/**
* Sends the specified file to the client. File must exist or client and server threads will hang
* indefinitely. Generates a session key to encrypt the file over transfer; session key is
* encrypted using the client's public (asymmetric) key.
*
* @param aFile The name or path of the file to send.
* @throws IOException Error reading from socket.
*/
private void sendFile(String aFile) throws IOException {
try {
// get client public key
ObjectInputStream clientPubIn = new ObjectInputStream(connectedSocket.getInputStream());
PublicKey clientPublicKey = (PublicKey) clientPubIn.readObject();
// generate key string and send to client using their public key encrypted with RSA
// (asymmetric)
String keyString = generateKeyString();
Cipher keyCipher = Cipher.getInstance("RSA");
keyCipher.init(Cipher.ENCRYPT_MODE, clientPublicKey);
SealedObject sealedKeyString = new SealedObject(keyString, keyCipher);
ObjectOutputStream testOut = new ObjectOutputStream(outToClient);
testOut.writeObject(sealedKeyString);
testOut.flush();
// generate key spec from keyString
SecretKeySpec keySpec = new SecretKeySpec(keyString.getBytes(), "DES");
// set up encryption
Cipher cipher = Cipher.getInstance("DES/ECB/PKCS5Padding");
cipher.init(Cipher.ENCRYPT_MODE, keySpec);
CipherOutputStream cipherOut = new CipherOutputStream(outToClient, cipher);
// send file
byte[] fileBuffer = new byte[BUFFER_SIZE];
InputStream fileReader = new BufferedInputStream(new FileInputStream(aFile));
int bytesRead;
while ((bytesRead = fileReader.read(fileBuffer)) != EOF) {
cipherOut.write(fileBuffer, 0, bytesRead);
}
cipherOut.flush();
cipherOut.close();
disconnect();
} catch (NoSuchPaddingException nspe) {
System.out.println("No such padding.");
} catch (NoSuchAlgorithmException nsae) {
System.out.println("Invalid algorithm entered");
} catch (ClassNotFoundException cnfe) {
System.out.println("Class not found.");
} catch (InvalidKeyException ike) {
System.out.println("Invalid key used for file encryption.");
} catch (FileNotFoundException fnfe) {
System.out.println("Invalid file entered.");
return;
} catch (IllegalBlockSizeException ibse) {
System.out.println("Illegal block size used for encryption.");
}
}
public static void main(String[] args) throws Exception {
Provider p = new SampleProvider();
// Serialize and deserialize the above Provider object
ByteArrayOutputStream baos = new ByteArrayOutputStream();
ObjectOutputStream oos = new ObjectOutputStream(baos);
oos.writeObject(p);
oos.close();
ByteArrayInputStream bais = new ByteArrayInputStream(baos.toByteArray());
ObjectInputStream ois = new ObjectInputStream(bais);
Provider p2 = (Provider) ois.readObject();
ois.close();
checkProviderInfoEntries(p2);
}
public void run() {
try {
ObjectInputStream ois = new ObjectInputStream(s.getInputStream());
ObjectOutputStream oos = new ObjectOutputStream(s.getOutputStream());
BigInteger bg = dhSpec.getG();
BigInteger bp = dhSpec.getP();
oos.writeObject(bg);
oos.writeObject(bp);
KeyPairGenerator kpg = KeyPairGenerator.getInstance("DH");
kpg.initialize(1024);
KeyPair kpa = (KeyPair) ois.readObject();
KeyAgreement dh = KeyAgreement.getInstance("DH");
KeyPair kp = kpg.generateKeyPair();
oos.writeObject(kp);
dh.init(kp.getPrivate());
Key pk = dh.doPhase(kpa.getPublic(), true);
MessageDigest sha256 = MessageDigest.getInstance("SHA-256");
byte[] rawbits = sha256.digest(dh.generateSecret());
Cipher c = Cipher.getInstance(CIPHER_MODE);
SecretKey key = new SecretKeySpec(rawbits, 0, 16, "AES");
byte ivbits[] = (byte[]) ois.readObject();
IvParameterSpec iv = new IvParameterSpec(ivbits);
c.init(Cipher.DECRYPT_MODE, key, iv);
Mac m = Mac.getInstance("HmacSHA1");
SecretKey mackey = new SecretKeySpec(rawbits, 16, 16, "HmacSHA1");
m.init(mackey);
byte ciphertext[], cleartext[], mac[];
try {
while (true) {
ciphertext = (byte[]) ois.readObject();
mac = (byte[]) ois.readObject();
if (Arrays.equals(mac, m.doFinal(ciphertext))) {
cleartext = c.update(ciphertext);
System.out.println(ct + " : " + new String(cleartext, "UTF-8"));
