ai-remote 0.1.0

package/dist/protocols/rdp/cert.js

@@ -0,0 +1,135 @@
+import { Reader } from "./buffer";
+const CERT_PROPRIETARY = 1;
+const CERT_X509 = 2;
+const RSA1_MAGIC = 826364754;
+const BB_RSA_KEY_BLOB = 6;
+const OID_RSA_ENCRYPTION = [42, 134, 72, 134, 247, 13, 1, 1, 1];
+function derRead(bytes, offset) {
+  let cursor = offset;
+  const tag = bytes[cursor++];
+  let length = bytes[cursor++];
+  if (length & 128) {
+    const byteCount = length & 127;
+    length = 0;
+    for (let i = 0; i < byteCount; i++) length = length << 8 | bytes[cursor++];
+  }
+  return {
+    tag,
+    contentStart: cursor,
+    contentEnd: cursor + length,
+    next: cursor + length,
+    content: bytes.subarray(cursor, cursor + length)
+  };
+}
+function derChildren(bytes) {
+  const children = [];
+  let offset = 0;
+  while (offset < bytes.length) {
+    const node = derRead(bytes, offset);
+    children.push(node);
+    if (node.next <= offset) break;
+    offset = node.next;
+  }
+  return children;
+}
+function containsOid(bytes, oid) {
+  outer: for (let i = 0; i + oid.length <= bytes.length; i++) {
+    for (let j = 0; j < oid.length; j++) {
+      if (bytes[i + j] !== oid[j]) continue outer;
+    }
+    return true;
+  }
+  return false;
+}
+function derIntegerToLe(content) {
+  let start = 0;
+  while (start < content.length - 1 && content[start] === 0) start++;
+  return content.subarray(start).slice().reverse();
+}
+function rsaKeyFromX509(der) {
+  const certificate = derRead(der, 0);
+  const tbsCertificate = derRead(der, certificate.contentStart);
+  for (const child of derChildren(tbsCertificate.content)) {
+    if (child.tag !== 48) continue;
+    const parts = derChildren(child.content);
+    if (parts.length < 2) continue;
+    if (parts[0].tag !== 48 || !containsOid(parts[0].content, OID_RSA_ENCRYPTION)) continue;
+    if (parts[1].tag !== 3) continue;
+    const publicKey = derRead(parts[1].content.subarray(1), 0);
+    const [modulus, exponent] = derChildren(publicKey.content);
+    if (!modulus || !exponent) break;
+    return {
+      modulus: derIntegerToLe(modulus.content),
+      exponent: derIntegerToLe(exponent.content),
+      source: "x509"
+    };
+  }
+  throw new Error("RDP: no RSA public key found in the host X.509 certificate");
+}
+function rsaKeyFromProprietary(reader) {
+  reader.u32le();
+  reader.u32le();
+  const publicKeyBlobType = reader.u16le();
+  const publicKeyBlobLength = reader.u16le();
+  if (publicKeyBlobType !== BB_RSA_KEY_BLOB) {
+    throw new Error(`RDP: unsupported public key blob type 0x${publicKeyBlobType.toString(16)}`);
+  }
+  const blob = new Reader(reader.raw(publicKeyBlobLength));
+  if (blob.u32le() !== RSA1_MAGIC) {
+    throw new Error("RDP: the host RSA public key blob is not in RSA1 format");
+  }
+  const keyLength = blob.u32le();
+  blob.u32le();
+  blob.u32le();
+  const exponent = blob.raw(4).slice();
+  if (keyLength < 9) throw new Error("RDP: the host RSA modulus is too short");
+  const modulus = blob.raw(keyLength - 8).slice();
