|
1 | 1 | import Path |
| 2 | +import CryptoKit |
2 | 3 | import Version |
3 | 4 | @testable import Xcodes |
4 | 5 | import XCTest |
| 6 | +import CommonCrypto |
| 7 | +import BigNum |
| 8 | +import SRP |
5 | 9 |
|
6 | 10 | class AppStateUpdateTests: XCTestCase { |
7 | 11 | var subject: AppState! |
@@ -258,4 +262,81 @@ class AppStateUpdateTests: XCTestCase { |
258 | 262 | XCTAssertEqual(subject.allXcodes.map(\.version), [Version("12.4.0")!, Version("12.3.0-RC")!]) |
259 | 263 | XCTAssertEqual(subject.allXcodes.map(\.identicalBuilds), [[], []]) |
260 | 264 | } |
| 265 | + |
| 266 | + func sha256(data : Data) -> Data { |
| 267 | + var hash = [UInt8](repeating: 0, count: Int(CC_SHA256_DIGEST_LENGTH)) |
| 268 | + data.withUnsafeBytes { |
| 269 | + _ = CC_SHA256($0.baseAddress, CC_LONG(data.count), &hash) |
| 270 | + } |
| 271 | + return Data(hash) |
| 272 | + } |
| 273 | + |
| 274 | + func testSIRP() throws { |
| 275 | + /* |
| 276 | + Obtaind by running fastlane spaceauth --verbose -u anand.appleseed@example.com with some custom logging |
| 277 | + |
| 278 | + Starting SIRP Apple ID login |
| 279 | + a: {"a":"VLEKLa+n2cyeYNWbECm45CuS4kCdCxodlTDGlW1FKaUyOrv/RbtN2sM0pVE12zI7k3VkocPC3rN5DZBIkahR6I8JHj/J97dtTvzsR+aNRWTYCT2HGP1PBI0QArp3eitAbFqTWI4+Zw+oOnV8+AYdH/wjbq7gOK4C4dvIHE+FzRwIlmguPb5qu2r47R9W3y1msVdoUGlFBOMOMb7Gyq7F0MaEIFH63lNzGomwq74mfss/cFqurd6fxU+Y7tdVTPZw1GWyBEPiXWpk8sNm2zE+S6zWo5tOsICprU75IC9galh1igfzN7VNe0SUFLNFTbFK+Bb1SFAOrAbBZOmyOG5uSQ==","accountName":"anand.appleseed@example.com","protocols":["s2k","s2k_fo"]} |
| 280 | + Received SIRP signin init response: {"iteration"=>20309, "salt"=>"fIjNflgqSJXACWwwvhDU+w==", "protocol"=>"s2k", "b"=>"PMbU75wwG6rDTySXn2ASWyfQuPoW5ham15SzIscpInwOPE2uk7sePsW4ra0dHcLDUMFQn/LgBggIKOo7YZ9hf1VReiAzXwSKSHdJHjHUURTC2eNpANGUPO1qzuXYgc/MP3MR+GipKHsz+KTLT+8wLjNaiCIHsL/7evJBMw9QqiwhyXlAIm5mGZfhdTVbGpLz2/QzrFmI6pUTrHpio6m1Q74DH3FBxxIeiIcuEdGdeVt9iUweowBRyf2woasTvSV1fbMQbl+lsWPwzt/a73+J30eOGFdSubqSVYh2pV0OLqRz7zPzJars12teCWUV+0WUIaxb14Mp7tlmqcTPuqZe9w==", "c"=>"d-533-eccbc4e9-9564-11ef-84a6-018111c8cc60:PRN"} |
| 281 | + encrypted_password: 40532b4de9353fc537dc62ee84eacebd7ecb5ec26efca98bd01b0380e302100f 32 |
| 282 | + bb: 7672345903537871991962715758896796468138571329014139041563495295907370682045347022183702983061785424983278857706335295545994877883818377653653442007828499221881058994644619578239367613808278802931379172730746665773282250642455690715139985911303055104847971308813151718669484181874342088801251592138154023949370621963319928723678385968989085032385411532317797659749008135679504901238396934480214258070495365760319076978872181485178648397361564241555189629889320567561713407566532187413091018319494367244540399242523126294027225387432028960726767445027313453858210115810946641002311734776929442587065438110307439763191 |