} else {
// System.exit(1);
System.out.println(ct + "error");
}
}
} catch (EOFException e) {
cleartext = c.doFinal();
System.out.println(ct + " : " + new String(cleartext, "UTF-8"));
System.out.println("[" + ct + "]");
} finally {
if (ois != null) ois.close();
if (oos != null) oos.close();
}
} catch (Exception e) {
e.printStackTrace();
}
}
// Needed by NativeJavaObject de-serializer
public static Object readAdapterObject(Scriptable self, ObjectInputStream in)
throws IOException, ClassNotFoundException {
ContextFactory factory;
Context cx = Context.getCurrentContext();
if (cx != null) {
factory = cx.getFactory();
} else {
factory = null;
}
Class<?> superClass = Class.forName((String) in.readObject());
String[] interfaceNames = (String[]) in.readObject();
Class<?>[] interfaces = new Class[interfaceNames.length];
for (int i = 0; i < interfaceNames.length; i++)
interfaces[i] = Class.forName(interfaceNames[i]);
Scriptable delegee = (Scriptable) in.readObject();
Class<?> adapterClass = getAdapterClass(self, superClass, interfaces, delegee);
Class<?>[] ctorParms = {
ScriptRuntime.ContextFactoryClass,
ScriptRuntime.ScriptableClass,
ScriptRuntime.ScriptableClass
};
Object[] ctorArgs = {factory, delegee, self};
try {
return adapterClass.getConstructor(ctorParms).newInstance(ctorArgs);
} catch (InstantiationException e) {
} catch (IllegalAccessException e) {
} catch (InvocationTargetException e) {
} catch (NoSuchMethodException e) {
}
throw new ClassNotFoundException("adapter");
}
public static PublicKey recreatePublicKey(String path) {
FileInputStream file = null;
RSAPublicKey key_public = null;
try {
file = new FileInputStream(path);
ObjectInputStream obj_cle = new ObjectInputStream(file);
BigInteger modulus = (BigInteger) obj_cle.readObject();
BigInteger exponent = (BigInteger) obj_cle.readObject();
RSAPublicKeySpec cle_reconst = new RSAPublicKeySpec(modulus, exponent);
KeyFactory keyFactory = KeyFactory.getInstance("RSA");
key_public = (RSAPublicKey) keyFactory.generatePublic(cle_reconst);
} catch (Exception ex) {
System.err.println("Probeleme de recreartion cle public: " + ex);
} finally {
try {
file.close();
} catch (Exception ex) {
System.err.println("Probeleme de fermiture de fichier de la cle public: " + ex);
}
}
return key_public;
}
public boolean upload(
String sourceFile, String destFile, String group, UserToken token, Key key, int keyNum) {
if (destFile.charAt(0) != '/') {
destFile = "/" + destFile;
}
try {
FileInputStream fis = new FileInputStream(sourceFile);
File encryptFile = new File(sourceFile + "_encrypt");
encryptFile.createNewFile();
FileOutputStream fos = new FileOutputStream(encryptFile);
// Initial Vector must be 16 bytes
byte[] initialVector = {
0x0, 0x1, 0x2, 0x3, 0x4, 0x5, 0x6, 0x7, 0x8, 0x9, 0xa, 0xb, 0xc, 0xd, 0xe, 0xf
};
IvParameterSpec ivs = new IvParameterSpec(initialVector);
byte[] buf = new byte[1024];
Cipher cipher = Cipher.getInstance("AES/CBC/NoPadding");
cipher.init(Cipher.ENCRYPT_MODE, key, ivs);
byte[] cipherBytes;
// create a new local encrypted file
do {
buf = new byte[1024];
int n = fis.read(buf);
if (n > 0) {
System.out.printf(".");
} else if (n < 0) {
System.out.println("Read error");
}
cipherBytes = cipher.doFinal(buf);
fos.write(cipherBytes);
} while (fis.available() > 0);
System.out.println();
// send encrypted file to server
Envelope message = null, env = null;
// Tell the server to return the member list
message = new Envelope("UPLOADF");
message.addObject(destFile);
message.addObject(group);
message.addObject(token);
message.addObject(keyNum);
message.addObject(initialVector);
String concat =
destFile
+ group
+ token.toString()
+ keyNum
+ "UPLOADF"
+ nonce; // concatinates all of the objects in envelope
byte[] hasharray = concat.getBytes(); // turn the concat into a byte array
Mac mac = Mac.getInstance("HmacSHA1");
mac.init(HMACkey);
mac.update(hasharray);
String stringhash =
new String(mac.doFinal(), "UTF8"); // turn the hash into a string for easy comparision!
