Simulation: Have users get negative report keys from TP
This commit is contained in:
parent
62448a4b03
commit
33fde0cbf4
45
src/lib.rs
45
src/lib.rs
|
@ -388,27 +388,46 @@ pub fn new_negative_report_key(db: &Db, date: u32) -> Option<PublicKey> {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
/// Receive an encrypted negative report. Attempt to decrypt it and if
|
/// If we have a key for the requested day, return the secret part.
|
||||||
/// successful, add it to the database to be processed later.
|
pub fn get_negative_report_secret_key(db: &Db, date: u32) -> Option<StaticSecret> {
|
||||||
pub fn handle_encrypted_negative_report(db: &Db, enc_report: EncryptedNegativeReport) {
|
|
||||||
if db.contains_key("nr-keys").unwrap() {
|
if db.contains_key("nr-keys").unwrap() {
|
||||||
let nr_keys: BTreeMap<u32, StaticSecret> =
|
let nr_keys: BTreeMap<u32, StaticSecret> =
|
||||||
match bincode::deserialize(&db.get("nr-keys").unwrap().unwrap()) {
|
match bincode::deserialize(&db.get("nr-keys").unwrap().unwrap()) {
|
||||||
Ok(map) => map,
|
Ok(map) => map,
|
||||||
Err(_) => {
|
Err(_) => {
|
||||||
return;
|
return None;
|
||||||
}
|
}
|
||||||
};
|
};
|
||||||
if nr_keys.contains_key(&enc_report.date) {
|
if nr_keys.contains_key(&date) {
|
||||||
let secret = nr_keys.get(&enc_report.date).unwrap();
|
let secret = nr_keys.get(&date).unwrap();
|
||||||
let nr = match enc_report.decrypt(&secret) {
|
Some(secret.clone())
|
||||||
Ok(nr) => nr,
|
} else {
|
||||||
Err(_) => {
|
None
|
||||||
return;
|
|
||||||
}
|
|
||||||
};
|
|
||||||
save_negative_report_to_process(&db, nr);
|
|
||||||
}
|
}
|
||||||
|
} else {
|
||||||
|
None
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/// If we have a key for the requested day, return the public part.
|
||||||
|
pub fn get_negative_report_public_key(db: &Db, date: u32) -> Option<PublicKey> {
|
||||||
|
match get_negative_report_secret_key(&db, date) {
|
||||||
|
Some(secret) => Some(PublicKey::from(&secret)),
|
||||||
|
None => None,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/// Receive an encrypted negative report. Attempt to decrypt it and if
|
||||||
|
/// successful, add it to the database to be processed later.
|
||||||
|
pub fn handle_encrypted_negative_report(db: &Db, enc_report: EncryptedNegativeReport) {
|
||||||
|
match get_negative_report_secret_key(&db, enc_report.date) {
|
||||||
|
Some(secret) => match enc_report.decrypt(&secret) {
|
||||||
|
Ok(nr) => {
|
||||||
|
save_negative_report_to_process(&db, nr);
|
||||||
|
}
|
||||||
|
Err(_) => {}
|
||||||
|
},
|
||||||
|
None => {}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
|
@ -15,10 +15,31 @@ pub async fn handle(db: &Db, req: Request<Body>) -> Result<Response<Body>, Infal
|
||||||
.body(Body::from("Allow POST"))
|
.body(Body::from("Allow POST"))
|
||||||
.unwrap()),
|
.unwrap()),
|
||||||
_ => match (req.method(), req.uri().path()) {
|
_ => match (req.method(), req.uri().path()) {
|
||||||
|
#[cfg(feature = "simulation")]
|
||||||
|
(&Method::POST, "/nrkey") => Ok::<_, Infallible>({
|
||||||
|
// We need a way for simulated users to get the keys to
|
||||||
|
// encrypt their negative reports. As Troll Patrol may
|
||||||
|
// not be directly accessible when users are submitting
|
||||||
|
// negative reports, in practice we expect that these
|
||||||
|
// keys will be made available elsewhere.
|
||||||
|
let bytes = body::to_bytes(req.into_body()).await.unwrap();
|
||||||
|
// Expect the body to contain the date for the key the
|
||||||
|
// user requests.
