Node / ReticulumProjects / MeshChatX.git / files / meshchatx / src / backend / plugin_rsg.py

Displaying Raw • Download

T8b949e# SPDX-License-Identifier: 0BSD

T8b949e"""Reticulum Signature (.rsg) verification for MeshChatX plugins."""

Tff7b72from T7ee787__future__ Tff7b72import Te6edf3annotations

Tff7b72from T7ee787dataclasses Tff7b72import Te6edf3dataclass

Tff7b72from T7ee787typing Tff7b72import Te6edf3Any

Tff7b72import T7ee787RNS

Tff7b72from T7ee787RNST7ee787.T7ee787vendor Tff7b72import Te6edf3umsgpack

Te6edf3ED25519_SIG_LEN Tff7b72= T79c0ff64

Te6edf3TRUNCATED_HASH_LEN Tff7b72= Te6edf3RNSTff7b72.Td2a8ffIdentityTff7b72.Td2a8ffTRUNCATED_HASHLENGTH Tff7b72/Tff7b72/ T79c0ff8

Te6edf3PUBLIC_KEY_LEN Tff7b72= Te6edf3RNSTff7b72.Td2a8ffIdentityTff7b72.Td2a8ffKEYSIZE Tff7b72/Tff7b72/ T79c0ff8

Te6edf3SHA256_HASH_LEN Tff7b72= T79c0ff32

Tff7b72class T56d364RSGErrorTb4b4b4(Tf85149ValueErrorTb4b4b4)Tb4b4b4:

T8b949e"""Raised when RSG data fails validation."""

Tf0883e@dataclass

Tff7b72class T56d364SignatureInfoTb4b4b4:

Te6edf3presentTb4b4b4: Tffa657bool Tff7b72= Tff7b72False

Te6edf3validTb4b4b4: Tffa657bool Tff7b72= Tff7b72False

Te6edf3signerTb4b4b4: Tffa657str Tff7b72= Ta5d6ff"Ta5d6ff"

Te6edf3signer_nameTb4b4b4: Tffa657str Tff7b72= Ta5d6ff"Ta5d6ff"

Te6edf3trustedTb4b4b4: Tffa657bool Tff7b72= Tff7b72False

Te6edf3errorTb4b4b4: Tffa657str Tff7b72= Ta5d6ff"Ta5d6ff"

Tff7b72def Td2a8ffto_dictTb4b4b4(Tff7b72selfTb4b4b4) Tff7b72-Tff7b72> Tffa657dictTb4b4b4[Tffa657strTb4b4b4, Te6edf3AnyTb4b4b4]Tb4b4b4:

Te6edf3outTb4b4b4: Tffa657dictTb4b4b4[Tffa657strTb4b4b4, Te6edf3AnyTb4b4b4] Tff7b72= Tb4b4b4{

Ta5d6ff"Ta5d6ffpresentTa5d6ff"Tb4b4b4: Tff7b72selfTff7b72.Td2a8ffpresentTb4b4b4,

Ta5d6ff"Ta5d6ffvalidTa5d6ff"Tb4b4b4: Tff7b72selfTff7b72.Td2a8ffvalidTb4b4b4,

Ta5d6ff"Ta5d6fftrustedTa5d6ff"Tb4b4b4: Tff7b72selfTff7b72.Td2a8fftrustedTb4b4b4,

Tb4b4b4}

Tff7b72if Tff7b72selfTff7b72.Td2a8ffsignerTb4b4b4:

Te6edf3outTb4b4b4[Ta5d6ff"Ta5d6ffsignerTa5d6ff"Tb4b4b4] Tff7b72= Tff7b72selfTff7b72.Td2a8ffsigner

Tff7b72if Tff7b72selfTff7b72.Td2a8ffsigner_nameTb4b4b4:

Te6edf3outTb4b4b4[Ta5d6ff"Ta5d6ffsigner_nameTa5d6ff"Tb4b4b4] Tff7b72= Tff7b72selfTff7b72.Td2a8ffsigner_name