message.addObject(stringhash);
message.addObject(nonce);
nonce++;
byte[] messageBytes = Envelope.toByteArray(message);
// Encrypt envelope w/ AES
cipher = Cipher.getInstance("AES");
cipher.init(Cipher.ENCRYPT_MODE, AESkey);
cipherBytes = cipher.doFinal(messageBytes);
output.writeObject(cipherBytes);
byte[] responseCipherBytes =
(byte[])
input.readObject(); // if response isnt ready it should check whether it was forged
// Decrypt response
cipher = Cipher.getInstance("AES");
cipher.init(Cipher.DECRYPT_MODE, AESkey);
byte[] responseBytes = cipher.doFinal(responseCipherBytes);
env = Envelope.getEnvelopefromBytes(responseBytes);
if (env.getMessage().equals("READY")) {
System.out.printf("Meta data upload successful\n");
} else if ((Integer) env.getObjContents().get(1) == nonce) {
String hash = (String) env.getObjContents().get(0);
concat = env.getMessage() + nonce; // reconstructs the hash
hasharray = concat.getBytes();
mac = Mac.getInstance("HmacSHA1");
File HASHfile = new File("FHASHKey.bin");
fis = new FileInputStream(HASHfile);
ObjectInputStream ois = new ObjectInputStream(fis);
Key HMACkey = (Key) ois.readObject();
mac.init(HMACkey);
mac.update(hasharray);
String newhash = new String(mac.doFinal(), "UTF8");
nonce++;
// check hashes for equality
if (hash.equals(newhash) != true) {
System.out.println("HASH EQUALITY FAIL2, disconnecting for your own safety");
disconnect();
return false;
}
} else {
System.out.println("Nonce FAIL UPLOADF");
disconnect();
return false;
}
// If server indicates success, return the member list
FileInputStream encryptFIS = new FileInputStream(encryptFile);
do {
if ((Integer) env.getObjContents().get(1) == nonce) {
buf = new byte[1024];
if (!env.getMessage().equals("READY")) {
System.out.printf("Server error: %s\n", env.getMessage());
return false;
}
String hash = (String) env.getObjContents().get(0);
concat = env.getMessage() + nonce; // reconstructs the hash
hasharray = concat.getBytes();
mac = Mac.getInstance("HmacSHA1");
File HASHfile = new File("FHASHKey.bin");
fis = new FileInputStream(HASHfile);
ObjectInputStream ois = new ObjectInputStream(fis);
Key HMACkey = (Key) ois.readObject();
mac.init(HMACkey);
mac.update(hasharray);
String newhash = new String(mac.doFinal(), "UTF8");
nonce++;
ois.close();
// check hashes for equality
if (hash.equals(newhash) != true) {
System.out.println("HASH EQUALITY FAIL3, disconnecting for your own safety");
disconnect();
return false;
}
message = new Envelope("CHUNK");
int n = encryptFIS.read(buf); // can throw an IOException
if (n > 0) {
System.out.printf(".");
} else if (n < 0) {
System.out.println("Read error");
return false;
}
message.addObject(buf);
message.addObject(new Integer(n));
concat = n + "CHUNK" + nonce; // concatinates all of the objects in envelope
hasharray = concat.getBytes(); // turn the concat into a byte array
mac = Mac.getInstance("HmacSHA1");
mac.init(HMACkey);
mac.update(hasharray);
stringhash =
new String(
mac.doFinal(), "UTF8"); // turn the hash into a string for easy comparision!
message.addObject(stringhash);
message.addObject(nonce);
nonce++;
messageBytes = Envelope.toByteArray(message);
// Encrypt envelope w/ AES
cipher = Cipher.getInstance("AES");
cipher.init(Cipher.ENCRYPT_MODE, AESkey);
cipherBytes = cipher.doFinal(messageBytes);
System.out.println("Concatsent" + concat);
output.writeObject(
cipherBytes); ///////////////////////////////////////////
// HERE/////////////////////////////////
responseCipherBytes = (byte[]) input.readObject();
// Decrypt response
cipher.init(Cipher.DECRYPT_MODE, AESkey);
responseBytes = cipher.doFinal(responseCipherBytes);
env = Envelope.getEnvelopefromBytes(responseBytes);
} else {
System.out.println("Nonce FAIL UPLOADF");
disconnect();
return false;
}
} while (encryptFIS.available() > 0);
encryptFIS.close();
// If server indicates success, return the member list
if (env.getMessage().compareTo("READY") == 0
&& (Integer) env.getObjContents().get(1) == nonce) {
nonce++;
message = new Envelope("EOF");
concat = "EOF" + nonce; // concatinates all of the objects in envelope
hasharray = concat.getBytes(); // turn the concat into a byte array
mac = Mac.getInstance("HmacSHA1");
mac.init(HMACkey);
mac.update(hasharray);
stringhash =
new String(mac.doFinal(), "UTF8"); // turn the hash into a string for easy comparision!
