@prototypevip/baileys 0.1.1 → 0.1.3

package/lib/Signal/libsignal-wasm/src/base_key_type.js

@@ -0,0 +1,7 @@
+
+const BaseKeyType = {
+  OURS: 1,
+  THEIRS: 2
+};
+
+export default BaseKeyType;

package/lib/Signal/libsignal-wasm/src/chain_type.js

@@ -0,0 +1,6 @@
+const ChainType = {
+    SENDING: 1,
+    RECEIVING: 2
+};
+
+export default ChainType;

package/lib/Signal/libsignal-wasm/src/crypto.d.ts

@@ -0,0 +1,19 @@
+export function decrypt(
+  key: Uint8Array,
+  ciphertext: Uint8Array,
+  iv: Uint8Array
+): Promise<Uint8Array>;
+
+export function encrypt(
+  key: Uint8Array,
+  plaintext: Uint8Array,
+  iv: Uint8Array
+): Promise<Buffer>;
+
+export function calculateMAC(key: Buffer, data: Uint8Array): Uint8Array;
+
+export function deriveSecrets(
+  key: Uint8Array,
+  salt: Buffer,
+  info: Buffer
+): [Buffer, Buffer];

package/lib/Signal/libsignal-wasm/src/crypto.js

@@ -0,0 +1,77 @@
+// vim: ts=4:sw=4
+
+import nodeCrypto from 'crypto';
+import assert from 'assert';
+import { hkdf } from 'whatsapp-rust-bridge';
+
+
+function assertBuffer(value) {
+    if (!(value instanceof Buffer)) {
+        throw TypeError(`Expected Buffer instead of: ${value.constructor.name}`);
+    }
+    return value;
+}
+
+
+export function encrypt(key, data, iv) {
+    assertBuffer(key);
+    assertBuffer(data);
+    assertBuffer(iv);
+    const cipher = nodeCrypto.createCipheriv('aes-256-cbc', key, iv);
+    return Buffer.concat([cipher.update(data), cipher.final()]);
+}
+
+
+export function decrypt(key, data, iv) {
+    assertBuffer(key);
+    assertBuffer(data);
+    assertBuffer(iv);
+    const decipher = nodeCrypto.createDecipheriv('aes-256-cbc', key, iv);
+    return Buffer.concat([decipher.update(data), decipher.final()]);
+}
+
+
+export function calculateMAC(key, data) {
+    assertBuffer(key);
+    assertBuffer(data);
+    const hmac = nodeCrypto.createHmac('sha256', key);
+    hmac.update(data);
+    return Buffer.from(hmac.digest());
+}
+
+
+export function hash(data) {
+    assertBuffer(data);
+    const sha512 = nodeCrypto.createHash('sha512');
+    sha512.update(data);
+    return sha512.digest();
+}
+
+
+// Salts always end up being 32 bytes
+export function deriveSecrets(input, salt, info, chunks) {
+    // Specific implementation of RFC 5869 that only returns the first 3 32-byte chunks
+    assertBuffer(input);
+    assertBuffer(salt);
+    assertBuffer(info);
+    if (salt.byteLength != 32) {
+        throw new Error("Got salt of incorrect length");
+    }
+    chunks = chunks || 3;
+    assert(chunks >= 1 && chunks <= 3);
+
+    const result = hkdf(input, chunks * 32, { salt, info: info.toString('utf8') });
+    return Array.from({ length: chunks }, (_, i) =>
+        Buffer.from(result.slice(i * 32, (i + 1) * 32))
+    );
+}
+
+export function verifyMAC(data, key, mac, length) {
+    const calculatedMac = calculateMAC(key, data).slice(0, length);
+    if (mac.length !== length || calculatedMac.length !== length) {
+        throw new Error("Bad MAC length");
+    }
+    if (!mac.equals(calculatedMac)) {
+        throw new Error("Bad MAC");
+    }
+}

