You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Comrad/comrad/backend/crypt.py

271 lines
8.1 KiB
Python

4 years ago
"""
Storage for both keys and data
"""
4 years ago
import os,sys; sys.path.append(os.path.abspath(os.path.join(os.path.abspath(os.path.join(os.path.dirname(__file__),'..')),'..')))
from comrad import *
# from simplekv.fs import FilesystemStore
# from simplekv.memory.redisstore import RedisStore
# import redis
4 years ago
import hashlib,os
import zlib
4 years ago
from pythemis.exception import ThemisError
# from vedis import Vedis
# from walrus.tusks.rlite import WalrusLite
4 years ago
4 years ago
LOG_GET_SET = 0
4 years ago
4 years ago
# [ComradX.get_inbox_crypt()] --> inbox crypt: VUVDMgAAAC2WUhTIAlSExnnuWskKUYTzK/PoKBPztt/GNvXCusQCsHHD9Rx0 /inbox/mbot/ []
# [ComradX.get_inbox_crypt()] --> inbox crypt: b'VUVDMgAAAC2xvQhQA3SLt8rXwiDmuRKip4BsmnPqbhNxFEkZbqZGUAVCFd9S' /inbox/mbot/ [b'ODIyY2MyNTY5Njg0NDJhYTk0ODVhODBlYTBhOTE3YWI=']
4 years ago
4 years ago
4 years ago
class Crypt(Logger):
4 years ago
def __init__(self,
name=None,
fn=None,
use_secret=CRYPT_USE_SECRET,
path_secret=PATH_CRYPT_SECRET,
4 years ago
encrypt_values=False,
4 years ago
encryptor_func=None,
decryptor_func=None):
4 years ago
# defaults
4 years ago
if not name and fn: name=os.path.basename(fn).replace('.','_')
4 years ago
self.name,self.fn=name,fn
4 years ago
4 years ago
4 years ago
# use secret? for salting
4 years ago
if use_secret and path_secret:
if not os.path.exists(path_secret):
self.secret = get_random_binary_id()
from comrad.backend.keymaker import make_key_discreet
4 years ago
self.log('shhh! creating secret:',make_key_discreet(self.secret))
4 years ago
with open(path_secret,'wb') as of:
of.write(self.secret)
else:
with open(path_secret,'rb') as f:
self.secret = f.read()
else:
self.secret = b''
4 years ago
self.encrypt_values = encrypt_values
4 years ago
if self.secret and encrypt_values and (not encryptor_func or not decryptor_func):
from comrad.backend.keymaker import ComradSymmetricKeyWithPassphrase
self.key = ComradSymmetricKeyWithPassphrase(
4 years ago
passphrase=self.secret
)
encryptor_func = self.key.encrypt
decryptor_func = self.key.decrypt
4 years ago
self.encryptor_func=encryptor_func
self.decryptor_func=decryptor_func
4 years ago
# self.store = FilesystemStore(self.fn)
# self.store = RedisStore(redis.StrictRedis())
# self.db = Vedis(self.fn)
# self.db = WalrusLite(self.fn)
4 years ago
import hirlite
self.db = hirlite.Rlite(path=self.fn)
4 years ago
4 years ago
4 years ago
def log(self,*x,**y):
4 years ago
if LOG_GET_SET:
super().log(*x)
4 years ago
def hash(self,binary_data):
# return binary_data
4 years ago
return hasher(binary_data,self.secret)
4 years ago
def force_binary(self,k_b):
4 years ago
if k_b is None: return None
4 years ago
if type(k_b)==str: k_b=k_b.encode()
4 years ago
if type(k_b)!=bytes: k_b=k_b.decode()
4 years ago
return k_b
4 years ago
def package_key(self,k,prefix=''):
4 years ago
if not k: return b''
k_b = self.force_binary(k)
k_b2 = self.force_binary(prefix) + k_b
return k_b2
4 years ago
4 years ago
def package_val(self,k,encrypt=None):
4 years ago
if encrypt is None: encrypt=self.encrypt_values
4 years ago
k_b = self.force_binary(k)
4 years ago
if encrypt:
try:
4 years ago
k_b = self.encryptor_func(k_b)
4 years ago
except ThemisError as e:
self.log('!! ENCRYPTION ERROR:',e)
4 years ago
return k_b
4 years ago
4 years ago
def unpackage_val(self,k_b,encrypt=None):
4 years ago
if encrypt is None: encrypt=self.encrypt_values
4 years ago
if encrypt:
4 years ago
try:
4 years ago
k_b = self.decryptor_func(k_b)
4 years ago
except ThemisError as e:
4 years ago
self.log('!! DECRYPTION ERROR:',e)
4 years ago
return k_b
4 years ago
4 years ago
def has(self,k,prefix=''):
got=self.get(k,prefix=prefix)
# self.log('has got',got)
return bool(got)
4 years ago
4 years ago
4 years ago
def set(self,k,v,prefix='',override=False,encrypt=True):
4 years ago
if self.has(k,prefix=prefix) and not override:
4 years ago
self.log(f"I'm afraid I can't let you do that, overwrite someone's data!\n\nat {prefix}{k} = {v}")