message.addObject(stringhash);
message.addObject(nonce);
System.out.println(nonce);
nonce++;
messageBytes = Envelope.toByteArray(message);
// Encrypt envelope w/ AES
cipher = Cipher.getInstance("AES");
cipher.init(Cipher.ENCRYPT_MODE, AESkey);
cipherBytes = cipher.doFinal(messageBytes);
output.writeObject(cipherBytes);
responseCipherBytes = (byte[]) input.readObject();
// Decrypt response
cipher.init(Cipher.DECRYPT_MODE, AESkey);
responseBytes = cipher.doFinal(responseCipherBytes);
env = Envelope.getEnvelopefromBytes(responseBytes);
if (env.getMessage().compareTo("OK") == 0
&& (Integer) env.getObjContents().get(1) == nonce) {
System.out.printf("\nFile data upload successful\n");
} else if ((Integer) env.getObjContents().get(1) != nonce) {
System.out.println("Nonce FAIL UPLOADF");
disconnect();
return false;
} else {
System.out.printf("\nUpload failed: %s\n", env.getMessage());
return false;
}
} else if ((Integer) env.getObjContents().get(1) != nonce) {
System.out.println("Nonce FAIL UPLOADF");
disconnect();
return false;
} else {
System.out.printf("Upload failed: %s\n", env.getMessage());
return false;
}
} catch (Exception e1) {
System.err.println("Error: " + e1.getMessage());
e1.printStackTrace(System.err);
return false;
}
return true;
}
@SuppressWarnings("unchecked")
public List<String> listFiles(UserToken token) {
try {
Envelope env = null, e = null;
// Tell the server to return the member list
env = new Envelope("LFILES");
env.addObject(token); // Add requester's token
String concat =
token.toString() + "LFILES" + nonce; // concatinates all of the objects in envelope
byte[] hasharray = concat.getBytes(); // turn the concat into a byte array
Mac mac = Mac.getInstance("HmacSHA1");
mac.init(HMACkey);
mac.update(hasharray);
String stringhash =
new String(mac.doFinal(), "UTF8"); // turn the hash into a string for easy comparision!
env.addObject(stringhash);
env.addObject(nonce);
nonce++;
byte[] envBytes = Envelope.toByteArray(env);
// Encrypt envelope w/ AES
Cipher cipher = Cipher.getInstance("AES");
cipher.init(Cipher.ENCRYPT_MODE, AESkey);
byte[] cipherBytes = cipher.doFinal(envBytes);
output.writeObject(cipherBytes);
byte[] responseCipherBytes = (byte[]) input.readObject();
// Decrypt response
cipher.init(Cipher.DECRYPT_MODE, AESkey);
byte[] responseBytes = cipher.doFinal(responseCipherBytes);
env = Envelope.getEnvelopefromBytes(responseBytes);
if (env.getMessage().equals("FAIL")) {
System.out.println("Error occured in ListFiles, disconnecting");
disconnect();
return null;
} else if ((Integer) env.getObjContents().get(2) == nonce) {
List<String> files = (List<String>) env.getObjContents().get(0);
String hash = (String) env.getObjContents().get(1);
concat = files.toString() + env.getMessage() + nonce; // reconstructs the hash
hasharray = concat.getBytes();
mac = Mac.getInstance("HmacSHA1");
File HASHfile = new File("FHASHKey.bin");
FileInputStream fis = new FileInputStream(HASHfile);
ObjectInputStream ois = new ObjectInputStream(fis);
Key HMACkey = (Key) ois.readObject();
mac.init(HMACkey);
mac.update(hasharray);
String newhash = new String(mac.doFinal(), "UTF8");
nonce++;
// check hashes for equality
if (hash.equals(newhash) != true) {
System.out.println("HASH EQUALITY FAIL");
disconnect();
} else {
// If server indicates success, return the member list
if (env.getMessage().equals("OK")) {
return files; // This cast creates compiler warnings. Sorry.
}
}
} else {
System.out.println("Nonce FAIL LFILES");
disconnect();
return null;
}
return null;
} catch (Exception e) {
System.err.println("Error: " + e.getMessage());
e.printStackTrace(System.err);
return null;
}
}
public boolean delete(String filename, UserToken token) {
try {
String remotePath;
if (filename.charAt(0) == '/') {
remotePath = filename.substring(1);
} else {
remotePath = filename;
}
Envelope env = new Envelope("DELETEF"); // Success
env.addObject(remotePath);
env.addObject(token);
String concat =
remotePath
+ token.toString()
+ "DELETEF"
+ nonce; // concatinates all of the objects in envelope
byte[] hasharray = concat.getBytes(); // turn the concat into a byte array
Mac mac = Mac.getInstance("HmacSHA1");
mac.init(HMACkey);
mac.update(hasharray);
String stringhash =
new String(mac.doFinal(), "UTF8"); // turn the hash into a string for easy comparision!