package/lib/Signal/libsignal-wasm/src/curve.d.ts

@@ -0,0 +1,22 @@
+export interface KeyPairType {
+  pubKey: Uint8Array;
+  privKey: Uint8Array;
+}
+
+export function generateKeyPair(): KeyPairType;
+
+export function calculateAgreement(
+  publicKey: Uint8Array,
+  privateKey: Uint8Array
+): Uint8Array;
+
+export function calculateSignature(
+  privateKey: Uint8Array,
+  message: Uint8Array
+): Uint8Array;
+
+export function verifySignature(
+  publicKey: Uint8Array,
+  message: Uint8Array,
+  signature: Uint8Array
+): boolean;

package/lib/Signal/libsignal-wasm/src/curve.js

@@ -0,0 +1,69 @@
+
+import { generateKeyPair as wasmGenerateKeyPair, calculateAgreement as wasmCalculateAgreement,
+         calculateSignature as wasmCalculateSignature, verifySignature as wasmVerifySignature,
+         getPublicFromPrivateKey as wasmGetPublicFromPrivateKey } from 'whatsapp-rust-bridge';
+
+function validatePrivKey(privKey) {
+    if (privKey === undefined) {
+        throw new Error("Undefined private key");
+    }
+    if (!(privKey instanceof Buffer)) {
+        throw new Error(`Invalid private key type: ${privKey.constructor.name}`);
+    }
+    if (privKey.byteLength != 32) {
+        throw new Error(`Incorrect private key length: ${privKey.byteLength}`);
+    }
+}
+
+function scrubPubKeyFormat(pubKey) {
+    if (!(pubKey instanceof Buffer)) {
+        throw new Error(`Invalid public key type: ${pubKey.constructor.name}`);
+    }
+    if (pubKey === undefined || ((pubKey.byteLength != 33 || pubKey[0] != 5) && pubKey.byteLength != 32)) {
+        throw new Error("Invalid public key");
+    }
+    if (pubKey.byteLength == 33) {
+        return pubKey.slice(1);
+    } else {
+        console.error("WARNING: Expected pubkey of length 33, please report the ST and client that generated the pubkey");
+        return pubKey;
+    }
+}
+
+export function getPublicFromPrivateKey(privKey) {
+    return Buffer.from(wasmGetPublicFromPrivateKey(privKey));
+}
+
+export function generateKeyPair() {
+    const kp = wasmGenerateKeyPair();
+    return {
+        pubKey: Buffer.from(kp.pubKey),
+        privKey: Buffer.from(kp.privKey)
+    };
+}
+
+export function calculateAgreement(pubKey, privKey) {
+    pubKey = scrubPubKeyFormat(pubKey);
+    validatePrivKey(privKey);
+    return Buffer.from(wasmCalculateAgreement(pubKey, privKey));
+}
+
+export function calculateSignature(privKey, message) {
+    validatePrivKey(privKey);
+    if (!message) {
+        throw new Error("Invalid message");
+    }
+    return Buffer.from(wasmCalculateSignature(privKey, message));
+}
+
+export function verifySignature(pubKey, msg, sig, isInit) {
+    if (isInit) return true;
+    pubKey = scrubPubKeyFormat(pubKey);
+    if (!msg) {
+        throw new Error("Invalid message");
+    }
+    if (!sig || sig.byteLength != 64) {
+        throw new Error("Invalid signature");
+    }
+    return wasmVerifySignature(pubKey, msg, sig);
+}

package/lib/Signal/libsignal-wasm/src/errors.js

@@ -0,0 +1,33 @@
+// vim: ts=4:sw=4:expandtab
+
+export class SignalError extends Error {}
+
+export class UntrustedIdentityKeyError extends SignalError {
+    constructor(addr, identityKey) {
+        super();
+        this.name = 'UntrustedIdentityKeyError';
+        this.addr = addr;
+        this.identityKey = identityKey;
+    }
+}
+
+export class SessionError extends SignalError {
+    constructor(message) {
+        super(message);
+        this.name = 'SessionError';
+    }
+}
+
+export class MessageCounterError extends SessionError {
+    constructor(message) {
+        super(message);
+        this.name = 'MessageCounterError';
+    }
+}
+
+export class PreKeyError extends SessionError {
+    constructor(message) {
+        super(message);
+        this.name = 'PreKeyError';
+    }
+}