| 283 | + x: 726436461883978586175291668001486484510457416477927591386889224605776454162 |
| 284 | + u: 49415306980415573732801389514223606278850554555635359953422678270536095422201 |
| 285 | + private 23161374166158551996079451276150657702422963034121842124445818241826569345033578345120284496449280736328513302994568402583647660370960353252836732307301957364261384324957527103960720408713825427474127658415917826326829664923997096839970397226662116904369925262192683131695683487505523842260218490007066160096482662715246662018133837725691586205535995663334471723776536640973591229093933458552240634178864509015968350855952558520147559154646484379002445961375384929682566525908284011230815908584648931495968206840416022306138033496705677078512266958633477047047323620540878121579549170392075029336954975132431417099801 |
| 286 | + S: 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 |
| 287 | + K: c5207f707186a52f1adee41bf0a7bc41e51e6dffc25cdaeca8acb7de2710b20a |
| 288 | + hN: 65908899099613711898698321155848703477601840791750658211391687862255842366922 |
| 289 | + hG: 23094592799618609623465742609366149076596436609130823198107630312273622653270 |
| 290 | + hxor 73599884097654065452785151481733181870375477364472235597514429707329935690908 |
| 291 | + response: {"accountName":"anand.appleseed@example.com","c":"d-533-eccbc4e9-9564-11ef-84a6-018111c8cc60:PRN","m1":"f/Bkq8gBTYxl7SyiRd4SXTyE/jM/g6E0mVyZIQDIsPg=","m2":"R2rgqC9cMAtWiXUImOrvs4oF+ccibf8KaFsZQ22WokM=","rememberMe":false} |
| 292 | + */ |
| 293 | + |
| 294 | + let publicKey = Data(base64Encoded: "VLEKLa+n2cyeYNWbECm45CuS4kCdCxodlTDGlW1FKaUyOrv/RbtN2sM0pVE12zI7k3VkocPC3rN5DZBIkahR6I8JHj/J97dtTvzsR+aNRWTYCT2HGP1PBI0QArp3eitAbFqTWI4+Zw+oOnV8+AYdH/wjbq7gOK4C4dvIHE+FzRwIlmguPb5qu2r47R9W3y1msVdoUGlFBOMOMb7Gyq7F0MaEIFH63lNzGomwq74mfss/cFqurd6fxU+Y7tdVTPZw1GWyBEPiXWpk8sNm2zE+S6zWo5tOsICprU75IC9galh1igfzN7VNe0SUFLNFTbFK+Bb1SFAOrAbBZOmyOG5uSQ==".data(using: .utf8)!) |
| 295 | + |
| 296 | + let clientKeys = SRPKeyPair(public: .init([UInt8](publicKey!)), |
| 297 | + private: .init(BigNum("23161374166158551996079451276150657702422963034121842124445818241826569345033578345120284496449280736328513302994568402583647660370960353252836732307301957364261384324957527103960720408713825427474127658415917826326829664923997096839970397226662116904369925262192683131695683487505523842260218490007066160096482662715246662018133837725691586205535995663334471723776536640973591229093933458552240634178864509015968350855952558520147559154646484379002445961375384929682566525908284011230815908584648931495968206840416022306138033496705677078512266958633477047047323620540878121579549170392075029336954975132431417099801")!)) |
| 298 | + |
| 299 | + let password = sha256(data: "example".data(using: .utf8)!) |
| 300 | + let salt = Data(base64Encoded: "fIjNflgqSJXACWwwvhDU+w==".data(using: .utf8)!)! |
