262 lines
15 KiB
PHP
262 lines
15 KiB
PHP
<?php
|
|
|
|
/**
|
|
* AuthKeyHandler module.
|
|
*
|
|
* This file is part of MadelineProto.
|
|
* MadelineProto is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.
|
|
* MadelineProto is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
|
|
* See the GNU Affero General Public License for more details.
|
|
* You should have received a copy of the GNU General Public License along with MadelineProto.
|
|
* If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
* @author Daniil Gentili <daniil@daniil.it>
|
|
* @copyright 2016-2019 Daniil Gentili <daniil@daniil.it>
|
|
* @license https://opensource.org/licenses/AGPL-3.0 AGPLv3
|
|
*
|
|
* @link https://docs.madelineproto.xyz MadelineProto documentation
|
|
*/
|
|
|
|
namespace danog\MadelineProto\SecretChats;
|
|
|
|
/**
|
|
* Manages secret chats.
|
|
*
|
|
* https://core.telegram.org/api/end-to-end
|
|
*/
|
|
trait AuthKeyHandler
|
|
{
|
|
protected $temp_requested_secret_chats = [];
|
|
protected $secret_chats = [];
|
|
|
|
public function accept_secret_chat_async($params)
|
|
{
|
|
//$this->logger->logger($params['id'],$this->secret_chat_status($params['id']));
|
|
if ($this->secret_chat_status($params['id']) !== 0) {
|
|
//$this->logger->logger($this->secret_chat_status($params['id']));
|
|
$this->logger->logger("I've already accepted secret chat ".$params['id']);
|
|
|
|
return false;
|
|
}
|
|
$dh_config = yield $this->get_dh_config_async();
|
|
$this->logger->logger('Generating b...', \danog\MadelineProto\Logger::VERBOSE);
|
|
$b = new \phpseclib\Math\BigInteger($this->random(256), 256);
|
|
$params['g_a'] = new \phpseclib\Math\BigInteger((string) $params['g_a'], 256);
|
|
$this->check_G($params['g_a'], $dh_config['p']);
|
|
$key = ['auth_key' => \str_pad($params['g_a']->powMod($b, $dh_config['p'])->toBytes(), 256, \chr(0), \STR_PAD_LEFT)];
|
|
//$this->logger->logger($key);
|
|
$key['fingerprint'] = \substr(\sha1($key['auth_key'], true), -8);
|
|
$key['visualization_orig'] = \substr(\sha1($key['auth_key'], true), 16);
|
|
$key['visualization_46'] = \substr(\hash('sha256', $key['auth_key'], true), 20);
|
|
$this->secret_chats[$params['id']] = ['key' => $key, 'admin' => false, 'user_id' => $params['admin_id'], 'InputEncryptedChat' => ['_' => 'inputEncryptedChat', 'chat_id' => $params['id'], 'access_hash' => $params['access_hash']], 'in_seq_no_x' => 1, 'out_seq_no_x' => 0, 'in_seq_no' => 0, 'out_seq_no' => 0, 'layer' => 8, 'ttl' => 0, 'ttr' => 100, 'updated' => \time(), 'incoming' => [], 'outgoing' => [], 'created' => \time(), 'rekeying' => [0], 'key_x' => 'from server', 'mtproto' => 1];
|
|
$g_b = $dh_config['g']->powMod($b, $dh_config['p']);
|
|
$this->check_G($g_b, $dh_config['p']);
|
|
yield $this->method_call_async_read('messages.acceptEncryption', ['peer' => $params['id'], 'g_b' => $g_b->toBytes(), 'key_fingerprint' => $key['fingerprint']], ['datacenter' => $this->datacenter->curdc]);
|
|
yield $this->notify_layer_async($params['id']);
|
|
$this->logger->logger('Secret chat '.$params['id'].' accepted successfully!', \danog\MadelineProto\Logger::NOTICE);
|
|
}
|
|
|
|
public function request_secret_chat_async($user)
|
|
{
|
|
$user = yield $this->get_info_async($user);
|
|
if (!isset($user['InputUser'])) {
|
|
throw new \danog\MadelineProto\Exception('This peer is not present in the internal peer database');
|
|
}
|
|
$user = $user['InputUser'];
|
|
$this->logger->logger('Creating secret chat with '.$user['user_id'].'...', \danog\MadelineProto\Logger::VERBOSE);
|
|
$dh_config = yield $this->get_dh_config_async();
|
|
$this->logger->logger('Generating a...', \danog\MadelineProto\Logger::VERBOSE);
