605fe40e32
This commit fixes a few issues with communities encryption: Key distribution was disconnected from the community description, this created a case where the key would arrive after the community description and that would result in the client thinking that it was kicked. To overcome this, we added a message that signals the user that is kicked. Also, we distribute the key with the community description so that there's no more issues with timing. This is a bit expensive for large communities, and it will require some further optimizations. Key distribution is now also connected to the request to join response, so there are no timing issues. Fixes an issue with key distribution (race condition) where the community would be modified before being compared, resulting in a comparison of two identical communities, which would result in no key being distributed. This commit only partially address the issue. |
||
|---|---|---|
| .. | ||
| github.com/protocol/encryption | ||
| migrations | ||
| multidevice | ||
| publisher | ||
| sharedsecret | ||
| README.md | ||
| encryption_multi_device_test.go | ||
| encryption_test.go | ||
| encryptor.go | ||
| helpers.go | ||
| persistence.go | ||
| persistence_keys_storage_test.go | ||
| persistence_test.go | ||
| protocol.go | ||
| protocol_message.pb.go | ||
| protocol_message.proto | ||
| protocol_test.go | ||
| x3dh.go | ||
| x3dh_test.go | ||
README.md
protocol/encryption package
Hash ratchet encryption
encryptor.GenerateHashRatchetKey() generates a hash ratchet key and stores it in in the DB.
There, 2 new tables are created: hash_ratchet_encryption and hash_ratchet_encryption_cache.
Each hash ratchet key is uniquely identified by the (groupId, keyId) pair, where keyId is derived from a clock value.
protocol.BuildHashRatchetKeyExchangeMessage builds an 1-on-1 message containing the hash ratchet key, given it's ID.
protocol.BuildHashRatchetMessage builds a hash ratchet message with arbitrary payload, given groupId. It will use the latest hash ratchet key available. encryptor.encryptWithHR encrypts the payload using Hash Ratchet algorithms. Intermediate hashes are stored in hash_ratchet_encryption_cache table.
protocol.HandleMessage uses encryptor.decryptWithHR fn for decryption.