+  return { modulus, exponent, source: "proprietary" };
+}
+function parseX509PublicKey(der) {
+  const certificate = derRead(der, 0);
+  const tbsCertificate = derRead(der, certificate.contentStart);
+  for (const child of derChildren(tbsCertificate.content)) {
+    if (child.tag !== 48) continue;
+    const parts = derChildren(child.content);
+    if (parts.length < 2) continue;
+    if (parts[0].tag !== 48 || !containsOid(parts[0].content, OID_RSA_ENCRYPTION)) continue;
+    if (parts[1].tag !== 3) continue;
+    const subjectPublicKey = parts[1].content.subarray(1);
+    const publicKey = derRead(subjectPublicKey, 0);
+    const [modulus, exponent] = derChildren(publicKey.content);
+    if (!modulus || !exponent) break;
+    const stripLeadingZero = (bytes) => {
+      let start = 0;
+      while (start < bytes.length - 1 && bytes[start] === 0) start++;
+      return bytes.subarray(start);
+    };
+    return {
+      modulus: stripLeadingZero(modulus.content),
+      exponent: stripLeadingZero(exponent.content),
+      subjectPublicKey
+    };
+  }
+  throw new Error("TLS: no RSA public key found in the host certificate");
+}
+function parseServerCertificate(certificateBytes) {
+  const reader = new Reader(certificateBytes);
+  const version = reader.u32le() & 2147483647;
+  if (version === CERT_PROPRIETARY) return rsaKeyFromProprietary(reader);
+  if (version === CERT_X509) {
+    const certificateCount = reader.u32le();
+    let leaf = null;
+    for (let i = 0; i < certificateCount; i++) {
+      const length = reader.u32le();
+      leaf = reader.raw(length);
+    }
+    if (!leaf) throw new Error("RDP: the host sent an empty X.509 certificate chain");
+    return rsaKeyFromX509(leaf);
+  }
+  throw new Error(`RDP: unsupported server certificate version ${version}`);
+}
+export {
+  parseServerCertificate,
+  parseX509PublicKey
+};
+//# sourceMappingURL=cert.js.map

package/dist/protocols/rdp/cert.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/protocols/rdp/cert.ts"],
+  "sourcesContent": ["// Server public key extraction for the RDP Standard Security layer.\n//\n// A host either hands out a \"proprietary\" certificate -- little more than a\n// wrapper around an RSA public key -- or an X.509 chain whose leaf holds the\n// key (MS-RDPBCGR 2.2.1.4.3.1). Either way the client random is encrypted with\n// that key, so all we need out of it is a modulus and an exponent.\n//\n// Note the proprietary certificate is signed with a private key Microsoft\n// published, so it authenticates nothing: RDP Standard Security gives\n// confidentiality on the wire, not proof of the host's identity.