|
|
$a = new \phpseclib\Math\BigInteger($this->random(256), 256);
|
|
$this->logger->logger('Generating g_a...', \danog\MadelineProto\Logger::VERBOSE);
|
|
$g_a = $dh_config['g']->powMod($a, $dh_config['p']);
|
|
$this->check_G($g_a, $dh_config['p']);
|
|
$res = yield $this->method_call_async_read('messages.requestEncryption', ['user_id' => $user, 'g_a' => $g_a->toBytes()], ['datacenter' => $this->datacenter->curdc]);
|
|
$this->temp_requested_secret_chats[$res['id']] = $a;
|
|
$this->updaters[false]->resume();
|
|
$this->logger->logger('Secret chat '.$res['id'].' requested successfully!', \danog\MadelineProto\Logger::NOTICE);
|
|
|
|
return $res['id'];
|
|
}
|
|
|
|
public function complete_secret_chat_async($params)
|
|
{
|
|
if ($this->secret_chat_status($params['id']) !== 1) {
|
|
//$this->logger->logger($this->secret_chat_status($params['id']));
|
|
$this->logger->logger('Could not find and complete secret chat '.$params['id']);
|
|
|
|
return false;
|
|
}
|
|
$dh_config = yield $this->get_dh_config_async();
|
|
$params['g_a_or_b'] = new \phpseclib\Math\BigInteger((string) $params['g_a_or_b'], 256);
|
|
$this->check_G($params['g_a_or_b'], $dh_config['p']);
|
|
$key = ['auth_key' => \str_pad($params['g_a_or_b']->powMod($this->temp_requested_secret_chats[$params['id']], $dh_config['p'])->toBytes(), 256, \chr(0), \STR_PAD_LEFT)];
|
|
unset($this->temp_requested_secret_chats[$params['id']]);
|
|
$key['fingerprint'] = \substr(\sha1($key['auth_key'], true), -8);
|
|
//$this->logger->logger($key);
|
|
if ($key['fingerprint'] !== $params['key_fingerprint']) {
|
|
yield $this->discard_secret_chat_async($params['id']);
|
|
|
|
throw new \danog\MadelineProto\SecurityException('Invalid key fingerprint!');
|
|
}
|
|
$key['visualization_orig'] = \substr(\sha1($key['auth_key'], true), 16);
|
|
$key['visualization_46'] = \substr(\hash('sha256', $key['auth_key'], true), 20);
|
|
$this->secret_chats[$params['id']] = ['key' => $key, 'admin' => true, 'user_id' => $params['participant_id'], 'InputEncryptedChat' => ['chat_id' => $params['id'], 'access_hash' => $params['access_hash'], '_' => 'inputEncryptedChat'], 'in_seq_no_x' => 0, 'out_seq_no_x' => 1, 'in_seq_no' => 0, 'out_seq_no' => 0, 'layer' => 8, 'ttl' => 0, 'ttr' => 100, 'updated' => \time(), 'incoming' => [], 'outgoing' => [], 'created' => \time(), 'rekeying' => [0], 'key_x' => 'to server', 'mtproto' => 1];
|
|
yield $this->notify_layer_async($params['id']);
|
|
$this->logger->logger('Secret chat '.$params['id'].' completed successfully!', \danog\MadelineProto\Logger::NOTICE);
|
|
}
|
|
|
|
public function notify_layer_async($chat)
|
|
{
|
|
yield $this->method_call_async_read('messages.sendEncryptedService', ['peer' => $chat, 'message' => ['_' => 'decryptedMessageService', 'action' => ['_' => 'decryptedMessageActionNotifyLayer', 'layer' => $this->encrypted_layer]]], ['datacenter' => $this->datacenter->curdc]);
|
|
}
|
|
|
|
protected $temp_rekeyed_secret_chats = [];
|
|
|
|
public function rekey_async($chat)
|
|
{
|
|
if ($this->secret_chats[$chat]['rekeying'][0] !== 0) {
|
|
return;
|
|
}
|
|
$this->logger->logger('Rekeying secret chat '.$chat.'...', \danog\MadelineProto\Logger::VERBOSE);
|
|
$dh_config = yield $this->get_dh_config_async();
|
|
$this->logger->logger('Generating a...', \danog\MadelineProto\Logger::VERBOSE);
|
|
$a = new \phpseclib\Math\BigInteger($this->random(256), 256);
|
|
$this->logger->logger('Generating g_a...', \danog\MadelineProto\Logger::VERBOSE);
|
|
$g_a = $dh_config['g']->powMod($a, $dh_config['p']);
|
|
$this->check_G($g_a, $dh_config['p']);
|
|
$e = $this->random(8);
|
|
$this->temp_rekeyed_secret_chats[$e] = $a;