package/lib/Signal/libsignal-wasm/src/keyhelper.js

@@ -0,0 +1,45 @@
+// vim: ts=4:sw=4:expandtab
+
+import * as curve from './curve.js';
+import nodeCrypto from 'crypto';
+
+function isNonNegativeInteger(n) {
+    return (typeof n === 'number' && (n % 1) === 0  && n >= 0);
+}
+
+export const generateIdentityKeyPair = curve.generateKeyPair;
+
+export function generateRegistrationId() {
+    var registrationId = Uint16Array.from(nodeCrypto.randomBytes(2))[0];
+    return registrationId & 0x3fff;
+}
+
+export function generateSignedPreKey(identityKeyPair, signedKeyId) {
+    if (!(identityKeyPair.privKey instanceof Buffer) ||
+        identityKeyPair.privKey.byteLength != 32 ||
+        !(identityKeyPair.pubKey instanceof Buffer) ||
+        identityKeyPair.pubKey.byteLength != 33) {
+        throw new TypeError('Invalid argument for identityKeyPair');
+    }
+    if (!isNonNegativeInteger(signedKeyId)) {
+        throw new TypeError('Invalid argument for signedKeyId: ' + signedKeyId);
+    }
+    const keyPair = curve.generateKeyPair();
+    const sig = curve.calculateSignature(identityKeyPair.privKey, keyPair.pubKey);
+    return {
+        keyId: signedKeyId,
+        keyPair: keyPair,
+        signature: sig
+    };
+}
+
+export function generatePreKey(keyId) {
+    if (!isNonNegativeInteger(keyId)) {
+        throw new TypeError('Invalid argument for keyId: ' + keyId);
+    }
+    const keyPair = curve.generateKeyPair();
+    return {
+        keyId,
+        keyPair
+    };
+}

package/lib/Signal/libsignal-wasm/src/numeric_fingerprint.js

@@ -0,0 +1,72 @@
+
+import * as crypto from './crypto.js';
+
+var VERSION = 0;
+
+
+async function iterateHash(data, key, count) {
+    const combined = (new Uint8Array(Buffer.concat([data, key]))).buffer;
+    const result = crypto.hash(combined);
+    if (--count === 0) {
+        return result;
+    } else {
+        return iterateHash(result, key, count);
+    }
+}
+
+
+function shortToArrayBuffer(number) {
+    return new Uint16Array([number]).buffer;
+}
+
+function getEncodedChunk(hash, offset) {
+    var chunk = ( hash[offset]   * Math.pow(2,32) +
+                  hash[offset+1] * Math.pow(2,24) +
+                  hash[offset+2] * Math.pow(2,16) +
+                  hash[offset+3] * Math.pow(2,8) +
+                  hash[offset+4] ) % 100000;
+    var s = chunk.toString();
+    while (s.length < 5) {
+        s = '0' + s;
+    }
+    return s;
+}
+
+async function getDisplayStringFor(identifier, key, iterations) {
+    const bytes = Buffer.concat([
+        shortToArrayBuffer(VERSION),
+        key,
+        identifier
+    ]);
+    const arraybuf = (new Uint8Array(bytes)).buffer;
+    const output = new Uint8Array(await iterateHash(arraybuf, key, iterations));
+    return getEncodedChunk(output, 0) +
+        getEncodedChunk(output, 5) +
+        getEncodedChunk(output, 10) +
+        getEncodedChunk(output, 15) +
+        getEncodedChunk(output, 20) +
+        getEncodedChunk(output, 25);
+}
+
+export function FingerprintGenerator(iterations) {
+    this.iterations = iterations;
+}
+
+FingerprintGenerator.prototype = {
+    createFor: function(localIdentifier, localIdentityKey,
+                        remoteIdentifier, remoteIdentityKey) {
+        if (typeof localIdentifier !== 'string' ||
+            typeof remoteIdentifier !== 'string' ||
+            !(localIdentityKey instanceof ArrayBuffer) ||
+            !(remoteIdentityKey instanceof ArrayBuffer)) {
+          throw new Error('Invalid arguments');
+        }
+
+        return Promise.all([
+            getDisplayStringFor(localIdentifier, localIdentityKey, this.iterations),
+            getDisplayStringFor(remoteIdentifier, remoteIdentityKey, this.iterations)
+        ]).then(function(fingerprints) {
+            return fingerprints.sort().join('');
+        });
+    }
+};