| 301 | + let iterations: Int = 20309 |
| 302 | + let derivedKeyLength: Int = 32 |
| 303 | + var keyArray = Array<UInt8>(repeating: 0, count: derivedKeyLength) |
| 304 | + |
| 305 | + let result:Int32 = keyArray.withUnsafeMutableBytes { keyBytes -> Int32 in |
| 306 | + let keyBuffer = UnsafeMutablePointer<UInt8>(keyBytes.baseAddress!.assumingMemoryBound(to: UInt8.self)) |
| 307 | + return password.withUnsafeBytes { passwordDigestBytes -> Int32 in |
| 308 | + let passwordBuffer = UnsafePointer<UInt8>(passwordDigestBytes.baseAddress!.assumingMemoryBound(to: UInt8.self)) |
| 309 | + return salt.withUnsafeBytes { saltBytes -> Int32 in |
| 310 | + let saltBuffer = UnsafePointer<UInt8>(saltBytes.baseAddress!.assumingMemoryBound(to: UInt8.self)) |
| 311 | + return CCKeyDerivationPBKDF( |
| 312 | + CCPBKDFAlgorithm(kCCPBKDF2), |
| 313 | + passwordBuffer, |
| 314 | + password.count, |
| 315 | + saltBuffer, |
| 316 | + salt.count, |
| 317 | + CCPseudoRandomAlgorithm(kCCPRFHmacAlgSHA256), |
| 318 | + UInt32(iterations), |
| 319 | + keyBuffer, |
| 320 | + derivedKeyLength) |
| 321 | + |
| 322 | + } |
| 323 | + } |
| 324 | + } |
| 325 | + |
| 326 | + let expectedKey: [UInt8] = [0x40, 0x53, 0x2b, 0x4d, 0xe9, 0x35, 0x3f, 0xc5, 0x37, 0xdc, 0x62, 0xee, 0x84, 0xea, 0xce, 0xbd, 0x7e, 0xcb, 0x5e, 0xc2, 0x6e, 0xfc, 0xa9, 0x8b, 0xd0, 0x1b, 0x03, 0x80, 0xe3, 0x02, 0x10, 0x0f] |
| 327 | + |
| 328 | + XCTAssertEqual(expectedKey, keyArray) |
| 329 | + |
| 330 | + let decodedB = Data(base64Encoded: "PMbU75wwG6rDTySXn2ASWyfQuPoW5ham15SzIscpInwOPE2uk7sePsW4ra0dHcLDUMFQn/LgBggIKOo7YZ9hf1VReiAzXwSKSHdJHjHUURTC2eNpANGUPO1qzuXYgc/MP3MR+GipKHsz+KTLT+8wLjNaiCIHsL/7evJBMw9QqiwhyXlAIm5mGZfhdTVbGpLz2/QzrFmI6pUTrHpio6m1Q74DH3FBxxIeiIcuEdGdeVt9iUweowBRyf2woasTvSV1fbMQbl+lsWPwzt/a73+J30eOGFdSubqSVYh2pV0OLqRz7zPzJars12teCWUV+0WUIaxb14Mp7tlmqcTPuqZe9w==".data(using: .utf8)!)! |
| 331 | + |
| 332 | + let client = SRPClient(configuration: SRPConfiguration<SHA256>(.N2048)) |
| 333 | + let sharedSecret = try client.calculateSharedSecret(password: Data(keyArray), salt: [UInt8](salt), clientKeys: clientKeys, serverPublicKey: .init([UInt8](decodedB))) |
| 334 | + |
| 335 | + let accountName = "anand.appleseed@example.com" |
| 336 | + let m1 = client.calculateClientProof(username: accountName, salt: [UInt8](salt), clientPublicKey: clientKeys.public, serverPublicKey: .init([UInt8](decodedB)), sharedSecret: .init(sharedSecret.bytes)) |
| 337 | + let m2 = client.calculateServerProof(clientPublicKey: clientKeys.public, clientProof: m1, sharedSecret: .init([UInt8](sharedSecret.bytes))) |
| 338 | + |
| 339 | + XCTAssertEqual(Data(m1).base64EncodedString(), "f/Bkq8gBTYxl7SyiRd4SXTyE/jM/g6E0mVyZIQDIsPg=") |
| 340 | + XCTAssertEqual(Data(m2).base64EncodedString(), "R2rgqC9cMAtWiXUImOrvs4oF+ccibf8KaFsZQ22WokM=") |
| 341 | + } |
261 | 342 | } |
0 commit comments