env.addObject(stringhash);
env.addObject(nonce);
nonce++;
byte[] envBytes = Envelope.toByteArray(env);
// Encrypt envelope w/ AES
Cipher cipher = Cipher.getInstance("AES");
cipher.init(Cipher.ENCRYPT_MODE, AESkey);
byte[] cipherBytes = cipher.doFinal(envBytes);
output.writeObject(cipherBytes);
byte[] responseCipherBytes = (byte[]) input.readObject();
// Decrypt response
cipher.init(Cipher.DECRYPT_MODE, AESkey);
byte[] responseBytes = cipher.doFinal(responseCipherBytes);
env = Envelope.getEnvelopefromBytes(responseBytes);
System.out.println(env.getMessage());
if ((Integer) env.getObjContents().get(1) == nonce) {
String hash = (String) env.getObjContents().get(0);
concat = env.getMessage() + nonce; // reconstructs the hash
hasharray = concat.getBytes();
mac = Mac.getInstance("HmacSHA1");
File HASHfile = new File("FHASHKey.bin");
FileInputStream fis = new FileInputStream(HASHfile);
ObjectInputStream ois = new ObjectInputStream(fis);
Key HMACkey = (Key) ois.readObject();
mac.init(HMACkey);
mac.update(hasharray);
String newhash = new String(mac.doFinal(), "UTF8");
nonce++;
if (hash.equals(newhash) != true) // check hashes for equality
{
System.out.println("HASH EQUALITY FAIL");
return false;
}
if (env.getMessage().compareTo("OK") == 0) {
System.out.printf("File %s deleted successfully\n", filename);
} else {
System.out.printf("Error deleting file %s (%s)\n", filename, env.getMessage());
return false;
}
}
} catch (IllegalBlockSizeException ex) {
ex.printStackTrace(System.err);
} catch (BadPaddingException ex) {
ex.printStackTrace(System.err);
} catch (InvalidKeyException ex) {
ex.printStackTrace(System.err);
} catch (NoSuchAlgorithmException ex) {
ex.printStackTrace(System.err);
} catch (NoSuchPaddingException ex) {
ex.printStackTrace(System.err);
} catch (IOException e1) {
e1.printStackTrace(System.err);
} catch (ClassNotFoundException e1) {
e1.printStackTrace(System.err);
}
return true;
}
public boolean download(
String sourceFile, String destFile, UserToken token, HashMap<String, ArrayList<Key>> keys) {
try {
destFile = "." + destFile;
if (sourceFile.charAt(0) == '/') {
sourceFile = sourceFile.substring(1);
}
File file = new File(destFile);
if (!file.exists()) {
file.createNewFile();
FileOutputStream fos = new FileOutputStream(file);
Envelope env = new Envelope("DOWNLOADF"); // Success
env.addObject(sourceFile);
env.addObject(token);
String concat =
sourceFile
+ token.toString()
+ "DOWNLOADF"
+ nonce; // concatinates all of the objects in envelope
byte[] hasharray = concat.getBytes(); // turn the concat into a byte array
Mac mac = Mac.getInstance("HmacSHA1");
mac.init(HMACkey);
mac.update(hasharray);
String stringhash =
new String(mac.doFinal(), "UTF8"); // turn the hash into a string for easy comparision!
env.addObject(stringhash);
env.addObject(nonce);
nonce++;
byte[] envBytes = Envelope.toByteArray(env);
// Encrypt envelope w/ AES
Cipher cipher = Cipher.getInstance("AES");
cipher.init(Cipher.ENCRYPT_MODE, AESkey);
byte[] cipherBytes = cipher.doFinal(envBytes);
output.writeObject(cipherBytes); // here in download
byte[] responseCipherBytes = (byte[]) input.readObject();
// Decrypt response
cipher.init(Cipher.DECRYPT_MODE, AESkey);
byte[] responseBytes = cipher.doFinal(responseCipherBytes);
env = Envelope.getEnvelopefromBytes(responseBytes);
ShareFile sf = (ShareFile) env.getObjContents().get(2);
int keyNum = sf.getKeyNum();
ArrayList<Key> groupKeys = keys.get(sf.getGroup());
Key key = groupKeys.get(keyNum);
byte[] initialVector = sf.getIV();
IvParameterSpec ivs = new IvParameterSpec(initialVector);
byte[] decryptBuf = new byte[1024];
while (env.getMessage().compareTo("CHUNK") == 0
&& (Integer) env.getObjContents().get(4) == nonce) {
String hash = (String) env.getObjContents().get(3);
concat =
(Integer) env.getObjContents().get(1)
+ env.getMessage()
+ nonce; // reconstructs the hash
System.out.println("Concat:" + concat);
hasharray = concat.getBytes();
mac = Mac.getInstance("HmacSHA1");
File HASHfile = new File("FHASHKey.bin");
FileInputStream fis = new FileInputStream(HASHfile);
ObjectInputStream ois = new ObjectInputStream(fis);
HMACkey = (Key) ois.readObject();
mac.init(HMACkey);
mac.update(hasharray);
String newhash = new String(mac.doFinal(), "UTF8");
nonce++;
// check hashes for equality
if (hash.equals(newhash) != true) {
System.out.println("HASH EQUALITY FAIL1");
disconnect();
return false;
} else {
decryptBuf = new byte[1024];
System.out.println("env.getMessage: " + env.getMessage());
cipher = Cipher.getInstance("AES/CBC/NoPadding");
cipher.init(Cipher.DECRYPT_MODE, key, ivs);
decryptBuf = cipher.doFinal((byte[]) env.getObjContents().get(0));
// Write encrypted file to disk
fos.write(decryptBuf);
System.out.printf(".");
env = new Envelope("DOWNLOADF"); // Success
concat = env.getMessage() + nonce; // concatinates all of the objects in envelope
hasharray = concat.getBytes(); // turn the concat into a byte array
mac = Mac.getInstance("HmacSHA1");
mac.init(HMACkey);
mac.update(hasharray);
stringhash =
new String(
mac.doFinal(), "UTF8"); // turn the hash into a string for easy comparision!
