mirror of
https://github.com/varun-r-mallya/py-libp2p.git
synced 2025-12-31 20:36:24 +00:00
fe4c17e8d1
- Fix INotifee interface compliance in WebSocket demo - Fix handler function signatures to be async (THandler compatibility) - Fix is_closed method usage with proper type checking - Fix pytest.raises multiple exception type issue - Fix line length violations (E501) across multiple files - Add debugging logging to Noise security module for troubleshooting - Update WebSocket transport examples and tests - Improve transport registry error handling
92 lines
2.8 KiB
Python
92 lines
2.8 KiB
Python
from dataclasses import (
|
|
dataclass,
|
|
)
|
|
import logging
|
|
|
|
from libp2p.crypto.keys import (
|
|
PrivateKey,
|
|
PublicKey,
|
|
)
|
|
from libp2p.crypto.serialization import (
|
|
deserialize_public_key,
|
|
)
|
|
|
|
from .pb import noise_pb2 as noise_pb
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
SIGNED_DATA_PREFIX = "noise-libp2p-static-key:"
|
|
|
|
|
|
@dataclass
|
|
class NoiseHandshakePayload:
|
|
id_pubkey: PublicKey
|
|
id_sig: bytes
|
|
early_data: bytes | None = None
|
|
|
|
def serialize(self) -> bytes:
|
|
msg = noise_pb.NoiseHandshakePayload(
|
|
identity_key=self.id_pubkey.serialize(), identity_sig=self.id_sig
|
|
)
|
|
if self.early_data is not None:
|
|
msg.data = self.early_data
|
|
return msg.SerializeToString()
|
|
|
|
@classmethod
|
|
def deserialize(cls, protobuf_bytes: bytes) -> "NoiseHandshakePayload":
|
|
msg = noise_pb.NoiseHandshakePayload.FromString(protobuf_bytes)
|
|
return cls(
|
|
id_pubkey=deserialize_public_key(msg.identity_key),
|
|
id_sig=msg.identity_sig,
|
|
early_data=msg.data if msg.data != b"" else None,
|
|
)
|
|
|
|
|
|
def make_data_to_be_signed(noise_static_pubkey: PublicKey) -> bytes:
|
|
prefix_bytes = SIGNED_DATA_PREFIX.encode("utf-8")
|
|
return prefix_bytes + noise_static_pubkey.to_bytes()
|
|
|
|
|
|
def make_handshake_payload_sig(
|
|
id_privkey: PrivateKey, noise_static_pubkey: PublicKey
|
|
) -> bytes:
|
|
data = make_data_to_be_signed(noise_static_pubkey)
|
|
logger.debug(f"make_handshake_payload_sig: signing data length: {len(data)}")
|
|
logger.debug(f"make_handshake_payload_sig: signing data hex: {data.hex()}")
|
|
return id_privkey.sign(data)
|
|
|
|
|
|
def verify_handshake_payload_sig(
|
|
payload: NoiseHandshakePayload, noise_static_pubkey: PublicKey
|
|
) -> bool:
|
|
"""
|
|
Verify if the signature
|
|
1. is composed of the data `SIGNED_DATA_PREFIX`++`noise_static_pubkey` and
|
|
2. signed by the private key corresponding to `id_pubkey`
|
|
"""
|
|
expected_data = make_data_to_be_signed(noise_static_pubkey)
|
|
logger.debug(
|
|
f"verify_handshake_payload_sig: payload.id_pubkey type: "
|
|
f"{type(payload.id_pubkey)}"
|
|
)
|
|
logger.debug(
|
|
f"verify_handshake_payload_sig: noise_static_pubkey type: "
|
|
f"{type(noise_static_pubkey)}"
|
|
)
|
|
logger.debug(
|
|
f"verify_handshake_payload_sig: expected_data length: {len(expected_data)}"
|
|
)
|
|
logger.debug(
|
|
f"verify_handshake_payload_sig: expected_data hex: {expected_data.hex()}"
|
|
)
|
|
logger.debug(
|
|
f"verify_handshake_payload_sig: payload.id_sig length: {len(payload.id_sig)}"
|
|
)
|
|
try:
|
|
result = payload.id_pubkey.verify(expected_data, payload.id_sig)
|
|
logger.debug(f"verify_handshake_payload_sig: verification result: {result}")
|
|
return result
|
|
except Exception as e:
|
|
logger.error(f"verify_handshake_payload_sig: verification exception: {e}")
|
|
return False
|