DwmAuthPeerAuthenticator.hh

Go to the documentation of this file.

//===========================================================================
// @(#) $Name:$
// @(#) $Id: DwmAuthPeerAuthenticator.hh 10963 2020-08-23 07:51:58Z dwm $
//===========================================================================
//  Copyright (c) Daniel W. McRobb 2017, 2018, 2020
//  All rights reserved.
//
//  Redistribution and use in source and binary forms, with or without
//  modification, are permitted provided that the following conditions
//  are met:
//
//  1. Redistributions of source code must retain the above copyright
//     notice, this list of conditions and the following disclaimer.
//  2. Redistributions in binary form must reproduce the above copyright
//     notice, this list of conditions and the following disclaimer in the
//     documentation and/or other materials provided with the distribution.
//  3. The names of the authors and copyright holders may not be used to
//     endorse or promote products derived from this software without
//     specific prior written permission.
//
//  IN NO EVENT SHALL DANIEL W. MCROBB BE LIABLE TO ANY PARTY FOR
//  DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES,
//  INCLUDING LOST PROFITS, ARISING OUT OF THE USE OF THIS SOFTWARE,
//  EVEN IF DANIEL W. MCROBB HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH
//  DAMAGE.
//
//  THE SOFTWARE PROVIDED HEREIN IS ON AN "AS IS" BASIS, AND
//  DANIEL W. MCROBB HAS NO OBLIGATION TO PROVIDE MAINTENANCE, SUPPORT,
//  UPDATES, ENHANCEMENTS, OR MODIFICATIONS. DANIEL W. MCROBB MAKES NO
//  REPRESENTATIONS AND EXTENDS NO WARRANTIES OF ANY KIND, EITHER
//  IMPLIED OR EXPRESS, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
//  WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE,
//  OR THAT THE USE OF THIS SOFTWARE WILL NOT INFRINGE ANY PATENT,
//  TRADEMARK OR OTHER RIGHTS.
//===========================================================================

//---------------------------------------------------------------------------
//---------------------------------------------------------------------------

#ifndef _DWMAUTHPEERAUTHENTICATOR_HH_
#define _DWMAUTHPEERAUTHENTICATOR_HH_

#include <chrono>
#include <string>

#include <boost/asio.hpp>

#include "DwmAuthPublicKeysFile.hh"
#include "DwmAuthECDHAgreement.hh"
#include "DwmAuthEd25519Keys.hh"

namespace Dwm {

  namespace Auth {

    //------------------------------------------------------------------------
    //------------------------------------------------------------------------
    class PeerAuthenticator
    {
    public:
      //----------------------------------------------------------------------
      //----------------------------------------------------------------------
      PeerAuthenticator(const std::string & myPrivKeyPath,
                        const std::string & pubKeysPath);

      //----------------------------------------------------------------------
      //----------------------------------------------------------------------
      PeerAuthenticator(const std::string & myId,
                        const Ed25519::KeyPair & keyPair,
                        const std::string & pubKeysPath);
      
      //----------------------------------------------------------------------
      //----------------------------------------------------------------------
      bool Authenticate(int fd, std::string & theirId,
                        std::string & agreedKey);

      //----------------------------------------------------------------------
      //----------------------------------------------------------------------
      bool Authenticate(boost::asio::ip::tcp::socket & s,
                        std::string & theirId,
                        std::string & agreedKey);
      
    private:
      std::string       _myId;
      Ed25519::KeyPair  _myKeys;
      std::string       _pubKeysPath;
      
      bool ECExchange(int fd, Auth::ECDHAgreement & agreement);
      bool ECExchange(boost::asio::ip::tcp::socket & s,
                      Auth::ECDHAgreement & agreement);
      std::string BuildIDAndSignature(const ECDHAgreement & agreement);
      bool IDAndSigExchange(int fd, const ECDHAgreement & agreement,
                            std::string & theirId,
                            std::string & theirIdCrypted,
                            std::string & theirSig);
      bool IDAndSigExchange(boost::asio::ip::tcp::socket & s,
                            const ECDHAgreement & agreement,
                            std::string & theirId,
                            std::string & theirIdCrypted,
                            std::string & theirSig);
      int BytesReady(int fd) const;
      bool WaitForBytesReady(int fd, uint32_t numBytes,
                             std::chrono::milliseconds timeout) const;
    };
    
  }  // namespace Auth

}  // namespace Dwm

#endif  // _DWMAUTHPEERAUTHENTICATOR_HH_