env.addObject(stringhash);
env.addObject(nonce);
nonce++;
envBytes = Envelope.toByteArray(env);
// Encrypt envelope w/ AES
cipher = Cipher.getInstance("AES");
cipher.init(Cipher.ENCRYPT_MODE, AESkey);
cipherBytes = cipher.doFinal(envBytes);
output.writeObject(cipherBytes);
responseCipherBytes = (byte[]) input.readObject();
// Decrypt response
cipher.init(Cipher.DECRYPT_MODE, AESkey);
responseBytes = cipher.doFinal(responseCipherBytes);
env = Envelope.getEnvelopefromBytes(responseBytes);
}
}
fos.close();
if (env.getMessage().compareTo("EOF") == 0
&& (Integer) env.getObjContents().get(1) == nonce) {
String hash = (String) env.getObjContents().get(0);
concat = env.getMessage() + nonce; // reconstructs the hash
hasharray = concat.getBytes();
mac = Mac.getInstance("HmacSHA1");
File HASHfile = new File("FHASHKey.bin");
FileInputStream fis = new FileInputStream(HASHfile);
ObjectInputStream ois = new ObjectInputStream(fis);
HMACkey = (Key) ois.readObject();
mac.init(HMACkey);
mac.update(hasharray);
String newhash = new String(mac.doFinal(), "UTF8");
if (hash.equals(newhash) != true) // check hashes for equality
{
System.out.println("HASH EQUALITY FAIL2");
disconnect();
}
fos.close();
System.out.printf("\nTransfer successful file %s\n", sourceFile);
nonce++;
env = new Envelope("OK"); // Success
concat = env.getMessage() + nonce; // concatinates all of the objects in envelope
hasharray = concat.getBytes(); // turn the concat into a byte array
mac = Mac.getInstance("HmacSHA1");
mac.init(HMACkey);
mac.update(hasharray);
stringhash =
new String(
mac.doFinal(), "UTF8"); // turn the hash into a string for easy comparision!
env.addObject(stringhash);
env.addObject(nonce);
nonce++;
envBytes = Envelope.toByteArray(env);
// Encrypt envelope w/ AES
cipher = Cipher.getInstance("AES");
cipher.init(Cipher.ENCRYPT_MODE, AESkey);
cipherBytes = cipher.doFinal(envBytes);
output.writeObject(cipherBytes);
} else if ((Integer) env.getObjContents().get(1) != nonce) {
System.out.println("Nonce FAIL DOWNLOADF");
disconnect();
return false;
} else {
System.out.printf("Error reading file %s (%s)\n", sourceFile, env.getMessage());
file.delete();
return false;
}
} else {
System.out.printf("Error couldn't create file %s\n", destFile);
return false;
}
} catch (InvalidAlgorithmParameterException ex) {
Logger.getLogger(FileClient.class.getName()).log(Level.SEVERE, null, ex);
} catch (IllegalBlockSizeException ex) {
Logger.getLogger(FileClient.class.getName()).log(Level.SEVERE, null, ex);
System.out.println(1);
} catch (BadPaddingException ex) {
Logger.getLogger(FileClient.class.getName()).log(Level.SEVERE, null, ex);
System.out.println(2);
} catch (InvalidKeyException ex) {
Logger.getLogger(FileClient.class.getName()).log(Level.SEVERE, null, ex);
System.out.println(3);
} catch (NoSuchAlgorithmException ex) {
Logger.getLogger(FileClient.class.getName()).log(Level.SEVERE, null, ex);
System.out.println(4);
} catch (NoSuchPaddingException ex) {
Logger.getLogger(FileClient.class.getName()).log(Level.SEVERE, null, ex);
System.out.println(5);
} catch (IOException e1) {
System.out.printf("Error couldn't create file %s\n", destFile);
return false;
} catch (ClassNotFoundException e1) {
e1.printStackTrace(System.err);
}
return true;
}
public boolean sendToken(UserToken token) {
try {
Envelope env = new Envelope("SENDT"); // Success
env.addObject(token);
String concat =
token.toString() + "SENDT" + nonce; // concatinates all of the objects in envelope
byte[] hasharray = concat.getBytes(); // turn the concat into a byte array
Mac mac = Mac.getInstance("HmacSHA1");
mac.init(HMACkey);
mac.update(hasharray);
String stringhash =
new String(mac.doFinal(), "UTF8"); // turn the hash into a string for easy comparision!