package/lib/Signal/libsignal-wasm/src/protobufs.js

@@ -0,0 +1,5 @@
+import { textsecure } from './WhisperTextProtocol.js';
+
+const { WhisperMessage, PreKeyWhisperMessage } = textsecure;
+
+export { WhisperMessage, PreKeyWhisperMessage };

package/lib/Signal/libsignal-wasm/src/protocol_address.js

@@ -0,0 +1,40 @@
+// vim: ts=4:sw=4:expandtab
+
+
+class ProtocolAddress {
+
+    static from(encodedAddress) {
+        if (typeof encodedAddress !== 'string' || !encodedAddress.match(/.*\.\d+/)) {
+            throw new Error('Invalid address encoding');
+        }
+        const parts = encodedAddress.split('.');
+        return new this(parts[0], parseInt(parts[1]));
+    }
+
+    constructor(id, deviceId) {
+        if (typeof id !== 'string') {
+            throw new TypeError('id required for addr');
+        }
+        if (id.indexOf('.') !== -1) {
+            throw new TypeError('encoded addr detected');
+        }
+        this.id = id;
+        if (typeof deviceId !== 'number') {
+            throw new TypeError('number required for deviceId');
+        }
+        this.deviceId = deviceId;
+    }
+
+    toString() {
+        return `${this.id}.${this.deviceId}`;
+    }
+
+    is(other) {
+        if (!(other instanceof ProtocolAddress)) {
+            return false;
+        }
+        return other.id === this.id && other.deviceId === this.deviceId;
+    }
+}
+
+export default ProtocolAddress;

package/lib/Signal/libsignal-wasm/src/queue_job.js

@@ -0,0 +1,68 @@
+// vim: ts=4:sw=4:expandtab
+
+ /*
+  * jobQueue manages multiple queues indexed by device to serialize
+  * session io ops on the database.
+  */
+
+
+const _queueAsyncBuckets = new Map();
+const _gcLimit = 10000;
+
+async function _asyncQueueExecutor(queue, cleanup) {
+    let offt = 0;
+    while (true) {
+        let limit = Math.min(queue.length, _gcLimit); // Break up thundering hurds for GC duty.
+        for (let i = offt; i < limit; i++) {
+            const job = queue[i];
+            try {
+                job.resolve(await job.awaitable());
+            } catch(e) {
+                job.reject(e);
+            }
+        }
+        if (limit < queue.length) {
+            /* Perform lazy GC of queue for faster iteration. */
+            if (limit >= _gcLimit) {
+                queue.splice(0, limit);
+                offt = 0;
+            } else {
+                offt = limit;
+            }
+        } else {
+            break;
+        }
+    }
+    cleanup();
+}
+
+export default function(bucket, awaitable) {
+    /* Run the async awaitable only when all other async calls registered
+     * here have completed (or thrown).  The bucket argument is a hashable
+     * key representing the task queue to use. */
+    if (!awaitable.name) {
+        // Make debuging easier by adding a name to this function.
+        Object.defineProperty(awaitable, 'name', {writable: true});
+        if (typeof bucket === 'string') {
+            awaitable.name = bucket;
+        } else {
+            console.warn("Unhandled bucket type (for naming):", typeof bucket, bucket);
+        }
+    }
+    let inactive;
+    if (!_queueAsyncBuckets.has(bucket)) {
+        _queueAsyncBuckets.set(bucket, []);
+        inactive = true;
+    }
+    const queue = _queueAsyncBuckets.get(bucket);
+    const job = new Promise((resolve, reject) => queue.push({
+        awaitable,
+        resolve,
+        reject
+    }));
+    if (inactive) {
+        /* An executor is not currently active; Start one now. */
+        _asyncQueueExecutor(queue, () => _queueAsyncBuckets.delete(bucket));
+    }
+    return job;
+}

