Source: jsxc.lib.otr.js

  1. /**
  2.  * @namespace jsxc.otr
  3.  */
  4. jsxc.otr = {
  5.    /** list of otr objects */
  6.    objects: {},
  8.    dsaFallback: null,
  9.    /**
  10.     * Handler for otr receive event
  11.     *
  12.     * @memberOf jsxc.otr
  13.     * @param {Object} d
  14.     * @param {string} d.bid
  15.     * @param {string} d.msg received message
  16.     * @param {boolean} d.encrypted True, if msg was encrypted.
  17.     * @param {boolean} d.forwarded
  18.     * @param {string} d.stamp timestamp
  19.     */
  20.    receiveMessage: function(d) {
  21.       var bid = d.bid;
  23.       if (jsxc.otr.objects[bid].msgstate !== OTR.CONST.MSGSTATE_PLAINTEXT) {
  24.          jsxc.otr.backup(bid);
  25.       }
  27.       if (jsxc.otr.objects[bid].msgstate !== OTR.CONST.MSGSTATE_PLAINTEXT && !d.encrypted) {
  28.          jsxc.gui.window.postMessage({
  29.             bid: bid,
  30.             direction: jsxc.Message.SYS,
  31.             msg: $.t('Received_an_unencrypted_message') + '. [' + d.msg + ']',
  32.             encrypted: d.encrypted,
  33.             forwarded: d.forwarded,
  34.             stamp: d.stamp
  35.          });
  36.       } else {
  37.          jsxc.gui.window.postMessage({
  38.             _uid: d._uid,
  39.             bid: bid,
  40.             direction: jsxc.Message.IN,
  41.             msg: d.msg,
  42.             encrypted: d.encrypted,
  43.             forwarded: d.forwarded,
  44.             stamp: d.stamp,
  45.             attachment: d.attachment
  46.          });
  47.       }
  48.    },
  50.    /**
  51.     * Handler for otr send event
  52.     *
  53.     * @param {string} jid
  54.     * @param {string} msg message to be send
  55.     */
  56.    sendMessage: function(jid, msg, message) {
  57.       if (jsxc.otr.objects[jsxc.jidToBid(jid)].msgstate !== 0) {
  58.          jsxc.otr.backup(jsxc.jidToBid(jid));
  59.       }
  61.       jsxc.xmpp._sendMessage(jid, msg, message);
  62.    },
  64.    /**
  65.     * Create new otr instance
  66.     *
  67.     * @param {type} bid
  68.     * @returns {undefined}
  69.     */
  70.    create: function(bid) {
  72.       if (jsxc.otr.objects.hasOwnProperty(bid)) {
  73.          return;
  74.       }
  76.       if (!jsxc.options.otr.priv) {
  77.          return;
  78.       }
  80.       // save list of otr objects
  81.       var ol = jsxc.storage.getUserItem('otrlist') || [];
  82.       if (ol.indexOf(bid) < 0) {
  83.          ol.push(bid);
  84.          jsxc.storage.setUserItem('otrlist', ol);
  85.       }
  87.       jsxc.otr.objects[bid] = new OTR(jsxc.options.otr);
  89.       if (jsxc.options.otr.SEND_WHITESPACE_TAG) {
  90.          jsxc.otr.objects[bid].SEND_WHITESPACE_TAG = true;
  91.       }
  93.       if (jsxc.options.otr.WHITESPACE_START_AKE) {
  94.          jsxc.otr.objects[bid].WHITESPACE_START_AKE = true;
  95.       }
  97.       jsxc.otr.objects[bid].on('status', function(status) {
  98.          var data = jsxc.storage.getUserItem('buddy', bid);
  100.          if (data === null) {
  101.             return;
  102.          }
  104.          switch (status) {
  105.             case OTR.CONST.STATUS_SEND_QUERY:
  106.                jsxc.gui.window.postMessage({
  107.                   bid: bid,
  108.                   direction: jsxc.Message.SYS,
  109.                   msg: $.t('trying_to_start_private_conversation')
  110.                });
  111.                break;
  112.             case OTR.CONST.STATUS_AKE_SUCCESS:
  113.                data.fingerprint = jsxc.otr.objects[bid].their_priv_pk.fingerprint();
  114.                data.msgstate = OTR.CONST.MSGSTATE_ENCRYPTED;