env.addObject(stringhash);
env.addObject(nonce);
nonce++;
byte[] envBytes = Envelope.toByteArray(env);
Cipher cipher = Cipher.getInstance("AES");
cipher.init(Cipher.ENCRYPT_MODE, AESkey);
byte[] cipherBytes = cipher.doFinal(envBytes);
output.writeObject(cipherBytes);
// receive from thread
byte[] responseCipherBytes = (byte[]) input.readObject();
// Decrypt response
cipher.init(Cipher.DECRYPT_MODE, AESkey);
byte[] responseBytes = cipher.doFinal(responseCipherBytes);
env = Envelope.getEnvelopefromBytes(responseBytes);
if ((Integer) env.getObjContents().get(1) == nonce) {
String hash = (String) env.getObjContents().get(0);
concat = "OK" + nonce; // reconstructs the hash
hasharray = concat.getBytes();
mac = Mac.getInstance("HmacSHA1");
File HASHfile = new File("FHASHKey.bin");
FileInputStream fis = new FileInputStream(HASHfile);
ObjectInputStream ois = new ObjectInputStream(fis);
Key HMACkey = (Key) ois.readObject();
mac.init(HMACkey);
mac.update(hasharray);
String newhash = new String(mac.doFinal(), "UTF8");
nonce++;
// check hashes for equality
if (hash.equals(newhash) != true) {
System.out.println("HASH EQUALITY FAIL");
return false;
}
if (env.getMessage().compareTo("OK") == 0) {
System.out.printf("OK RECEIVED");
return true;
} else {
System.out.printf("FAILURE");
return false;
}
}
} catch (Exception e) {
System.out.println(e);
}
return false;
}
public static void main(String[] args) {
try {
if (args[0].equals("-genkey")) {
KeyPairGenerator pairgen = KeyPairGenerator.getInstance("RSA");
SecureRandom random = new SecureRandom();
pairgen.initialize(KEYSIZE, random);
KeyPair keyPair = pairgen.generateKeyPair();
ObjectOutputStream out = new ObjectOutputStream(new FileOutputStream(args[1]));
out.writeObject(keyPair.getPublic());
out.close();
out = new ObjectOutputStream(new FileOutputStream(args[2]));
out.writeObject(keyPair.getPrivate());
out.close();
} else if (args[0].equals("-encrypt")) {
KeyGenerator keygen = KeyGenerator.getInstance("AES");
SecureRandom random = new SecureRandom();
keygen.init(random);
SecretKey key = keygen.generateKey();
// wrap with RSA public key
ObjectInputStream keyIn = new ObjectInputStream(new FileInputStream(args[3]));
Key publicKey = (Key) keyIn.readObject();
keyIn.close();
Cipher cipher = Cipher.getInstance("RSA");
cipher.init(Cipher.WRAP_MODE, publicKey);
byte[] wrappedKey = cipher.wrap(key);
DataOutputStream out = new DataOutputStream(new FileOutputStream(args[2]));
out.writeInt(wrappedKey.length);
out.write(wrappedKey);
InputStream in = new FileInputStream(args[1]);
cipher = Cipher.getInstance("AES");
cipher.init(Cipher.ENCRYPT_MODE, key);
crypt(in, out, cipher);
in.close();
out.close();
} else {
DataInputStream in = new DataInputStream(new FileInputStream(args[1]));
int length = in.readInt();
byte[] wrappedKey = new byte[length];
in.read(wrappedKey, 0, length);
// unwrap with RSA private key
ObjectInputStream keyIn = new ObjectInputStream(new FileInputStream(args[3]));
Key privateKey = (Key) keyIn.readObject();
keyIn.close();
Cipher cipher = Cipher.getInstance("RSA");
cipher.init(Cipher.UNWRAP_MODE, privateKey);
Key key = cipher.unwrap(wrappedKey, "AES", Cipher.SECRET_KEY);
OutputStream out = new FileOutputStream(args[2]);
cipher = Cipher.getInstance("AES");
cipher.init(Cipher.DECRYPT_MODE, key);
crypt(in, out, cipher);
in.close();
out.close();
}
} catch (IOException e) {
e.printStackTrace();
} catch (GeneralSecurityException e) {
e.printStackTrace();
} catch (ClassNotFoundException e) {
e.printStackTrace();
}
}
/**
* Called upon deserialization, which tells the log entries who their parent is
*
* @param ois The input stream
*/
private void readObject(ObjectInputStream ois) throws IOException, ClassNotFoundException {