Tff7b72if Tff7b72selfTff7b72.Td2a8fferrorTb4b4b4:

Te6edf3outTb4b4b4[Ta5d6ff"Ta5d6fferrorTa5d6ff"Tb4b4b4] Tff7b72= Tff7b72selfTff7b72.Td2a8fferror

Tff7b72return Te6edf3out

Tff7b72def Td2a8ff_meta_bytesTb4b4b4(Te6edf3metaTb4b4b4: Tffa657dictTb4b4b4, Te6edf3keyTb4b4b4: Tffa657strTb4b4b4) Tff7b72-Tff7b72> Tffa657bytes Tff7b72| Tff7b72NoneTb4b4b4:

Te6edf3raw Tff7b72= Te6edf3metaTff7b72.Td2a8ffgetTb4b4b4(Te6edf3keyTb4b4b4)

Tff7b72if Tffa657isinstanceTb4b4b4(Te6edf3rawTb4b4b4, Tffa657bytesTb4b4b4)Tb4b4b4:

Tff7b72return Te6edf3raw

Tff7b72if Tffa657isinstanceTb4b4b4(Te6edf3rawTb4b4b4, Tffa657bytearrayTb4b4b4)Tb4b4b4:

Tff7b72return Tffa657bytesTb4b4b4(Te6edf3rawTb4b4b4)

Tff7b72if Tffa657isinstanceTb4b4b4(Te6edf3rawTb4b4b4, Tffa657strTb4b4b4)Tb4b4b4:

Tff7b72return Te6edf3rawTff7b72.Td2a8ffencodeTb4b4b4(Ta5d6ff"Ta5d6ffutf-8Ta5d6ff"Tb4b4b4)

Tff7b72return Tff7b72None

Tff7b72def Td2a8ffvalidate_rsgTb4b4b4(

Te6edf3rsg_dataTb4b4b4: Tffa657bytesTb4b4b4,

Te6edf3messageTb4b4b4: Tffa657bytesTb4b4b4,

Te6edf3required_signerTb4b4b4: Tffa657bytes Tff7b72| Tff7b72None Tff7b72= Tff7b72NoneTb4b4b4,

Tb4b4b4) Tff7b72-Tff7b72> Tffa657strTb4b4b4:

T8b949e"""Verify RSG bytes against message. Returns lowercase signer hex hash."""

Tff7b72if Tff7b72not Te6edf3messageTb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffno message for rsg validationTa5d6ff"Tb4b4b4)

Tff7b72if Tff7b72not Te6edf3rsg_data Tff7b72or Tffa657lenTb4b4b4(Te6edf3rsg_dataTb4b4b4) Tff7b72< Te6edf3ED25519_SIG_LEN Tff7b72+ T79c0ff1Tb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffrsg data too shortTa5d6ff"Tb4b4b4)

Te6edf3signature Tff7b72= Te6edf3rsg_dataTb4b4b4[Tb4b4b4:Te6edf3ED25519_SIG_LENTb4b4b4]

Te6edf3envelope_bytes Tff7b72= Te6edf3rsg_dataTb4b4b4[Te6edf3ED25519_SIG_LENTb4b4b4:Tb4b4b4]

Tff7b72tryTb4b4b4:

Te6edf3envelope Tff7b72= Te6edf3umsgpackTff7b72.Td2a8ffunpackbTb4b4b4(Te6edf3envelope_bytesTb4b4b4)

Tff7b72except Tf85149Exception Tff7b72as Te6edf3excTb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6fffTa5d6ff"Ta5d6ffinvalid rsg envelope: Tffd700{Te6edf3excTffd700}Ta5d6ff"Tb4b4b4) Tff7b72from T7ee787exc

Tff7b72if Tff7b72not Tffa657isinstanceTb4b4b4(Te6edf3envelopeTb4b4b4, Tffa657dictTb4b4b4)Tb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffinvalid rsg envelopeTa5d6ff"Tb4b4b4)