  116.                var msg_state = jsxc.otr.objects[bid].trust ? 'Verified' : 'Unverified';
  117.                var msg = $.t(msg_state + '_private_conversation_started');
  119.                jsxc.gui.window.postMessage({
  120.                   bid: bid,
  121.                   direction: 'sys',
  122.                   msg: msg
  123.                });
  124.                break;
  125.             case OTR.CONST.STATUS_END_OTR:
  126.                data.fingerprint = null;
  128.                if (jsxc.otr.objects[bid].msgstate === OTR.CONST.MSGSTATE_PLAINTEXT) {
  129.                   // we abort the private conversation
  131.                   data.msgstate = OTR.CONST.MSGSTATE_PLAINTEXT;
  132.                   jsxc.gui.window.postMessage({
  133.                      bid: bid,
  134.                      direction: jsxc.Message.SYS,
  135.                      msg: $.t('private_conversation_aborted')
  136.                   });
  138.                } else {
  139.                   // the buddy abort the private conversation
  141.                   data.msgstate = OTR.CONST.MSGSTATE_FINISHED;
  142.                   jsxc.gui.window.postMessage({
  143.                      bid: bid,
  144.                      direction: jsxc.Message.SYS,
  145.                      msg: $.t('your_buddy_closed_the_private_conversation_you_should_do_the_same')
  146.                   });
  147.                }
  148.                break;
  149.             case OTR.CONST.STATUS_SMP_HANDLE:
  150.                jsxc.keepBusyAlive();
  151.                break;
  152.          }
  154.          jsxc.storage.setUserItem('buddy', bid, data);
  156.          // for encryption and verification state
  157.          jsxc.gui.update(bid);
  158.       });
  160.       jsxc.otr.objects[bid].on('smp', function(type, data) {
  161.          switch (type) {
  162.             case 'question': // verification request received
  163.                jsxc.gui.window.postMessage({
  164.                   bid: bid,
  165.                   direction: jsxc.Message.SYS,
  166.                   msg: $.t('Authentication_request_received')
  167.                });
  169.                jsxc.gui.window.smpRequest(bid, data);
  170.                jsxc.storage.setUserItem('smp', bid, {
  171.                   data: data || null
  172.                });
  174.                break;
  175.             case 'trust': // verification completed
  176.                jsxc.otr.objects[bid].trust = data;
  177.                jsxc.storage.updateUserItem('buddy', bid, 'trust', data);
  178.                jsxc.otr.backup(bid);
  179.                jsxc.gui.update(bid);
  181.                if (data) {
  182.                   jsxc.gui.window.postMessage({
  183.                      bid: bid,
  184.                      direction: jsxc.Message.SYS,
  185.                      msg: $.t('conversation_is_now_verified')
  186.                   });
  187.                } else {
  188.                   jsxc.gui.window.postMessage({
  189.                      bid: bid,
  190.                      direction: jsxc.Message.SYS,
  191.                      msg: $.t('authentication_failed')
  192.                   });
  193.                }
  194.                jsxc.storage.removeUserItem('smp', bid);
  195.                jsxc.gui.dialog.close('smp');
  196.                break;
  197.             case 'abort':
  198.                jsxc.gui.window.hideOverlay(bid);
  199.                jsxc.gui.window.postMessage({
  200.                   bid: bid,
  201.                   direction: jsxc.Message.SYS,