package/lib/Signal/libsignal-wasm/src/session_builder.js

@@ -0,0 +1,162 @@
+
+import BaseKeyType from './base_key_type.js';
+import ChainType from './chain_type.js';
+import SessionRecord from './session_record.js';
+import * as crypto from './crypto.js';
+import * as curve from './curve.js';
+import * as errors from './errors.js';
+import queueJob from './queue_job.js';
+
+
+class SessionBuilder {
+
+    constructor(storage, protocolAddress) {
+        this.addr = protocolAddress;
+        this.storage = storage;
+    }
+
+    async initOutgoing(device) {
+        const fqAddr = this.addr.toString();
+        return await queueJob(fqAddr, async () => {
+            if (!await this.storage.isTrustedIdentity(this.addr.id, device.identityKey)) {
+                throw new errors.UntrustedIdentityKeyError(this.addr.id, device.identityKey);
+            }
+            curve.verifySignature(device.identityKey, device.signedPreKey.publicKey,
+                                  device.signedPreKey.signature, true);
+            const baseKey = curve.generateKeyPair();
+            const devicePreKey = device.preKey && device.preKey.publicKey;
+            const session = await this.initSession(true, baseKey, undefined, device.identityKey,
+                                                   devicePreKey, device.signedPreKey.publicKey,
+                                                   device.registrationId);
+            session.pendingPreKey = {
+                signedKeyId: device.signedPreKey.keyId,
+                baseKey: baseKey.pubKey
+            };
+            if (device.preKey) {
+                session.pendingPreKey.preKeyId = device.preKey.keyId;
+            }
+            let record = await this.storage.loadSession(fqAddr);
+            if (!record) {
+                record = new SessionRecord();
+            } else {
+                const openSession = record.getOpenSession();
+                if (openSession) {
+                    // console.warn("Closing stale open session for new outgoing prekey bundle"); temporary fix
+                    record.closeSession(openSession);
+                }
+            }
+            record.setSession(session);
+            await this.storage.storeSession(fqAddr, record);
+        });
+    }
+
+    async initIncoming(record, message) {
+        const fqAddr = this.addr.toString();
+        if (!await this.storage.isTrustedIdentity(fqAddr, message.identityKey)) {
+            throw new errors.UntrustedIdentityKeyError(this.addr.id, message.identityKey);
+        }
+        if (record.getSession(message.baseKey)) {
+            // This just means we haven't replied.
+            return;
+        }
+        const preKeyPair = await this.storage.loadPreKey(message.preKeyId);
+        if (message.preKeyId && !preKeyPair) {
+            throw new errors.PreKeyError('Invalid PreKey ID');
+        }
+        const signedPreKeyPair = await this.storage.loadSignedPreKey(message.signedPreKeyId);
+        if (!signedPreKeyPair) {
+            throw new errors.PreKeyError("Missing SignedPreKey");
+        }
+        const existingOpenSession = record.getOpenSession();
+        if (existingOpenSession) {
+            console.warn("Closing open session in favor of incoming prekey bundle");
+            record.closeSession(existingOpenSession);
+        }
+        record.setSession(await this.initSession(false, preKeyPair, signedPreKeyPair,
+                                                 message.identityKey, message.baseKey,
+                                                 undefined, message.registrationId));
+        return message.preKeyId;
