hypercore 10.0.0-alpha.20 → 10.0.0-alpha.21

package/lib/protocol.js

@@ -2,9 +2,19 @@ const { uint, from: fromEncoding } = require('compact-encoding')
 const b4a = require('b4a')
 const safetyCatch = require('safety-catch')
 const codecs = require('codecs')
+const sodium = require('sodium-universal')
 
 const messages = require('./messages')
 
+const slab = b4a.alloc(96)
+const NS = slab.subarray(0, 32)
+const NS_HYPERCORE_INITIATOR = slab.subarray(32, 64)
+const NS_HYPERCORE_RESPONDER = slab.subarray(64, 96)
+
+sodium.crypto_generichash(NS, b4a.from('hypercore'))
+sodium.crypto_generichash(NS_HYPERCORE_INITIATOR, b4a.from([0]), NS)
+sodium.crypto_generichash(NS_HYPERCORE_RESPONDER, b4a.from([1]), NS)
+
 class Extension {
   constructor (protocol, type, name, handlers) {
     this.protocol = protocol
@@ -257,10 +267,14 @@ module.exports = class Protocol {
     this._remoteExtensions = []
     this._extensions = new Map()
     this._keepAliveInterval = null
+    this._pendingCaps = []
 
     this._destroyer = this._safeDestroy.bind(this)
     this.noiseStream.on('data', this.onmessage.bind(this))
     this.noiseStream.on('end', this.noiseStream.end) // no half open
+    this.noiseStream.on('finish', () => {
+      this.setKeepAlive(false)
+    })
     this.noiseStream.on('close', () => {
       this.setKeepAlive(false)
       // TODO: If the stream was destroyed with an error, we probably want to forward it here
@@ -346,6 +360,11 @@ module.exports = class Protocol {
 
     if (batch.length === 0) return
 
+    while (this._pendingCaps.length > 0) {
+      const [key, cap] = this._pendingCaps.pop()
+      hypercoreCapability(this.noiseStream.isInitiator, this.noiseStream.handshakeHash, key, cap)
+    }
+
     const state = { start: 0, end: 0, buffer: null }
     const lens = new Array(batch.length)
 
@@ -386,10 +405,18 @@ module.exports = class Protocol {
   }
 
   _announceCore (alias, key, discoveryKey) {
+    const cap = b4a.alloc(32)
+
+    if (!this.noiseStream.handshakeHash) {
+      this._pendingCaps.push([key, cap]) // encode it later...
+    } else {
+      hypercoreCapability(this.noiseStream.isInitiator, this.noiseStream.handshakeHash, key, cap)
+    }
+
     this.send(2, messages.core, -1, {
       alias: alias,
       discoveryKey: discoveryKey,
-      capability: b4a.alloc(32) // TODO
+      capability: cap
     })
   }
 
@@ -469,7 +496,11 @@ module.exports = class Protocol {
     if (m.alias === this._remoteAliases.length) this._remoteAliases.push(null)
 
     if (peer) {
-      // TODO: check cap
+      const expectedCap = hypercoreCapability(!this.noiseStream.isInitiator, this.noiseStream.handshakeHash, peer.key)
+      if (!b4a.equals(expectedCap, m.capability)) {
+        this.destroy(new Error('Remote sent an invalid capability'))
+        return
+      }
 
       if (m.alias >= this._remoteAliases.length) {
         this.destroy(new Error('Remote alias out of bounds'))
@@ -544,3 +575,9 @@ function noop () {}
 function isPromise (p) {
   return !!p && typeof p.then === 'function'
 }
+
+function hypercoreCapability (initiator, handshakeHash, key, cap = b4a.alloc(32)) {
+  const ns = initiator ? NS_HYPERCORE_INITIATOR : NS_HYPERCORE_RESPONDER
+  sodium.crypto_generichash_batch(cap, [handshakeHash, key], ns)
+  return cap
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hypercore",
-  "version": "10.0.0-alpha.20",
+  "version": "10.0.0-alpha.21",
   "description": "Hypercore 10",
   "main": "index.js",
   "scripts": {