInt $other): BigInt
-    {
-        if (self::useGmp()) {
-            return new self(gmp_sub($this->value, $other->value));
-        } else {
-            return new self(bcsub($this->value, $other->value, 0));
-        }
-    }
-
-    /**
-     * Computes ($this ^ $exponent) % $modulus
-     */
-    public function modPow(BigInt $exponent, BigInt $modulus): BigInt
-    {
-        if (self::useGmp()) {
-            return new self(gmp_powm($this->value, $exponent->value, $modulus->value));
-        } else {
-            return new self(bcpowmod((string)$this->value, (string)$exponent->value, (string)$modulus->value, 0));
-        }
-    }
-
-    /**
-     * Computes $this % $modulus
-     */
-    public function mod(BigInt $modulus): BigInt
-    {
-        if (self::useGmp()) {
-            return new self(gmp_mod($this->value, $modulus->value));
-        } else {
-            return new self(bcmod((string)$this->value, (string)$modulus->value, 0));
-        }
-    }
-
-    public function add(BigInt $other): BigInt
-    {
-        if (self::useGmp()) {
-            return new self(gmp_add($this->value, $other->value));
-        } else {
-            return new self(bcadd((string)$this->value, (string)$other->value, 0));
-        }
-    }
-
-    public function mul(BigInt $other): BigInt
-    {
-        if (self::useGmp()) {
-            return new self(gmp_mul($this->value, $other->value));
-        } else {
-            return new self(bcmul((string)$this->value, (string)$other->value, 0));
-        }
-    }
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Utils;
+
+class BigInt
+{
+    private static ?bool $useGmp = null;
+    /** @var \GMP|string */
+    private $value;
+
+    private static function useGmp(): bool
+    {
+        if (self::$useGmp === null) {
+            self::$useGmp = extension_loaded('gmp');
+        }
+        return self::$useGmp;
+    }
+
+    /**
+     * @param \GMP|string|int $number Initial number.
+     */
+    public function __construct($number)
+    {
+        if (self::useGmp()) {
+            if ($number instanceof \GMP) {
+                $this->value = $number;
+            } else {
+                $str = (string)$number;
+                if (($dot = strpos($str, '.')) !== false) {
+                    $str = substr($str, 0, $dot);
+                }
+                $this->value = gmp_init($str);
+            }
+        } else {
+            if ($number instanceof BigInt) {
+                $this->value = $number->value;
+            } else {
+                $str = (string)$number;
+                if (($dot = strpos($str, '.')) !== false) {
+                    $str = substr($str, 0, $dot);
+                }
+                $this->value = $str;
+            }
+        }
+    }
+
+    /**
+     * Creates an instance from a hexadecimal string.
+     */
+    public static function fromHex(string $hex): BigInt
+    {
+        $hex = trim(strtolower($hex));
+        if (substr($hex, 0, 2) === '0x') {
+            $hex = substr($hex, 2);
+        }
+        if (self::useGmp()) {
+            return new self(gmp_init($hex, 16));
+        } else {
+            $dec = '0';
+            $len = strlen($hex);
+            for ($i = 0; $i < $len; $i++) {
+                $dec = bcadd(bcmul($dec, '16', 0), (string)hexdec($hex[$i]), 0);
+            }
+            return new self($dec);
+        }
+    }
+
+    /**
+     * Compares this instance with another.
+     * @return int < 0 if this < other, 0 if this == other, > 0 if this > other.
+     */
+    public function compareTo(BigInt $other): int
+    {
+        if (self::useGmp()) {
+            return gmp_cmp($this->value, $other->value);
+        } else {
+            return bccomp($this->value, $other->value, 0);
+        }
+    }
+
+    /**
+     * Performs bitwise left shift (<<).
+     */
+    public function shiftLeft(int $bits): BigInt
+    {
+        if (self::useGmp()) {
+            return new self(gmp_mul($this->value, gmp_pow("2", $bits)));
+        } else {
+            return new self(bcmul($this->value, bcpow("2", (string)$bits, 0), 0));
+        }
+    }
+
+    /**
+     * Performs bitwise right shift (>>).
+     */
+    public function shiftRight(int $bits): BigInt
+    {
+        if (self::useGmp()) {
+            return new self(gmp_div_q($this->value, gmp_pow("2", $bits)));
+        } else {
+            return new self(bcdiv($this->value, bcpow("2", (string)$bits, 0), 0));
+        }
+    }
+
+    /**
+     * Returns the string representation.
+     */
+    public function __toString(): string
+    {
+        if (self::useGmp()) {
+            return gmp_strval($this->value);
+        } else {
+            return $this->value;
+        }
+    }
+
+    /**
+     * Returns the hexadecimal representation.
+     */
+    public function toHex(): string
+    {
+        if (self::useGmp()) {
+            return gmp_strval($this->value, 16);
+        } else {
+            $hex = '';
+            $dec = $this->value;
+            while (bccomp($dec, '0', 0) > 0) {
+                $rem = bcmod($dec, '16', 0);
+                $hex = dechex((int)$rem) . $hex;
+                $dec = bcdiv($dec, '16', 0);
+            }
+            return $hex ?: '0';
+        }
+    }
+
+    /**
+     * Creates an instance from a power of two.
+     */
+    public static function pow(int $base, int $exp): BigInt
+    {
+        if (self::useGmp()) {
+            return new self(gmp_pow((string)$base, $exp));
+        } else {
+            return new self(bcpow((string)$base, (string)$exp, 0));
+        }
+    }
+
+    /**
+     * Subtracts another BigInt.
+     */
+    public function sub(BigInt $other): BigInt
+    {
+        if (self::useGmp()) {
+            return new self(gmp_sub($this->value, $other->value));
+        } else {
+            return new self(bcsub($this->value, $other->value, 0));
+        }
+    }
+
+    /**
+     * Computes ($this ^ $exponent) % $modulus
+     */
+    public function modPow(BigInt $exponent, BigInt $modulus): BigInt
+    {
+        if (self::useGmp()) {
+            return new self(gmp_powm($this->value, $exponent->value, $modulus->value));
+        } else {
+            return new self(bcpowmod((string)$this->value, (string)$exponent->value, (string)$modulus->value, 0));
+        }
+    }
+
+    /**
+     * Computes $this % $modulus
+     */
+    public function mod(BigInt $modulus): BigInt
+    {
+        if (self::useGmp()) {
+            return new self(gmp_mod($this->value, $modulus->value));
+        } else {
+            return new self(bcmod((string)$this->value, (string)$modulus->value, 0));
+        }
+    }
+
+    public function add(BigInt $other): BigInt
+    {
+        if (self::useGmp()) {
+            return new self(gmp_add($this->value, $other->value));
+        } else {
+            return new self(bcadd((string)$this->value, (string)$other->value, 0));
+        }
+    }
+
+    public function mul(BigInt $other): BigInt
+    {
+        if (self::useGmp()) {
+            return new self(gmp_mul($this->value, $other->value));
+        } else {
+            return new self(bcmul((string)$this->value, (string)$other->value, 0));
+        }
+    }
 }