  202.                   msg: $.t('Authentication_aborted')
  203.                });
  204.                break;
  205.             default:
  206.                jsxc.debug('[OTR] sm callback: Unknown type: ' + type);
  207.          }
  208.       });
  210.       // Receive message
  211.       jsxc.otr.objects[bid].on('ui', function(msg, encrypted, meta) {
  212.          jsxc.otr.receiveMessage({
  213.             _uid: meta._uid,
  214.             bid: bid,
  215.             msg: msg,
  216.             encrypted: encrypted === true,
  217.             stamp: meta.stamp,
  218.             forwarded: meta.forwarded,
  219.             attachment: meta.attachment
  220.          });
  221.       });
  223.       // Send message
  224.       jsxc.otr.objects[bid].on('io', function(msg, message) {
  225.          var jid = jsxc.gui.window.get(bid).data('jid') || jsxc.otr.objects[bid].jid;
  227.          jsxc.otr.objects[bid].jid = jid;
  229.          jsxc.otr.sendMessage(jid, msg, message);
  230.       });
  232.       jsxc.otr.objects[bid].on('error', function(err) {
  233.          // Handle this case in jsxc.otr.receiveMessage
  234.          if (err !== 'Received an unencrypted message.') {
  235.             jsxc.gui.window.postMessage({
  236.                bid: bid,
  237.                direction: jsxc.Message.SYS,
  238.                msg: '[OTR] ' + $.t(err)
  239.             });
  240.          }
  242.          jsxc.error('[OTR] ' + err);
  243.       });
  245.       jsxc.otr.restore(bid);
  246.    },
  248.    /**
  249.     * show verification dialog with related part (secret or question)
  250.     *
  251.     * @param {type} bid
  252.     * @param {string} [data]
  253.     * @returns {undefined}
  254.     */
  255.    onSmpQuestion: function(bid, data) {
  256.       jsxc.gui.showVerification(bid);
  258.       $('#jsxc_dialog select').prop('selectedIndex', (data ? 2 : 3)).change();
  259.       $('#jsxc_dialog > div:eq(0)').hide();
  261.       if (data) {
  262.          $('#jsxc_dialog > div:eq(2)').find('#jsxc_quest').val(data).prop('disabled', true);
  263.          $('#jsxc_dialog > div:eq(2)').find('.jsxc_submit').text($.t('Answer'));
  264.          $('#jsxc_dialog > div:eq(2)').find('.jsxc_explanation').text($.t('onsmp_explanation_question'));
  265.          $('#jsxc_dialog > div:eq(2)').show();
  266.       } else {
  267.          $('#jsxc_dialog > div:eq(3)').find('.jsxc_explanation').text($.t('onsmp_explanation_secret'));
  268.          $('#jsxc_dialog > div:eq(3)').show();
  269.       }
  271.       $('#jsxc_dialog .jsxc_close').click(function() {
  272.          jsxc.storage.removeUserItem('smp', bid);
  274.          if (jsxc.master) {
  275.             jsxc.otr.objects[bid].sm.abort();
  276.          }
  277.       });
  278.    },
  280.    /**
  281.     * Send verification request to buddy
  282.     *
  283.     * @param {string} bid
  284.     * @param {string} sec secret
  285.     * @param {string} [quest] question
  286.     * @returns {undefined}
  287.     */
  288.    sendSmpReq: function(bid, sec, quest) {
  289.       jsxc.keepBusyAlive();
  291.       jsxc.otr.objects[bid].smpSecret(sec, quest || '');
  292.    },
  294.    /**
  295.     * Toggle encryption state
  296.     *
  297.     * @param {type} bid
  298.     * @returns {undefined}
  299.     */
  300.    toggleTransfer: function(bid) {
  301.       if (typeof OTR !== 'function') {
  302.          return;
  303.       }
  305.       if (jsxc.storage.getUserItem('buddy', bid).msgstate === 0) {
  306.          jsxc.otr.goEncrypt(bid);
  307.       } else {
  308.          jsxc.otr.goPlain(bid);
  309.       }
  310.    },