|
|
$this->secret_chats[$chat]['rekeying'] = [1, $e];
|
|
yield $this->method_call_async_read('messages.sendEncryptedService', ['peer' => $chat, 'message' => ['_' => 'decryptedMessageService', 'action' => ['_' => 'decryptedMessageActionRequestKey', 'g_a' => $g_a->toBytes(), 'exchange_id' => $e]]], ['datacenter' => $this->datacenter->curdc]);
|
|
$this->updaters[false]->resume();
|
|
|
|
return $e;
|
|
}
|
|
|
|
public function accept_rekey_async($chat, $params)
|
|
{
|
|
if ($this->secret_chats[$chat]['rekeying'][0] !== 0) {
|
|
$my_exchange_id = new \phpseclib\Math\BigInteger($this->secret_chats[$chat]['rekeying'][1], -256);
|
|
$other_exchange_id = new \phpseclib\Math\BigInteger($params['exchange_id'], -256);
|
|
//$this->logger->logger($my, $params);
|
|
if ($my_exchange_id->compare($other_exchange_id) > 0) {
|
|
return;
|
|
}
|
|
if ($my_exchange_id->compare($other_exchange_id) === 0) {
|
|
$this->secret_chats[$chat]['rekeying'] = [0];
|
|
|
|
return;
|
|
}
|
|
}
|
|
$this->logger->logger('Accepting rekeying of secret chat '.$chat.'...', \danog\MadelineProto\Logger::VERBOSE);
|
|
$dh_config = yield $this->get_dh_config_async();
|
|
$this->logger->logger('Generating b...', \danog\MadelineProto\Logger::VERBOSE);
|
|
$b = new \phpseclib\Math\BigInteger($this->random(256), 256);
|
|
$params['g_a'] = new \phpseclib\Math\BigInteger((string) $params['g_a'], 256);
|
|
$this->check_G($params['g_a'], $dh_config['p']);
|
|
$key = ['auth_key' => \str_pad($params['g_a']->powMod($b, $dh_config['p'])->toBytes(), 256, \chr(0), \STR_PAD_LEFT)];
|
|
$key['fingerprint'] = \substr(\sha1($key['auth_key'], true), -8);
|
|
$key['visualization_orig'] = $this->secret_chats[$chat]['key']['visualization_orig'];
|
|
$key['visualization_46'] = \substr(\hash('sha256', $key['auth_key'], true), 20);
|
|
$this->temp_rekeyed_secret_chats[$params['exchange_id']] = $key;
|
|
$this->secret_chats[$chat]['rekeying'] = [2, $params['exchange_id']];
|
|
$g_b = $dh_config['g']->powMod($b, $dh_config['p']);
|
|
$this->check_G($g_b, $dh_config['p']);
|
|
yield $this->method_call_async_read('messages.sendEncryptedService', ['peer' => $chat, 'message' => ['_' => 'decryptedMessageService', 'action' => ['_' => 'decryptedMessageActionAcceptKey', 'g_b' => $g_b->toBytes(), 'exchange_id' => $params['exchange_id'], 'key_fingerprint' => $key['fingerprint']]]], ['datacenter' => $this->datacenter->curdc]);
|
|
$this->updaters[false]->resume();
|
|
}
|
|
|
|
public function commit_rekey_async($chat, $params)
|
|
{
|
|
if ($this->secret_chats[$chat]['rekeying'][0] !== 1 || !isset($this->temp_rekeyed_secret_chats[$params['exchange_id']])) {
|
|
$this->secret_chats[$chat]['rekeying'] = [0];
|
|
|
|
return;
|
|
}
|
|
$this->logger->logger('Committing rekeying of secret chat '.$chat.'...', \danog\MadelineProto\Logger::VERBOSE);
|
|
$dh_config = yield $this->get_dh_config_async();
|
|
$params['g_b'] = new \phpseclib\Math\BigInteger((string) $params['g_b'], 256);
|
|
$this->check_G($params['g_b'], $dh_config['p']);
|
|
$key = ['auth_key' => \str_pad($params['g_b']->powMod($this->temp_rekeyed_secret_chats[$params['exchange_id']], $dh_config['p'])->toBytes(), 256, \chr(0), \STR_PAD_LEFT)];
|
|
$key['fingerprint'] = \substr(\sha1($key['auth_key'], true), -8);
|
|
$key['visualization_orig'] = $this->secret_chats[$chat]['key']['visualization_orig'];
|
|
$key['visualization_46'] = \substr(\hash('sha256', $key['auth_key'], true), 20);
|
|
if ($key['fingerprint'] !== $params['key_fingerprint']) {
|
|
yield $this->method_call_async_read('messages.sendEncryptedService', ['peer' => $chat, 'message' => ['_' => 'decryptedMessageService', 'action' => ['_' => 'decryptedMessageActionAbortKey', 'exchange_id' => $params['exchange_id']]]], ['datacenter' => $this->datacenter->curdc]);
