1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
#
# Copyright 2019 aiohomekit team
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
import pytest
from aiohomekit.crypto.srp import SrpClient, SrpServer
# To find short keys
# for _ in range(500000):
# srp = SrpClient("Pair-Setup", "123-45-789")
# pub_key_bytes = SrpClient.to_byte_array(srp.A)
# if len(pub_key_bytes) < 384:
# pprint.pprint(["found key", srp.a])
class ZeroSaltSrpServer(SrpServer):
def _create_salt_bytes(self):
return b"\x00" * 16
class LeadingZeroPrivateKeySrpClient(SrpClient):
def generate_private_key(self):
return 292137137271783308929690144371568755687
class LeadingZeroPrivateAndPublicKeySrpClient(SrpClient):
def generate_private_key(self):
return 70997313118674976963008287637113704817
class LeadingZeroPrivateKeySrpServer(SrpServer):
def generate_private_key(self):
return 292137137271783308929690144371568755687
class LeadingZeroPrivateAndPublicKeySrpServer(SrpServer):
def generate_private_key(self):
return 70997313118674976963008287637113704817
@pytest.mark.parametrize(
"server_cls, client_cls",
[
(SrpServer, SrpClient),
(ZeroSaltSrpServer, SrpClient),
(SrpServer, LeadingZeroPrivateKeySrpClient),
(SrpServer, LeadingZeroPrivateAndPublicKeySrpClient),
(ZeroSaltSrpServer, LeadingZeroPrivateAndPublicKeySrpClient),
(
LeadingZeroPrivateAndPublicKeySrpServer,
LeadingZeroPrivateAndPublicKeySrpClient,
),
(LeadingZeroPrivateKeySrpServer, LeadingZeroPrivateAndPublicKeySrpClient),
],
)
def test_1(server_cls, client_cls):
# step M1
# step M2
setup_code = "123-45-678" # transmitted on second channel
server: SrpServer = server_cls("Pair-Setup", setup_code)
server_pub_key = server.get_public_key_bytes()
server_salt = server.get_salt()
# step M3
client: SrpClient = client_cls("Pair-Setup", setup_code)
client.set_salt(server_salt)
client.set_server_public_key(server_pub_key)
client_pub_key = client.get_public_key_bytes()
clients_proof_bytes = client.get_proof_bytes()
# step M4
server.set_client_public_key(client_pub_key)
server.get_shared_secret()
assert server.verify_clients_proof_bytes(clients_proof_bytes) is True
servers_proof = server.get_proof_bytes(clients_proof_bytes)
# step M5
assert (
client.verify_servers_proof_bytes(servers_proof) is True
), f"proof mismatch: server_key:{server.b} client_key:{client.a} server_salt:{server.salt}"
|
