/** * Copyright (C) 2021 Saturneric * * This file is part of GpgFrontend. * * GpgFrontend is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * GpgFrontend is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with GpgFrontend. If not, see . * * The initial version of the source code is inherited from * the gpg4usb project, which is under GPL-3.0-or-later. * * All the source code of GpgFrontend was modified and released by * Saturneric starting on May 12, 2021. * * SPDX-License-Identifier: GPL-3.0-or-later * */ #include "DataObjectOperator.h" #include #include "core/function/PassphraseGenerator.h" #include "core/utils/IOUtils.h" namespace GpgFrontend { void DataObjectOperator::init_app_secure_key() { GF_CORE_LOG_TRACE("initializing application secure key"); WriteFile(app_secure_key_path_.c_str(), PassphraseGenerator::GetInstance().Generate(256).toUtf8()); std::filesystem::permissions( app_secure_key_path_, std::filesystem::perms::owner_read | std::filesystem::perms::owner_write); } DataObjectOperator::DataObjectOperator(int channel) : SingletonFunctionObject(channel) { if (!is_directory(app_secure_path_)) create_directory(app_secure_path_); if (!exists(app_secure_key_path_)) { init_app_secure_key(); } QByteArray key; if (!ReadFile(app_secure_key_path_.c_str(), key)) { GF_CORE_LOG_ERROR("failed to read app secure key file: {}", app_secure_key_path_.u8string()); throw std::runtime_error("failed to read app secure key file"); } hash_key_ = QCryptographicHash::hash(key, QCryptographicHash::Sha256); GF_CORE_LOG_TRACE("app secure key loaded {} bytes", hash_key_.size()); if (!exists(app_data_objs_path_)) create_directory(app_data_objs_path_); } auto DataObjectOperator::SaveDataObj(const QString& _key, const nlohmann::json& value) -> QString { QByteArray hash_obj_key = {}; if (_key.isEmpty()) { hash_obj_key = QCryptographicHash::hash( hash_key_ .append( PassphraseGenerator::GetInstance().Generate(32).toUtf8()) .append(QDateTime::currentDateTime().toString().toUtf8()), QCryptographicHash::Sha256) .toHex(); } else { hash_obj_key = QCryptographicHash::hash(hash_key_.append(_key.toUtf8()), QCryptographicHash::Sha256) .toHex(); } const auto obj_path = app_data_objs_path_ / hash_obj_key.toStdString(); QAESEncryption encryption(QAESEncryption::AES_256, QAESEncryption::ECB, QAESEncryption::Padding::ISO); auto encoded = encryption.encode(QByteArray::fromStdString(to_string(value)), hash_key_); GF_CORE_LOG_TRACE("saving data object {} to {} , size: {} bytes", hash_obj_key, obj_path.u8string(), encoded.size()); WriteFile(obj_path.c_str(), encoded); return _key.isEmpty() ? hash_obj_key : QString(); } auto DataObjectOperator::GetDataObject(const QString& _key) -> std::optional { try { GF_CORE_LOG_TRACE("get data object from disk {}", _key); auto hash_obj_key = QCryptographicHash::hash(hash_key_.append(_key.toUtf8()), QCryptographicHash::Sha256) .toHex() .toStdString(); const auto obj_path = app_data_objs_path_ / hash_obj_key; if (!std::filesystem::exists(obj_path)) { GF_CORE_LOG_WARN("data object not found, key: {}", _key); return {}; } QByteArray encoded_data; if (!ReadFile(obj_path.c_str(), encoded_data)) { GF_CORE_LOG_ERROR("failed to read data object, key: {}", _key); return {}; } QAESEncryption encryption(QAESEncryption::AES_256, QAESEncryption::ECB, QAESEncryption::Padding::ISO); GF_CORE_LOG_TRACE("decrypting data object {} , hash key size: {}", encoded_data.size(), hash_key_.size()); auto decoded = encryption.removePadding(encryption.decode(encoded_data, hash_key_)); GF_CORE_LOG_TRACE("data object decoded: {}", _key); return nlohmann::json::parse(decoded.toStdString()); } catch (...) { GF_CORE_LOG_ERROR("failed to get data object, caught exception: {}", _key); return {}; } } auto DataObjectOperator::GetDataObjectByRef(const QString& _ref) -> std::optional { if (_ref.size() != 64) return {}; try { const auto& hash_obj_key = _ref; const auto obj_path = app_data_objs_path_ / hash_obj_key.toStdString(); if (!std::filesystem::exists(obj_path)) return {}; QByteArray encoded_data; if (!ReadFile(obj_path.c_str(), encoded_data)) return {}; QAESEncryption encryption(QAESEncryption::AES_256, QAESEncryption::ECB, QAESEncryption::Padding::ISO); auto decoded = encryption.removePadding(encryption.decode(encoded_data, hash_key_)); return nlohmann::json::parse(decoded.toStdString()); } catch (...) { return {}; } } } // namespace GpgFrontend