\n\nimport { Reader } from './buffer';\n\nconst CERT_PROPRIETARY = 1;\nconst CERT_X509 = 2;\nconst RSA1_MAGIC = 0x31415352;\nconst BB_RSA_KEY_BLOB = 0x0006;\n\nconst OID_RSA_ENCRYPTION = [0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x01];\n\n// --- DER --------------------------------------------------------------------\n\nfunction derRead(bytes: Uint8Array, offset: number) {\n  let cursor = offset;\n  const tag = bytes[cursor++];\n\n  let length = bytes[cursor++];\n  if (length & 0x80) {\n    const byteCount = length & 0x7f;\n    length = 0;\n    for (let i = 0; i < byteCount; i++) length = (length << 8) | bytes[cursor++];\n  }\n\n  return {\n    tag,\n    contentStart: cursor,\n    contentEnd: cursor + length,\n    next: cursor + length,\n    content: bytes.subarray(cursor, cursor + length),\n  };\n}\n\nfunction derChildren(bytes: Uint8Array) {\n  const children = [];\n  let offset = 0;\n  while (offset < bytes.length) {\n    const node = derRead(bytes, offset);\n    children.push(node);\n    if (node.next <= offset) break;\n    offset = node.next;\n  }\n  return children;\n}\n\nfunction containsOid(bytes: Uint8Array, oid: string) {\n  outer: for (let i = 0; i + oid.length <= bytes.length; i++) {\n    for (let j = 0; j < oid.length; j++) {\n      if (bytes[i + j] !== oid[j]) continue outer;\n    }\n    return true;\n  }\n  return false;\n}\n\n/** Big-endian DER integer -> little-endian bytes with the sign byte removed. */\nfunction derIntegerToLe(content: Uint8Array) {\n  let start = 0;\n  while (start < content.length - 1 && content[start] === 0x00) start++;\n  return content.subarray(start).slice().reverse();\n}\n\n/**\n * Find SubjectPublicKeyInfo in an X.509 certificate and return the RSA key.\n * The structure is walked rather than indexed by position: optional fields in\n * TBSCertificate make fixed offsets wrong for many real certificates.\n */\nfunction rsaKeyFromX509(der: Uint8Array) {\n  const certificate = derRead(der, 0);\n  const tbsCertificate = derRead(der, certificate.contentStart);\n\n  for (const child of derChildren(tbsCertificate.content)) {\n    if (child.tag !== 0x30) continue;\n\n    const parts = derChildren(child.content);\n    if (parts.length < 2) continue;\n    if (parts[0].tag !== 0x30 || !containsOid(parts[0].content, OID_RSA_ENCRYPTION)) continue;\n    if (parts[1].tag !== 0x03) continue;\n\n    // BIT STRING content starts with an \"unused bits\" count.\n    const publicKey = derRead(parts[1].content.subarray(1), 0);\n    const [modulus, exponent] = derChildren(publicKey.content);\n    if (!modulus || !exponent) break;\n\n    return {\n      modulus: derIntegerToLe(modulus.content),\n      exponent: derIntegerToLe(exponent.content),\n      source: 'x509',\n    };\n  }\n\n  throw new Error('RDP: no RSA public key found in the host X.509 certificate');\n}\n\nfunction rsaKeyFromProprietary(reader: Reader) {\n  reader.u32le(); // dwSigAlgId\n  reader.u32le(); // dwKeyAlgId\n\n  const publicKeyBlobType = reader.u16le();\n  const publicKeyBlobLength = reader.u16le();\n  if (publicKeyBlobType !== BB_RSA_KEY_BLOB) {\n    throw new Error(`RDP: unsupported public key blob type 0x${publicKeyBlobType.toString(16)}`);\n  }\n\n  const blob = new Reader(reader.raw(publicKeyBlobLength));\n  if (blob.u32le() !== RSA1_MAGIC) {\n    throw new Error('RDP: the host RSA public key blob is not in RSA1 format');\n  }\n\n  const keyLength = blob.u32le();\n  blob.u32le(); // bitlen\n  blob.u32le(); // datalen\n  const exponent = blob.raw(4).slice();\n\n  // The blob reserves 8 trailing bytes of padding after the modulus.