package/src/php/Utils/BlockList.php

@@ -5,18 +5,18 @@ declare(strict_types=1);
 namespace Anonympins\Fingerprint\Utils;
 
 /**
- * Implémentation PHP d'une liste de blocage IP/CIDR, similaire à Node.js `net.BlockList`.
+ * PHP implementation of an IP/CIDR blocklist, similar to Node.js `net.BlockList`.
  */
 class BlockList
 {
     /**
-     * @var array<string> Liste des IPs ou CIDR à bloquer.
+     * @var array<string> List of IPs or CIDR blocks to filter.
      */
     private array $entries = [];
 
     /**
-     * Ajoute une adresse IP ou une plage CIDR à la liste.
-     * @param string $entry Une adresse IP (ex: '192.168.1.1') ou une plage CIDR (ex: '192.168.1.0/24').
+     * Adds an IP address or CIDR range to the list.
+     * @param string $entry An IP address (e.g. '192.168.1.1') or CIDR range (e.g. '192.168.1.0/24').
      * @return void
      */
     public function add(string $entry): void
@@ -25,20 +25,20 @@ class BlockList
     }
 
     /**
-     * Vérifie si une adresse IP est présente dans la liste de blocage.
-     * @param string $ip L'adresse IP à vérifier.
-     * @return bool True si l'IP est bloquée, false sinon.
+     * Checks if an IP address exists in the blocklist.
+     * @param string $ip The IP address to verify.
+     * @return bool True if the IP matches, false otherwise.
      */
     public function check(string $ip): bool
     {
         foreach ($this->entries as $entry) {
             if (str_contains($entry, '/')) {
-                // C'est une plage CIDR
+                // CIDR range
                 if ($this->ipInCidr($ip, $entry)) {
                     return true;
                 }
             } else {
-                // C'est une IP directe
+                // Direct IP match
                 if ($ip === $entry) {
                     return true;
                 }
@@ -48,10 +48,10 @@ class BlockList
     }
 
     /**
-     * Vérifie si une adresse IP se trouve dans une plage CIDR donnée.
-     * @param string $ip L'adresse IP à vérifier.
-     * @param string $cidr La plage CIDR (ex: '192.168.1.0/24').
-     * @return bool True si l'IP est dans la plage, false sinon.
+     * Checks if an IP address belongs to a given CIDR range.
+     * @param string $ip The IP address to verify.
+     * @param string $cidr The CIDR range (e.g. '192.168.1.0/24').
+     * @return bool True if the IP is within the range, false otherwise.
      */
     private function ipInCidr(string $ip, string $cidr): bool
     {