Tff7b72if Te6edf3envelopeTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffhashtypeTa5d6ff"Tb4b4b4) Tff7b72!= Ta5d6ff"Ta5d6ffsha256Ta5d6ff"Tb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffunsupported rsg hash typeTa5d6ff"Tb4b4b4)

Te6edf3envelope_hash Tff7b72= Te6edf3envelopeTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffhashTa5d6ff"Tb4b4b4)

Tff7b72if Tb4b4b4(

Tff7b72not Tffa657isinstanceTb4b4b4(Te6edf3envelope_hashTb4b4b4, Tb4b4b4(Tffa657bytesTb4b4b4, Tffa657bytearrayTb4b4b4)Tb4b4b4)

Tff7b72or Tffa657lenTb4b4b4(Te6edf3envelope_hashTb4b4b4) Tff7b72!= Te6edf3SHA256_HASH_LEN

Tb4b4b4)Tb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffrsg hash mismatchTa5d6ff"Tb4b4b4)

Tff7b72if Tffa657bytesTb4b4b4(Te6edf3envelope_hashTb4b4b4) Tff7b72!= Te6edf3RNSTff7b72.Td2a8ffIdentityTff7b72.Td2a8fffull_hashTb4b4b4(Te6edf3messageTb4b4b4)Tb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffrsg hash mismatchTa5d6ff"Tb4b4b4)

Te6edf3meta Tff7b72= Te6edf3envelopeTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffmetaTa5d6ff"Tb4b4b4)

Tff7b72if Tff7b72not Tffa657isinstanceTb4b4b4(Te6edf3metaTb4b4b4, Tffa657dictTb4b4b4)Tb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffinvalid rsg envelopeTa5d6ff"Tb4b4b4)

Te6edf3signer_raw Tff7b72= Te6edf3_meta_bytesTb4b4b4(Te6edf3metaTb4b4b4, Ta5d6ff"Ta5d6ffsignerTa5d6ff"Tb4b4b4)

Tff7b72if Te6edf3signer_raw Tff7b72is Tff7b72None Tff7b72or Tffa657lenTb4b4b4(Te6edf3signer_rawTb4b4b4) Tff7b72!= Te6edf3TRUNCATED_HASH_LENTb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffrsg signer mismatchTa5d6ff"Tb4b4b4)

Te6edf3pub_key_raw Tff7b72= Te6edf3_meta_bytesTb4b4b4(Te6edf3metaTb4b4b4, Ta5d6ff"Ta5d6ffpubkeyTa5d6ff"Tb4b4b4)

Tff7b72if Te6edf3pub_key_raw Tff7b72is Tff7b72None Tff7b72or Tffa657lenTb4b4b4(Te6edf3pub_key_rawTb4b4b4) Tff7b72!= Te6edf3PUBLIC_KEY_LENTb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffinvalid rsg public keyTa5d6ff"Tb4b4b4)

Te6edf3signing_identity Tff7b72= Te6edf3RNSTff7b72.Td2a8ffIdentityTb4b4b4(Te6edf3create_keysTff7b72=Tff7b72FalseTb4b4b4)

Tff7b72tryTb4b4b4:

Te6edf3signing_identityTff7b72.Td2a8ffload_public_keyTb4b4b4(Te6edf3pub_key_rawTb4b4b4)

Tff7b72except Tf85149Exception Tff7b72as Te6edf3excTb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffinvalid rsg public keyTa5d6ff"Tb4b4b4) Tff7b72from T7ee787exc

Tff7b72if Te6edf3signing_identityTff7b72.Td2a8ffhash Tff7b72!= Te6edf3signer_rawTb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffrsg signer mismatchTa5d6ff"Tb4b4b4)

Tff7b72if Te6edf3required_signer Tff7b72and Te6edf3signing_identityTff7b72.Td2a8ffhash Tff7b72!= Te6edf3required_signerTb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffrsg signer mismatchTa5d6ff"Tb4b4b4)