\n  if (keyLength < 9) throw new Error('RDP: the host RSA modulus is too short');\n  const modulus = blob.raw(keyLength - 8).slice();\n\n  return { modulus, exponent, source: 'proprietary' };\n}\n\n/**\n * Pull the RSA public key out of a DER X.509 certificate, for the TLS layer.\n *\n * CredSSP needs the exact bytes of the certificate's subjectPublicKey BIT\n * STRING contents -- the DER RSAPublicKey -- because that is what both ends\n * hash to bind the authentication to this TLS channel (MS-CSSP 3.1.5).\n */\nexport function parseX509PublicKey(der: Uint8Array) {\n  const certificate = derRead(der, 0);\n  const tbsCertificate = derRead(der, certificate.contentStart);\n\n  for (const child of derChildren(tbsCertificate.content)) {\n    if (child.tag !== 0x30) continue;\n\n    const parts = derChildren(child.content);\n    if (parts.length < 2) continue;\n    if (parts[0].tag !== 0x30 || !containsOid(parts[0].content, OID_RSA_ENCRYPTION)) continue;\n    if (parts[1].tag !== 0x03) continue;\n\n    const subjectPublicKey = parts[1].content.subarray(1); // drop the unused-bit count\n    const publicKey = derRead(subjectPublicKey, 0);\n    const [modulus, exponent] = derChildren(publicKey.content);\n    if (!modulus || !exponent) break;\n\n    const stripLeadingZero = (bytes: Uint8Array) => {\n      let start = 0;\n      while (start < bytes.length - 1 && bytes[start] === 0x00) start++;\n      return bytes.subarray(start);\n    };\n\n    return {\n      modulus: stripLeadingZero(modulus.content),\n      exponent: stripLeadingZero(exponent.content),\n      subjectPublicKey,\n    };\n  }\n\n  throw new Error('TLS: no RSA public key found in the host certificate');\n}\n\n/** Parse a server certificate blob into an RSA public key. */\nexport function parseServerCertificate(certificateBytes: Uint8Array) {\n  const reader = new Reader(certificateBytes);\n  const version = reader.u32le() & 0x7fffffff;\n\n  if (version === CERT_PROPRIETARY) return rsaKeyFromProprietary(reader);\n\n  if (version === CERT_X509) {\n    const certificateCount = reader.u32le();\n    let leaf = null;\n    for (let i = 0; i < certificateCount; i++) {\n      const length = reader.u32le();\n      leaf = reader.raw(length);\n    }\n    if (!leaf) throw new Error('RDP: the host sent an empty X.509 certificate chain');\n    return rsaKeyFromX509(leaf);\n  }\n\n  throw new Error(`RDP: unsupported server certificate version ${version}`);\n}\n"],