ois.defaultReadObject();
for (int i = 0; i < entries.length; i++)
if (entries[i] != null) entries[i].setParent(new PhantomLogEntry(entries[i]));
}
public boolean connect(String username, String weakSecret, final String server, final int port) {
System.out.println("attempting to connect");
try {
sock = new Socket();
sock.connect(new InetSocketAddress(server, port));
output = new ObjectOutputStream(sock.getOutputStream());
input = new ObjectInputStream(sock.getInputStream());
output.writeObject(username);
// do DH exchange and agree on starting message index
try {
if (weakSecret != null) // group server connect
{
HashMap<String, SecretKey> secretKeys =
DHKeyExchange.generateSecretKeyWithWeakSecret(username, weakSecret, input, output);
if (secretKeys == null) throw new Exception("Unable to verify server");
encryptionKey = secretKeys.get("encryptionKey");
signingKey = secretKeys.get("signingKey");
} else // file server connect
{
PublicKey fileServerPublicKey = (PublicKey) input.readObject(); // read in public key
File savedKeys = new File("savedkeys.bin");
ArrayList<PublicKey> knownKeys = new ArrayList<PublicKey>();
if (savedKeys.exists()) {
ObjectInputStream in = new ObjectInputStream(new FileInputStream(savedKeys));
knownKeys = (ArrayList<PublicKey>) in.readObject();
}
if (!knownKeys.contains(fileServerPublicKey)) // prompt the user to verify the key
{
MessageDigest sha = MessageDigest.getInstance("SHA-1");
byte[] digest = sha.digest(fileServerPublicKey.getEncoded());
System.out.println("RSA key fingerprint is " + getFingerprint(digest));
System.out.println(
"Please verify this is correct by contacting the file server owner.");
System.out.println(
"Do you want to add this key to your list of saved servers? (yes/no)");
Scanner scanner = new Scanner(System.in);
String answer = scanner.nextLine();
if (answer.toLowerCase().equals("yes")) {
knownKeys.add(fileServerPublicKey);
savedKeys.delete();
savedKeys.createNewFile();
ObjectOutputStream out = new ObjectOutputStream(new FileOutputStream(savedKeys));
out.writeObject(knownKeys);
out.flush();
out.close();
output.writeObject("yes");
} else {
output.writeObject("no");
System.out.println("Exiting");
System.exit(0);
}
} else // accpet the key without prompt
output.writeObject("yes");
generateRSAKeypair();
output.writeObject(publicKey);
HashMap<String, SecretKey> secretKeys =
DHKeyExchange.generateSecretKeySignedExchange(
input, output, privateKey, fileServerPublicKey);
if (secretKeys == null) throw new Exception("Unable to verify server");
encryptionKey = secretKeys.get("encryptionKey");
signingKey = secretKeys.get("signingKey");
}
encryptCipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
decryptCipher = Cipher.getInstance("AES/CBC/PKCS5Padding");
MessageDigest sha = MessageDigest.getInstance("SHA-1");
byte[] key = sha.digest(encryptionKey.getEncoded());
key = Arrays.copyOf(key, 16); // use only first 128 bit
SecretKeySpec secretKeySpec = new SecretKeySpec(key, "AES");
encryptCipher.init(Cipher.ENCRYPT_MODE, secretKeySpec, new IvParameterSpec(ivBytes));
decryptCipher.init(Cipher.DECRYPT_MODE, secretKeySpec, new IvParameterSpec(ivBytes));
BigInteger R = new BigInteger(128, new SecureRandom());
output.writeObject(encryptCipher.doFinal(R.toByteArray()));
BigInteger start = new BigInteger(decryptCipher.doFinal((byte[]) input.readObject()));
if (start.compareTo(R) < 0) throw new Exception("Invalid message index from server");
else messageIndex = start.add(BigInteger.ONE);
} catch (Exception ex) {
System.out.println("Failed to connect: " + ex.getMessage());
// if anything fails, we are not connected
sock = null;
return false;
}
} catch (IOException ex) {
return false;
}
return true;
}