1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
/* SPDX-License-Identifier: MIT
*
* Copyright (C) 2019 WireGuard LLC. All Rights Reserved.
*/
package updater
import (
"bytes"
"encoding/base64"
"encoding/hex"
"errors"
"strings"
"golang.org/x/crypto/blake2b"
"golang.org/x/crypto/ed25519"
)
/*
* Generate with:
* $ b2sum -l 256 *.msi > list
* $ signify -S -e -s release.sec -m list
* $ upload ./list.sec
*/
type fileList map[string][blake2b.Size256]byte
func readFileList(input []byte) (fileList, error) {
publicKeyBytes, err := base64.StdEncoding.DecodeString(releasePublicKeyBase64)
if err != nil || len(publicKeyBytes) != ed25519.PublicKeySize+10 || publicKeyBytes[0] != 'E' || publicKeyBytes[1] != 'd' {
return nil, errors.New("Invalid public key")
}
lines := bytes.SplitN(input, []byte{'\n'}, 3)
if len(lines) != 3 {
return nil, errors.New("Signature input has too few lines")
}
if !bytes.HasPrefix(lines[0], []byte("untrusted comment: ")) {
return nil, errors.New("Signature input is missing untrusted comment")
}
signatureBytes, err := base64.StdEncoding.DecodeString(string(lines[1]))
if err != nil {
return nil, errors.New("Signature input is not valid base64")
}
if len(signatureBytes) != ed25519.SignatureSize+10 || !bytes.Equal(signatureBytes[:10], publicKeyBytes[:10]) {
return nil, errors.New("Signature input bytes are incorrect length, type, or keyid")
}
if !ed25519.Verify(publicKeyBytes[10:], lines[2], signatureBytes[10:]) {
return nil, errors.New("Signature is invalid")
}
fileLines := strings.Split(string(lines[2]), "\n")
fileHashes := make(map[string][blake2b.Size256]byte, len(fileLines))
for index, line := range fileLines {
if len(line) == 0 && index == len(fileLines)-1 {
break
}
components := strings.SplitN(line, " ", 2)
if len(components) != 2 {
return nil, errors.New("File hash line has too few components")
}
maybeHash, err := hex.DecodeString(components[0])
if err != nil || len(maybeHash) != blake2b.Size256 {
return nil, errors.New("File hash is invalid base64 or incorrect number of bytes")
}
var hash [blake2b.Size256]byte
copy(hash[:], maybeHash)
fileHashes[components[1]] = hash
}
if len(fileHashes) == 0 {
return nil, errors.New("No file hashes found in signed input")
}
return fileHashes, nil
}
|