+    }
+
+    async initSession(isInitiator, ourEphemeralKey, ourSignedKey, theirIdentityPubKey,
+                      theirEphemeralPubKey, theirSignedPubKey, registrationId) {
+        if (isInitiator) {
+            if (ourSignedKey) {
+                throw new Error("Invalid call to initSession");
+            }
+            ourSignedKey = ourEphemeralKey;
+        } else {
+            if (theirSignedPubKey) {
+                throw new Error("Invalid call to initSession");
+            }
+            theirSignedPubKey = theirEphemeralPubKey;
+        }
+        let sharedSecret;
+        if (!ourEphemeralKey || !theirEphemeralPubKey) {
+            sharedSecret = new Uint8Array(32 * 4);
+        } else {
+            sharedSecret = new Uint8Array(32 * 5);
+        }
+        for (var i = 0; i < 32; i++) {
+            sharedSecret[i] = 0xff;
+        }
+        const ourIdentityKey = await this.storage.getOurIdentity();
+        const a1 = curve.calculateAgreement(theirSignedPubKey, ourIdentityKey.privKey);
+        const a2 = curve.calculateAgreement(theirIdentityPubKey, ourSignedKey.privKey);
+        const a3 = curve.calculateAgreement(theirSignedPubKey, ourSignedKey.privKey);
+        if (isInitiator) {
+            sharedSecret.set(new Uint8Array(a1), 32);
+            sharedSecret.set(new Uint8Array(a2), 32 * 2);
+        } else {
+            sharedSecret.set(new Uint8Array(a1), 32 * 2);
+            sharedSecret.set(new Uint8Array(a2), 32);
+        }
+        sharedSecret.set(new Uint8Array(a3), 32 * 3);
+        if (ourEphemeralKey && theirEphemeralPubKey) {
+            const a4 = curve.calculateAgreement(theirEphemeralPubKey, ourEphemeralKey.privKey);
+            sharedSecret.set(new Uint8Array(a4), 32 * 4);
+        }
+        const masterKey = crypto.deriveSecrets(Buffer.from(sharedSecret), Buffer.alloc(32),
+                                               Buffer.from("WhisperText"));
+        const session = SessionRecord.createEntry();
+        session.registrationId = registrationId;
+        session.currentRatchet = {
+            rootKey: masterKey[0],
+            ephemeralKeyPair: isInitiator ? curve.generateKeyPair() : ourSignedKey,
+            lastRemoteEphemeralKey: theirSignedPubKey,
+            previousCounter: 0
+        };
+        session.indexInfo = {
+            created: Date.now(),
+            used: Date.now(),
+            remoteIdentityKey: theirIdentityPubKey,
+            baseKey: isInitiator ? ourEphemeralKey.pubKey : theirEphemeralPubKey,
+            baseKeyType: isInitiator ? BaseKeyType.OURS : BaseKeyType.THEIRS,
+            closed: -1
+        };
+        if (isInitiator) {
+            // If we're initiating we go ahead and set our first sending ephemeral key now,
+            // otherwise we figure it out when we first maybeStepRatchet with the remote's
+            // ephemeral key
+            this.calculateSendingRatchet(session, theirSignedPubKey);
+        }
+        return session;
+    }
+
+    calculateSendingRatchet(session, remoteKey) {
+        const ratchet = session.currentRatchet;
+        const sharedSecret = curve.calculateAgreement(remoteKey, ratchet.ephemeralKeyPair.privKey);
+        const masterKey = crypto.deriveSecrets(sharedSecret, ratchet.rootKey, Buffer.from("WhisperRatchet"));
+        session.addChain(ratchet.ephemeralKeyPair.pubKey, {
+            messageKeys: {},
+            chainKey: {
+                counter: -1,
+                key: masterKey[1]
+            },
+            chainType: ChainType.SENDING
+        });
+        ratchet.rootKey = masterKey[0];
+    }
+}
+
+export default SessionBuilder;