+  "mappings": "AAWA,SAAS,cAAc;AAEvB,MAAM,mBAAmB;AACzB,MAAM,YAAY;AAClB,MAAM,aAAa;AACnB,MAAM,kBAAkB;AAExB,MAAM,qBAAqB,CAAC,IAAM,KAAM,IAAM,KAAM,KAAM,IAAM,GAAM,GAAM,CAAI;AAIhF,SAAS,QAAQ,OAAmB,QAAgB;AAClD,MAAI,SAAS;AACb,QAAM,MAAM,MAAM,QAAQ;AAE1B,MAAI,SAAS,MAAM,QAAQ;AAC3B,MAAI,SAAS,KAAM;AACjB,UAAM,YAAY,SAAS;AAC3B,aAAS;AACT,aAAS,IAAI,GAAG,IAAI,WAAW,IAAK,UAAU,UAAU,IAAK,MAAM,QAAQ;AAAA,EAC7E;AAEA,SAAO;AAAA,IACL;AAAA,IACA,cAAc;AAAA,IACd,YAAY,SAAS;AAAA,IACrB,MAAM,SAAS;AAAA,IACf,SAAS,MAAM,SAAS,QAAQ,SAAS,MAAM;AAAA,EACjD;AACF;AAEA,SAAS,YAAY,OAAmB;AACtC,QAAM,WAAW,CAAC;AAClB,MAAI,SAAS;AACb,SAAO,SAAS,MAAM,QAAQ;AAC5B,UAAM,OAAO,QAAQ,OAAO,MAAM;AAClC,aAAS,KAAK,IAAI;AAClB,QAAI,KAAK,QAAQ,OAAQ;AACzB,aAAS,KAAK;AAAA,EAChB;AACA,SAAO;AACT;AAEA,SAAS,YAAY,OAAmB,KAAa;AACnD,QAAO,UAAS,IAAI,GAAG,IAAI,IAAI,UAAU,MAAM,QAAQ,KAAK;AAC1D,aAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;AACnC,UAAI,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,EAAG,UAAS;AAAA,IACxC;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAGA,SAAS,eAAe,SAAqB;AAC3C,MAAI,QAAQ;AACZ,SAAO,QAAQ,QAAQ,SAAS,KAAK,QAAQ,KAAK,MAAM,EAAM;AAC9D,SAAO,QAAQ,SAAS,KAAK,EAAE,MAAM,EAAE,QAAQ;AACjD;AAOA,SAAS,eAAe,KAAiB;AACvC,QAAM,cAAc,QAAQ,KAAK,CAAC;AAClC,QAAM,iBAAiB,QAAQ,KAAK,YAAY,YAAY;AAE5D,aAAW,SAAS,YAAY,eAAe,OAAO,GAAG;AACvD,QAAI,MAAM,QAAQ,GAAM;AAExB,UAAM,QAAQ,YAAY,MAAM,OAAO;AACvC,QAAI,MAAM,SAAS,EAAG;AACtB,QAAI,MAAM,CAAC,EAAE,QAAQ,MAAQ,CAAC,YAAY,MAAM,CAAC,EAAE,SAAS,kBAAkB,EAAG;AACjF,QAAI,MAAM,CAAC,EAAE,QAAQ,EAAM;AAG3B,UAAM,YAAY,QAAQ,MAAM,CAAC,EAAE,QAAQ,SAAS,CAAC,GAAG,CAAC;AACzD,UAAM,CAAC,SAAS,QAAQ,IAAI,YAAY,UAAU,OAAO;AACzD,QAAI,CAAC,WAAW,CAAC,SAAU;AAE3B,WAAO;AAAA,MACL,SAAS,eAAe,QAAQ,OAAO;AAAA,MACvC,UAAU,eAAe,SAAS,OAAO;AAAA,MACzC,QAAQ;AAAA,IACV;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,4DAA4D;AAC9E;AAEA,SAAS,sBAAsB,QAAgB;AAC7C,SAAO,MAAM;AACb,SAAO,MAAM;AAEb,QAAM,oBAAoB,OAAO,MAAM;AACvC,QAAM,sBAAsB,OAAO,MAAM;AACzC,MAAI,sBAAsB,iBAAiB;AACzC,UAAM,IAAI,MAAM,2CAA2C,kBAAkB,SAAS,EAAE,CAAC,EAAE;AAAA,EAC7F;AAEA,QAAM,OAAO,IAAI,OAAO,OAAO,IAAI,mBAAmB,CAAC;AACvD,MAAI,KAAK,MAAM,MAAM,YAAY;AAC/B,UAAM,IAAI,MAAM,yDAAyD;AAAA,EAC3E;AAEA,QAAM,YAAY,KAAK,MAAM;AAC7B,OAAK,MAAM;AACX,OAAK,MAAM;AACX,QAAM,WAAW,KAAK,IAAI,CAAC,EAAE,MAAM;AAGnC,MAAI,YAAY,EAAG,OAAM,IAAI,MAAM,wCAAwC;AAC3E,QAAM,UAAU,KAAK,IAAI,YAAY,CAAC,EAAE,MAAM;AAE9C,SAAO,EAAE,SAAS,UAAU,QAAQ,cAAc;AACpD;AASO,SAAS,mBAAmB,KAAiB;AAClD,QAAM,cAAc,QAAQ,KAAK,CAAC;AAClC,QAAM,iBAAiB,QAAQ,KAAK,YAAY,YAAY;AAE5D,aAAW,SAAS,YAAY,eAAe,OAAO,GAAG;AACvD,QAAI,MAAM,QAAQ,GAAM;AAExB,UAAM,QAAQ,YAAY,MAAM,OAAO;AACvC,QAAI,MAAM,SAAS,EAAG;AACtB,QAAI,MAAM,CAAC,EAAE,QAAQ,MAAQ,CAAC,YAAY,MAAM,CAAC,EAAE,SAAS,kBAAkB,EAAG;AACjF,QAAI,MAAM,CAAC,EAAE,QAAQ,EAAM;AAE3B,UAAM,mBAAmB,MAAM,CAAC,EAAE,QAAQ,SAAS,CAAC;AACpD,UAAM,YAAY,QAAQ,kBAAkB,CAAC;AAC7C,UAAM,CAAC,SAAS,QAAQ,IAAI,YAAY,UAAU,OAAO;AACzD,QAAI,CAAC,WAAW,CAAC,SAAU;AAE3B,UAAM,mBAAmB,CAAC,UAAsB;AAC9C,UAAI,QAAQ;AACZ,aAAO,QAAQ,MAAM,SAAS,KAAK,MAAM,KAAK,MAAM,EAAM;AAC1D,aAAO,MAAM,SAAS,KAAK;AAAA,IAC7B;AAEA,WAAO;AAAA,MACL,SAAS,iBAAiB,QAAQ,OAAO;AAAA,MACzC,UAAU,iBAAiB,SAAS,OAAO;AAAA,MAC3C;AAAA,IACF;AAAA,EACF;AAEA,QAAM,IAAI,MAAM,sDAAsD;AACxE;AAGO,SAAS,uBAAuB,kBAA8B;AACnE,QAAM,SAAS,IAAI,OAAO,gBAAgB;AAC1C,QAAM,UAAU,OAAO,MAAM,IAAI;AAEjC,MAAI,YAAY,iBAAkB,QAAO,sBAAsB,MAAM;AAErE,MAAI,YAAY,WAAW;AACzB,UAAM,mBAAmB,OAAO,MAAM;AACtC,QAAI,OAAO;AACX,aAAS,IAAI,GAAG,IAAI,kBAAkB,KAAK;AACzC,YAAM,SAAS,OAAO,MAAM;AAC5B,aAAO,OAAO,IAAI,MAAM;AAAA,IAC1B;AACA,QAAI,CAAC,KAAM,OAAM,IAAI,MAAM,qDAAqD;AAChF,WAAO,eAAe,IAAI;AAAA,EAC5B;AAEA,QAAM,IAAI,MAAM,+CAA+C,OAAO,EAAE;AAC1E;",
+  "names": []
+}