netviper-talos 0.2.4

A Rust-based secure licensing system.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84

//! Hardware fingerprinting for Talos license binding.
//!
//! This module unifies platform-specific hardware identification
//! (CPU ID + motherboard/board ID) into a *hashed* fingerprint.
//!
//! Why hashed?
//! - avoids storing raw hardware serials (privacy + security)
//! - normalizes inconsistent values across OSes
//! - allows stable lifetime binding without revealing device secrets

use crate::errors::{LicenseError, LicenseResult};
use ring::digest;

#[cfg(target_os = "linux")]
mod linux;
#[cfg(target_os = "macos")]
mod macos;
/// Platform-specific hardware ID providers
#[cfg(target_os = "windows")]
mod windows;

/// Returns a *consistent hashed fingerprint* based on the device's hardware.
///
/// Steps:
/// 1. Try to retrieve CPU ID (best-effort)
/// 2. Try to retrieve motherboard / board serial (best-effort)
/// 3. Replace missing values with deterministic fallback labels
/// 4. Compute SHA-256 hash over "cpu_id|board_id"
///
/// Example output:
///     "0a3e7c8d9921ac4d89f11223f4d447adfeec2d722f974146ecf2917c4e97fcb2"
pub fn get_hardware_id() -> String {
    // 1. Best-effort raw identifiers
    let cpu_raw = get_cpu_id().unwrap_or_else(|_| "cpu_unknown".to_string());
    let board_raw = get_motherboard_id().unwrap_or_else(|_| "board_unknown".to_string());

    let combined = format!("{}|{}", cpu_raw, board_raw);

    // 2. Hash the combined ID using SHA-256
    let digest = digest::digest(&digest::SHA256, combined.as_bytes());
    hex::encode(digest)
}

/// Retrieve the CPU identifier for the current platform.
fn get_cpu_id() -> LicenseResult<String> {
    #[cfg(target_os = "windows")]
    {
        windows::get_cpu_id()
            .map_err(|e| LicenseError::ServerError(format!("Win CPU ID error: {e}")))
    }

    #[cfg(target_os = "macos")]
    {
        macos::get_cpu_id()
            .map_err(|e| LicenseError::ServerError(format!("macOS CPU ID error: {e}")))
    }

    #[cfg(target_os = "linux")]
    {
        linux::get_cpu_id()
            .map_err(|e| LicenseError::ServerError(format!("Linux CPU ID error: {e}")))
    }
}

/// Retrieve the motherboard / board serial identifier.
fn get_motherboard_id() -> LicenseResult<String> {
    #[cfg(target_os = "windows")]
    {
        windows::get_motherboard_id()
            .map_err(|e| LicenseError::ServerError(format!("Win Board ID error: {e}")))
    }

    #[cfg(target_os = "macos")]
    {
        macos::get_motherboard_id()
            .map_err(|e| LicenseError::ServerError(format!("macOS Board ID error: {e}")))
    }

    #[cfg(target_os = "linux")]
    {
        linux::get_motherboard_id()
            .map_err(|e| LicenseError::ServerError(format!("Linux Board ID error: {e}")))
    }
}