aiai.ai.utils.checksum.ChecksumWithSignatureService.java Source code

Introduction

Here is the source code for aiai.ai.utils.checksum.ChecksumWithSignatureService.java

Source

/*
 AiAi, Copyright (C) 2017 - 2018, Serge Maslyukov
    
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU General Public License as published by
 the Free Software Foundation, either version 3 of the License, or
 (at your option) any later version.
    
 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 GNU General Public License for more details.
    
 You should have received a copy of the GNU General Public License
 along with this program.  If not, see <https://www.gnu.org/licenses/>.
    
 */
package aiai.ai.utils.checksum;

import aiai.ai.Globals;
import aiai.apps.commons.utils.Checksum;
import aiai.apps.commons.utils.SecUtils;
import lombok.AllArgsConstructor;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.codec.binary.Base64;
import org.springframework.stereotype.Component;

import java.io.IOException;
import java.io.InputStream;
import java.security.*;
import java.util.Map;

@Component
@Slf4j
public class ChecksumWithSignatureService {

    public final Globals globals;

    @AllArgsConstructor
    public static class ChecksumWithSignature {
        public String checksum;
        public String signature;
    }

    public ChecksumWithSignatureService(Globals globals) {
        this.globals = globals;
    }

    public CheckSumAndSignatureStatus verifyChecksumAndSignature(Checksum checksum, String snippetCode,
            InputStream fis, boolean isVerifySignature) throws IOException {
        CheckSumAndSignatureStatus status = new CheckSumAndSignatureStatus();
        status.isOk = true;
        status.isSignatureOk = null;
        for (Map.Entry<Checksum.Type, String> entry : checksum.checksums.entrySet()) {
            String sum, entrySum;
            if (entry.getKey() == Checksum.Type.SHA256WithSignature) {
                ChecksumWithSignature checksumWithSignature = parse(entry.getValue());
                entrySum = checksumWithSignature.checksum;

                if (isVerifySignature) {
                    if (!(status.isSignatureOk = isValid(checksumWithSignature.checksum.getBytes(),
                            checksumWithSignature.signature, globals.publicKey))) {
                        break;
                    }
                    log.info("Snippet {}, signature is Ok", snippetCode);
                }
                sum = Checksum.Type.SHA256.getChecksum(fis);
            } else {
                sum = entry.getKey().getChecksum(fis);
                entrySum = entry.getValue();
            }
            if (sum.equals(entrySum)) {
                log.info("Snippet {}, checksum is Ok", snippetCode);
            } else {
                log.error("Snippet {}, checksum is wrong, expected: {}, actual: {}", snippetCode, entrySum, sum);
                status.isOk = false;
                break;
            }
        }
        if (Boolean.FALSE.equals(status.isSignatureOk)) {
            log.error("Snippet {}, Signature is worng", snippetCode);
        }
        return status;
    }

    public static ChecksumWithSignature parse(String data) {
        final int idx = data.indexOf(SecUtils.SIGNATURE_DELIMITER);
        if (idx == -1) {
            throw new IllegalStateException("Wrong format of checksum with signature");
        }
        //noinspection UnnecessaryLocalVariable
        ChecksumWithSignature checksumWithSignature = new ChecksumWithSignature(data.substring(0, idx),
                data.substring(idx + SecUtils.SIGNATURE_DELIMITER.length()));
        return checksumWithSignature;
    }

    public static boolean isValid(byte[] data, String signatureAsBase64, PublicKey publicKey) {
        try {
            Signature signature = Signature.getInstance("SHA256withRSA");
            signature.initVerify(publicKey);
            signature.update(data);
            //noinspection UnnecessaryLocalVariable
            final byte[] bytes = Base64.decodeBase64(signatureAsBase64);
            boolean status = signature.verify(bytes);
            return status;
        } catch (GeneralSecurityException e) {
            log.error("Error checking signature", e);
            throw new RuntimeException("Error", e);
        }
    }
}