4 years ago
return False #(False,None,None)
4 years ago
4 years ago
k_b=self.package_key(k,prefix=prefix)
4 years ago
k_b_hash = self.hash(k_b)
4 years ago
v_b=self.package_val(v,encrypt = (self.encrypt_values and encrypt))
4 years ago
if not override:
self.log(f'''Crypt.set(\n\t{k_b}\n\n\t{k_b_hash}\n\n\t{v_b}\n)''')
#self.store.put(k_b_hash,v_b)
#with self.db.transaction():
# self.db[k_b_hash]=v_b
4 years ago
return self.db.command('set',k_b_hash,v_b)
# return True
4 years ago
def exists(self,k,prefix=''):
4 years ago
return self.has(k,prefix=prefix)
4 years ago
def key2hash(self,k,prefix=''):
return self.hash(
self.package_key(
prefix + k
)
)
4 years ago
def delete(self,k,prefix=''):
k_b=self.package_key(k,prefix=prefix)
k_b_hash = self.hash(k_b)
4 years ago
self.log(f'deleting {k_b_hash}')
4 years ago
v = self.db.command('del',k_b_hash)
4 years ago
self.log('<-- # keys removed:',v,'did key exist?',self.has(k,prefix=prefix))
4 years ago
return v
4 years ago
4 years ago
def get(self,k,prefix=''):
k_b=self.package_key(k,prefix=prefix)
4 years ago
k_b_hash = self.hash(k_b)
# v=self.db.get(k_b_hash)
self.log('getting k',k,'with prefix',prefix)
self.log('getting k_b',k_b)
self.log('getting k_b_hash',k_b_hash)
4 years ago
v = self.db.command('get',k_b_hash)
self.log('<--',v)
4 years ago
v_b=self.unpackage_val(v)
return v_b
class KeyCrypt(Crypt):
def __init__(self):
4 years ago
return super().__init__(name=PATH_CRYPT_CA_KEYS.replace('.','_'))
4 years ago
class DataCrypt(Crypt):
def __init__(self):
4 years ago
return super().__init__(name=PATH_CRYPT_CA_DATA.replace('.','_'))
4 years ago
4 years ago
4 years ago
class CryptList(Crypt): # like inbox
def __init__(self,
crypt,
keyname,
prefix='',
encryptor_func=lambda x: x,
decryptor_func=lambda x: x):
4 years ago
4 years ago
self.crypt=crypt
self.db=self.crypt.db
self.keyname=self.crypt.package_key(keyname,prefix)
4 years ago
@property
def values(self): return list(self.l)
4 years ago
def package_val(self,val):
# if type(val)!=bytes: val=val.encode()
4 years ago
return val
4 years ago
def unpackage_val(self,val):
# if type(val)==str: val=val.encode()
4 years ago
return val
4 years ago
def append(self,val):
4 years ago
self.log('<--val',val)
4 years ago
if type(val)==list: return [self.append(x) for x in val]
4 years ago
val_x = self.package_val(val)
# with self.db.transaction():
# res = self.db.lpush(self.keyname,val_x)
4 years ago
res = self.db.command('rpush',self.keyname,val_x)
4 years ago
self.log('-->',res)
return res
4 years ago
def prepend(self,val):
4 years ago
self.log('<--val',val)
4 years ago
if type(val)==list: return [self.prepend(x) for x in val]
4 years ago
val_x = self.package_val(val)
4 years ago
res = self.db.command('lpush',self.keyname,val_x)
4 years ago
self.log('-->',res)
return res
4 years ago
4 years ago
@property
def values(self):
4 years ago
l = self.db.command('lrange',self.keyname, '0', '-1')
self.log('<-- l',l)
if not l: return []
4 years ago
vals = [self.unpackage_val(x) for x in l]
self.log('-->',vals)
return vals
4 years ago
def remove(self,val):
4 years ago
self.log('<-- removing value:',val,'\nfrom values:',self.values)
4 years ago
if type(val)==list: return [self.remove(x) for x in val]
4 years ago
val_x = self.package_val(val)
4 years ago
res = self.db.command('lrem',self.keyname,'0',val_x)
self.log('res remove:',res)
return val if res else None
4 years ago
4 years ago
4 years ago
if __name__=='__main__':
crypt = Crypt(fn='tes22t.db')
print(crypt.set(
'testing22',
b'wooooooboy',
prefix='/test/',
))
print('got back', crypt.get(
'testing22',
prefix='/test/'
))
4 years ago
4 years ago
crypt_list = CryptList(
keyname='MyInbosdx35',
crypt=crypt
4 years ago
)
print(crypt_list.values)
4 years ago
# print(crypt_list.remove('cool thing 0'))
4 years ago
# print(crypt_list.append('cool thing 1'))
print(crypt_list.append('Appended'))
4 years ago
print(crypt_list.append('cool thing 0'))
print(crypt_list.prepend('Prepended'))
print()
print()
4 years ago
print(crypt_list.remove('cool thing 0'))
print()
print()
4 years ago
print(crypt_list.values)