mirror of https://github.com/vacp2p/nim-libp2p.git
72 lines
2.1 KiB
Nim
72 lines
2.1 KiB
Nim
## Nim-LibP2P
|
|
## Copyright (c) 2019 Status Research & Development GmbH
|
|
## Licensed under either of
|
|
## * Apache License, version 2.0, ([LICENSE-APACHE](LICENSE-APACHE))
|
|
## * MIT license ([LICENSE-MIT](LICENSE-MIT))
|
|
## at your option.
|
|
## This file may not be copied, modified, or distributed except according to
|
|
## those terms.
|
|
|
|
{.push raises: [Defect].}
|
|
|
|
import chronicles, metrics, stew/[byteutils, endians2]
|
|
import ./messages,
|
|
./protobuf,
|
|
../../../peerid,
|
|
../../../peerinfo,
|
|
../../../crypto/crypto,
|
|
../../../protobuf/minprotobuf
|
|
|
|
export messages
|
|
|
|
logScope:
|
|
topics = "pubsubmessage"
|
|
|
|
const PubSubPrefix = toBytes("libp2p-pubsub:")
|
|
|
|
declareCounter(libp2p_pubsub_sig_verify_success, "pubsub successfully validated messages")
|
|
declareCounter(libp2p_pubsub_sig_verify_failure, "pubsub failed validated messages")
|
|
|
|
func defaultMsgIdProvider*(m: Message): string =
|
|
byteutils.toHex(m.seqno) & $m.fromPeer
|
|
|
|
proc sign*(msg: Message, privateKey: PrivateKey): CryptoResult[seq[byte]] =
|
|
ok((? privateKey.sign(PubSubPrefix & encodeMessage(msg))).getBytes())
|
|
|
|
proc verify*(m: Message, p: PeerID): bool =
|
|
if m.signature.len > 0 and m.key.len > 0:
|
|
var msg = m
|
|
msg.signature = @[]
|
|
msg.key = @[]
|
|
|
|
var remote: Signature
|
|
var key: PublicKey
|
|
if remote.init(m.signature) and key.init(m.key):
|
|
trace "verifying signature", remoteSignature = remote
|
|
result = remote.verify(PubSubPrefix & encodeMessage(msg), key)
|
|
|
|
if result:
|
|
libp2p_pubsub_sig_verify_success.inc()
|
|
else:
|
|
libp2p_pubsub_sig_verify_failure.inc()
|
|
|
|
proc init*(
|
|
T: type Message,
|
|
peer: PeerInfo,
|
|
data: seq[byte],
|
|
topic: string,
|
|
seqno: uint64,
|
|
sign: bool = true): Message {.gcsafe, raises: [CatchableError, Defect].} =
|
|
result = Message(
|
|
fromPeer: peer.peerId,
|
|
data: data,
|
|
seqno: @(seqno.toBytesBE), # unefficient, fine for now
|
|
topicIDs: @[topic])
|
|
|
|
if sign:
|
|
if peer.keyType != KeyType.HasPrivate:
|
|
raise (ref CatchableError)(msg: "Cannot sign message without private key")
|
|
|
|
result.signature = sign(result, peer.privateKey).tryGet()
|
|
result.key = peer.privateKey.getKey().tryGet().getBytes().tryGet()
|