mirror-AU-COVIDSafe/mobile-ios
1
0
Fork 0
mirror of https://github.com/AU-COVIDSafe/mobile-ios.git synced 2025-04-19 21:15:21 +00:00
Code Issues Projects Releases Wiki Activity

COVIDSafe code from version 1.10 (#20)

Browse source
This commit is contained in:
COVIDSafe Support 2020-08-18 10:52:17 +10:00 • committed by GitHub
parent 3b1d8fa3f4
commit 4ddb77535e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
37 changed files with 2681 additions and 328 deletions
Download patch file Download diff file Expand all files Collapse all files

11
CovidSafe/Crypto.swift
View file

@ -16,6 +16,7 @@ enum SecurityError: Error {
case EncryptionLengthError
case EncryptionKeyLengthError
case UnexpectedNilKeys
case NonceCopyError
}
@ -112,17 +113,19 @@ class Crypto {
}
static func buildSecretData(_ serverPublicKey: Data, _ plaintext: Data) throws -> Data {
// Get our ephemeral secrets that will de disposed at the end of this function
let (cachedExportPublicKey, cachedAESKey, cachedMacKey, nonce) = try keyCacheQueue.sync { () -> (Data?, Data?, Data?, Data) in
if Crypto.keyGenTime <= Int64(Date().timeIntervalSince1970) - KEY_GEN_TIME_DELTA || Crypto.counter >= 65535 {
if Crypto.keyGenTime <= Int64(Date().timeIntervalSince1970) - KEY_GEN_TIME_DELTA || Crypto.counter >= 255 {
(Crypto.cachedExportPublicKey, Crypto.cachedAesKey, Crypto.cachedMacKey) = try getEphemeralSecrets(serverPublicKey)
Crypto.keyGenTime = Int64(Date().timeIntervalSince1970)
Crypto.counter = 0
} else {
Crypto.counter += 1
}
let nonce = withUnsafeBytes(of: Crypto.counter.bigEndian) { Data($0) }
return (Crypto.cachedExportPublicKey, Crypto.cachedAesKey, Crypto.cachedMacKey, nonce)
var nonce = [UInt8](repeating: 0, count: 2)
let status = SecRandomCopyBytes(kSecRandomDefault, nonce.count, &nonce)
guard status == errSecSuccess else { throw SecurityError.NonceCopyError }
return (Crypto.cachedExportPublicKey, Crypto.cachedAesKey, Crypto.cachedMacKey, Data(nonce))
}
guard let exportPublicKey = cachedExportPublicKey, let aesKey = cachedAESKey, let macKey = cachedMacKey else {
throw SecurityError.UnexpectedNilKeys