hdiff-update-core 0.1.3

Core library for signed HDiffPatch-based differential application updates.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94

use base64::{engine::general_purpose::STANDARD, Engine};
use ed25519_dalek::{Signature, Signer, SigningKey, VerifyingKey};
use serde::{Deserialize, Serialize};

use crate::{Error, ManifestSignature, Result, UpdateManifest, MANIFEST_SIGNATURE_ALGORITHM};

#[derive(Debug, Clone, Serialize, Deserialize)]
#[serde(rename_all = "camelCase")]
pub struct UpdateKeypair {
    pub private_key: String,
    pub public_key: String,
    pub key_id: String,
}

pub fn generate_update_keypair() -> Result<UpdateKeypair> {
    let mut secret = [0_u8; 32];
    getrandom::fill(&mut secret).map_err(|error| Error::InvalidKeyMaterial {
        kind: "random seed".to_string(),
        message: error.to_string(),
    })?;
    let signing_key = SigningKey::from_bytes(&secret);
    let public_key = signing_key.verifying_key().to_bytes();

    Ok(UpdateKeypair {
        private_key: STANDARD.encode(secret),
        public_key: STANDARD.encode(public_key),
        key_id: key_id(&public_key),
    })
}

pub fn sign_manifest(
    manifest: &mut UpdateManifest,
    private_key: &str,
    signature_key_id: Option<String>,
) -> Result<ManifestSignature> {
    let signing_key = signing_key_from_base64(private_key)?;
    let signature: Signature = signing_key.sign(&manifest.signing_payload()?);
    let signing_key_id =
        signature_key_id.unwrap_or_else(|| key_id(&signing_key.verifying_key().to_bytes()));
    let signature = ManifestSignature {
        algorithm: MANIFEST_SIGNATURE_ALGORITHM.to_string(),
        key_id: Some(signing_key_id),
        value: STANDARD.encode(signature.to_bytes()),
    };
    manifest.signature = Some(signature.clone());
    Ok(signature)
}

pub fn verify_manifest_signature(manifest: &UpdateManifest, public_key: &str) -> Result<()> {
    let signature = manifest.signature.as_ref().ok_or(Error::SignatureMissing)?;
    if signature.algorithm != MANIFEST_SIGNATURE_ALGORITHM {
        return Err(Error::UnsupportedAlgorithm(signature.algorithm.clone()));
    }

    let verifying_key = verifying_key_from_base64(public_key)?;
    let signature_bytes = decode_exact::<64>(&signature.value, "manifest signature")?;
    let signature = Signature::from_bytes(&signature_bytes);
    verifying_key
        .verify_strict(&manifest.signing_payload()?, &signature)
        .map_err(|_| Error::SignatureVerificationFailed)
}

pub fn key_id(public_key: &[u8; 32]) -> String {
    let digest = crate::sha256_bytes(public_key);
    digest[..16].to_string()
}

fn signing_key_from_base64(private_key: &str) -> Result<SigningKey> {
    let bytes = decode_exact::<32>(private_key, "private key")?;
    Ok(SigningKey::from_bytes(&bytes))
}

fn verifying_key_from_base64(public_key: &str) -> Result<VerifyingKey> {
    let bytes = decode_exact::<32>(public_key, "public key")?;
    VerifyingKey::from_bytes(&bytes).map_err(|error| Error::InvalidKeyMaterial {
        kind: "public key".to_string(),
        message: error.to_string(),
    })
}

fn decode_exact<const N: usize>(value: &str, kind: &str) -> Result<[u8; N]> {
    let bytes = STANDARD
        .decode(value.trim())
        .map_err(|error| Error::InvalidKeyMaterial {
            kind: kind.to_string(),
            message: error.to_string(),
        })?;
    bytes
        .try_into()
        .map_err(|bytes: Vec<u8>| Error::InvalidKeyMaterial {
            kind: kind.to_string(),
            message: format!("expected {N} bytes, got {}", bytes.len()),
        })
}