Tff7b72if Tff7b72not Te6edf3signing_identityTff7b72.Td2a8ffvalidateTb4b4b4(Te6edf3signatureTb4b4b4, Te6edf3envelope_bytesTb4b4b4)Tb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffinvalid rsg signatureTa5d6ff"Tb4b4b4)

Tff7b72return Te6edf3signing_identityTff7b72.Td2a8ffhashTff7b72.Td2a8ffhexTb4b4b4(Tb4b4b4)

Tff7b72def Td2a8ffcreate_rsgTb4b4b4(Te6edf3messageTb4b4b4: Tffa657bytesTb4b4b4, Te6edf3identityTb4b4b4: Te6edf3RNSTff7b72.Td2a8ffIdentityTb4b4b4) Tff7b72-Tff7b72> Tffa657bytesTb4b4b4:

Tff7b72if Tff7b72not Te6edf3messageTb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffno message for rsg creationTa5d6ff"Tb4b4b4)

Tff7b72if Te6edf3identityTff7b72.Td2a8ffsig_prv Tff7b72is Tff7b72NoneTb4b4b4:

Tff7b72raise Te6edf3RSGErrorTb4b4b4(Ta5d6ff"Ta5d6ffidentity has no private keyTa5d6ff"Tb4b4b4)

Te6edf3signed_data Tff7b72= Tb4b4b4{

Ta5d6ff"Ta5d6ffhashtypeTa5d6ff"Tb4b4b4: Ta5d6ff"Ta5d6ffsha256Ta5d6ff"Tb4b4b4,

Ta5d6ff"Ta5d6ffhashTa5d6ff"Tb4b4b4: Te6edf3RNSTff7b72.Td2a8ffIdentityTff7b72.Td2a8fffull_hashTb4b4b4(Te6edf3messageTb4b4b4)Tb4b4b4,

Ta5d6ff"Ta5d6ffmetaTa5d6ff"Tb4b4b4: Tb4b4b4{

Ta5d6ff"Ta5d6ffsignerTa5d6ff"Tb4b4b4: Te6edf3identityTff7b72.Td2a8ffhashTb4b4b4,

Ta5d6ff"Ta5d6ffpubkeyTa5d6ff"Tb4b4b4: Te6edf3identityTff7b72.Td2a8ffget_public_keyTb4b4b4(Tb4b4b4)Tb4b4b4,

Tb4b4b4}Tb4b4b4,

Tb4b4b4}

Te6edf3envelope Tff7b72= Te6edf3umsgpackTff7b72.Td2a8ffpackbTb4b4b4(Te6edf3signed_dataTb4b4b4)

Tff7b72return Te6edf3identityTff7b72.Td2a8ffsignTb4b4b4(Te6edf3envelopeTb4b4b4) Tff7b72+ Te6edf3envelope

Tff7b72def Td2a8ffverify_rsg_payloadTb4b4b4(Te6edf3rsg_dataTb4b4b4: Tffa657bytesTb4b4b4, Te6edf3payloadTb4b4b4: Tffa657bytesTb4b4b4) Tff7b72-Tff7b72> Te6edf3SignatureInfoTb4b4b4:

Tff7b72tryTb4b4b4:

Te6edf3signer_hex Tff7b72= Te6edf3validate_rsgTb4b4b4(Te6edf3rsg_dataTb4b4b4, Te6edf3payloadTb4b4b4)

Tff7b72except Tf85149Exception Tff7b72as Te6edf3excTb4b4b4:

Tff7b72return Te6edf3SignatureInfoTb4b4b4(Te6edf3presentTff7b72=Tff7b72TrueTb4b4b4, Te6edf3errorTff7b72=Tffa657strTb4b4b4(Te6edf3excTb4b4b4)Tb4b4b4)

Tff7b72return Te6edf3SignatureInfoTb4b4b4(Te6edf3presentTff7b72=Tff7b72TrueTb4b4b4, Te6edf3validTff7b72=Tff7b72TrueTb4b4b4, Te6edf3signerTff7b72=Te6edf3signer_hexTb4b4b4)