|
|
|
|
throw new \danog\MadelineProto\SecurityException('Invalid key fingerprint!');
|
|
}
|
|
yield $this->method_call_async_read('messages.sendEncryptedService', ['peer' => $chat, 'message' => ['_' => 'decryptedMessageService', 'action' => ['_' => 'decryptedMessageActionCommitKey', 'exchange_id' => $params['exchange_id'], 'key_fingerprint' => $key['fingerprint']]]], ['datacenter' => $this->datacenter->curdc]);
|
|
unset($this->temp_rekeyed_secret_chats[$chat]);
|
|
$this->secret_chats[$chat]['rekeying'] = [0];
|
|
$this->secret_chats[$chat]['old_key'] = $this->secret_chats[$chat]['key'];
|
|
$this->secret_chats[$chat]['key'] = $key;
|
|
$this->secret_chats[$chat]['ttr'] = 100;
|
|
$this->secret_chats[$chat]['updated'] = \time();
|
|
$this->updaters[false]->resume();
|
|
}
|
|
|
|
public function complete_rekey_async($chat, $params)
|
|
{
|
|
if ($this->secret_chats[$chat]['rekeying'][0] !== 2 || !isset($this->temp_rekeyed_secret_chats['fingerprint'])) {
|
|
return;
|
|
}
|
|
if ($this->temp_rekeyed_secret_chats['fingerprint'] !== $params['key_fingerprint']) {
|
|
yield $this->method_call_async_read('messages.sendEncryptedService', ['peer' => $chat, 'message' => ['_' => 'decryptedMessageService', 'action' => ['_' => 'decryptedMessageActionAbortKey', 'exchange_id' => $params['exchange_id']]]], ['datacenter' => $this->datacenter->curdc]);
|
|
|
|
throw new \danog\MadelineProto\SecurityException('Invalid key fingerprint!');
|
|
}
|
|
$this->logger->logger('Completing rekeying of secret chat '.$chat.'...', \danog\MadelineProto\Logger::VERBOSE);
|
|
$this->secret_chats[$chat]['rekeying'] = [0];
|
|
$this->secret_chats[$chat]['old_key'] = $this->secret_chats[$chat]['key'];
|
|
$this->secret_chats[$chat]['key'] = $this->temp_rekeyed_secret_chats[$chat];
|
|
$this->secret_chats[$chat]['ttr'] = 100;
|
|
$this->secret_chats[$chat]['updated'] = \time();
|
|
unset($this->temp_rekeyed_secret_chats[$params['exchange_id']]);
|
|
yield $this->method_call_async_read('messages.sendEncryptedService', ['peer' => $chat, 'message' => ['_' => 'decryptedMessageService', 'action' => ['_' => 'decryptedMessageActionNoop']]], ['datacenter' => $this->datacenter->curdc]);
|
|
$this->logger->logger('Secret chat '.$chat.' rekeyed successfully!', \danog\MadelineProto\Logger::VERBOSE);
|
|
|
|
return true;
|
|
}
|
|
|
|
public function secret_chat_status($chat)
|
|
{
|
|
if (isset($this->secret_chats[$chat])) {
|
|
return 2;
|
|
}
|
|
if (isset($this->temp_requested_secret_chats[$chat])) {
|
|
return 1;
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
public function get_secret_chat($chat)
|
|
{
|
|
return $this->secret_chats[\is_array($chat) ? $chat['chat_id'] : $chat];
|
|
}
|
|
|
|
public function discard_secret_chat_async($chat)
|
|
{
|
|
$this->logger->logger('Discarding secret chat '.$chat.'...', \danog\MadelineProto\Logger::VERBOSE);
|
|
//$this->logger->logger(debug_backtrace(0)[0]);
|
|
if (isset($this->secret_chats[$chat])) {
|
|
unset($this->secret_chats[$chat]);
|
|
}
|
|
if (isset($this->temp_requested_secret_chats[$chat])) {
|
|
unset($this->temp_requested_secret_chats[$chat]);
|
|
}
|
|
if (isset($this->temp_rekeyed_secret_chats[$chat])) {
|
|
unset($this->temp_rekeyed_secret_chats[$chat]);
|
|
}
|
|
|
|
try {
|
|
yield $this->method_call_async_read('messages.discardEncryption', ['chat_id' => $chat], ['datacenter' => $this->datacenter->curdc]);
|
|
} catch (\danog\MadelineProto\RPCErrorException $e) {
|
|
if ($e->rpc !== 'ENCRYPTION_ALREADY_DECLINED') {
|
|
throw $e;
|
|
}
|
|
}
|
|
}
|
|
}
|