|
||||||
|
let date: u32 = match serde_json::from_slice(&bytes) {
|
||||||
|
Ok(date) => date,
|
||||||
|
Err(e) => {
|
||||||
|
let response = json!({"error": e.to_string()});
|
||||||
|
let val = serde_json::to_string(&response).unwrap();
|
||||||
|
return Ok(prepare_header(val));
|
||||||
|
}
|
||||||
|
};
|
||||||
|
let pubkey = get_negative_report_public_key(&db, date);
|
||||||
|
prepare_header(serde_json::to_string(&pubkey).unwrap())
|
||||||
|
}),
|
||||||
(&Method::POST, "/negativereport") => Ok::<_, Infallible>({
|
(&Method::POST, "/negativereport") => Ok::<_, Infallible>({
|
||||||
let bytes = body::to_bytes(req.into_body()).await.unwrap();
|
let bytes = body::to_bytes(req.into_body()).await.unwrap();
|
||||||
// We cannot depend on the transport layer providing E2EE, so
|
// We cannot depend on the transport layer providing E2EE, so
|
||||||
// positive reports should be separately encrypted.
|
// negative reports should be separately encrypted.
|
||||||
let enr: EncryptedNegativeReport = match bincode::deserialize(&bytes) {
|
let enr: EncryptedNegativeReport = match bincode::deserialize(&bytes) {
|
||||||
Ok(enr) => enr,
|
Ok(enr) => enr,
|
||||||
Err(e) => {
|
Err(e) => {
|
||||||
|
|
|
@ -1,7 +1,5 @@
|
||||||
use lox_cli::networking::*;
|
use lox_cli::networking::*;
|
||||||
use lox_library::IssuerPubKey;
|
use lox_library::IssuerPubKey;
|
||||||
use std::collections::HashMap;
|
|
||||||
use x25519_dalek::PublicKey;
|
|
||||||
|
|
||||||
pub struct State {
|
pub struct State {
|
||||||
pub la_pubkeys: Vec<IssuerPubKey>,
|
pub la_pubkeys: Vec<IssuerPubKey>,
|
||||||
|
@ -16,5 +14,4 @@ pub struct State {
|
||||||
pub prob_user_is_censor: f64,
|
pub prob_user_is_censor: f64,
|
||||||
pub prob_user_submits_reports: f64,
|
pub prob_user_submits_reports: f64,
|
||||||
pub probs_user_in_country: Vec<(String, f64)>,
|
pub probs_user_in_country: Vec<(String, f64)>,
|
||||||
pub tp_pubkeys: HashMap<u32, PublicKey>,
|
|
||||||
}
|
}
|
||||||
|
|
|
@ -9,6 +9,7 @@ use lox_library::{
|
||||||
bridge_table::BridgeLine, cred::Lox, proto::check_blockage::MIN_TRUST_LEVEL, scalar_u32,
|
bridge_table::BridgeLine, cred::Lox, proto::check_blockage::MIN_TRUST_LEVEL, scalar_u32,
|
||||||
};
|
};
|
||||||
use rand::Rng;
|
use rand::Rng;
|
||||||
|
use x25519_dalek::PublicKey;
|
||||||
|
|
||||||
pub struct User {
|
pub struct User {
|
||||||
// Does this user cooperate with a censor?
|
// Does this user cooperate with a censor?
|
||||||
|
@ -142,7 +143,18 @@ impl User {
|
||||||
|
|
||||||
pub async fn send_negative_reports(state: &State, reports: Vec<NegativeReport>) {
|
pub async fn send_negative_reports(state: &State, reports: Vec<NegativeReport>) {
|
||||||
let date = get_date();
|
let date = get_date();
|
||||||
let pubkey = state.tp_pubkeys.get(&date).unwrap();
|
//let pubkey = state.tp_pubkeys.get(&date).unwrap();
|
||||||
|
let pubkey = serde_json::from_slice::<Option<PublicKey>>(
|
||||||
|
&state
|
||||||
|
.net_tp
|
||||||
|
.request(
|
||||||
|
"/nrkey".to_string(),
|
||||||
|
serde_json::to_string(&date).unwrap().into(),
|
||||||
|
)
|
||||||
|
.await,
|
||||||
|
)
|
||||||
|
.unwrap()
|
||||||
|
.unwrap();
|
||||||
for report in reports {
|
for report in reports {
|
||||||
state
|
state
|
||||||
.net_tp
|
.net_tp
|
||||||
|
|
Loading…
Reference in New Issue