  312.    /**
  313.     * Send request to encrypt the session
  314.     *
  315.     * @param {type} bid
  316.     * @returns {undefined}
  317.     */
  318.    goEncrypt: function(bid) {
  319.       if (jsxc.master) {
  320.          if (jsxc.otr.objects.hasOwnProperty(bid)) {
  321.             jsxc.otr.objects[bid].sendQueryMsg();
  322.          }
  323.       } else {
  324.          jsxc.storage.updateUserItem('buddy', bid, 'transferReq', 1);
  325.       }
  326.    },
  328.    /**
  329.     * Abort encryptet session
  330.     *
  331.     * @param {type} bid
  332.     * @param cb callback
  333.     * @returns {undefined}
  334.     */
  335.    goPlain: function(bid, cb) {
  336.       if (jsxc.master) {
  337.          if (jsxc.otr.objects.hasOwnProperty(bid)) {
  338.             jsxc.otr.objects[bid].endOtr.call(jsxc.otr.objects[bid], cb);
  339.             jsxc.otr.objects[bid].init.call(jsxc.otr.objects[bid]);
  341.             jsxc.otr.backup(bid);
  342.          }
  343.       } else {
  344.          jsxc.storage.updateUserItem('buddy', bid, 'transferReq', 0);
  345.       }
  346.    },
  348.    /**
  349.     * Backups otr session
  350.     *
  351.     * @param {string} bid
  352.     */
  353.    backup: function(bid) {
  354.       var o = jsxc.otr.objects[bid]; // otr object
  355.       var r = {}; // return value
  357.       if (o === null) {
  358.          return;
  359.       }
  361.       // all variables which should be saved
  362.       var savekey = ['jid', 'our_instance_tag', 'msgstate', 'authstate', 'fragment', 'their_y', 'their_old_y', 'their_keyid', 'their_instance_tag', 'our_dh', 'our_old_dh', 'our_keyid', 'sessKeys', 'storedMgs', 'oldMacKeys', 'trust', 'transmittedRS', 'ssid', 'receivedPlaintext', 'authstate', 'send_interval'];
  364.       var i;
  365.       for (i = 0; i < savekey.length; i++) {
  366.          r[savekey[i]] = JSON.stringify(o[savekey[i]]);
  367.       }
  369.       if (o.their_priv_pk !== null) {
  370.          r.their_priv_pk = JSON.stringify(o.their_priv_pk.packPublic());
  371.       }
  373.       if (o.ake.otr_version && o.ake.otr_version !== '') {
  374.          r.otr_version = JSON.stringify(o.ake.otr_version);
  375.       }
  377.       jsxc.storage.setUserItem('otr', bid, r);
  378.    },
  380.    /**
  381.     * Restore old otr session
  382.     *
  383.     * @param {string} bid
  384.     */
  385.    restore: function(bid) {
  386.       var o = jsxc.otr.objects[bid];
  387.       var d = jsxc.storage.getUserItem('otr', bid);
  389.       if (o !== null || d !== null) {
  390.          var key;
  391.          for (key in d) {
  392.             if (d.hasOwnProperty(key)) {
  393.                var val = JSON.parse(d[key]);
  394.                if (key === 'their_priv_pk' && val !== null) {
  395.                   val = DSA.parsePublic(val);
  396.                }
  397.                if (key === 'otr_version' && val !== null) {
  398.                   o.ake.otr_version = val;
  399.                } else {
  400.                   o[key] = val;
  401.                }
  402.             }
  403.          }
  405.          jsxc.otr.objects[bid] = o;
  407.          if (o.msgstate === 1 && o.their_priv_pk !== null) {
  408.             o._smInit.call(jsxc.otr.objects[bid]);
  409.          }
  410.       }
  412.       jsxc.otr.enable(bid);
  413.    },
  415.    /**
  416.     * Create or load DSA key
  417.     *
  418.     * @returns {unresolved}
  419.     */
  420.    createDSA: function() {
  421.       if (jsxc.options.otr.priv) {
  422.          return;
  423.       }
  425.       if (typeof OTR !== 'function') {
  426.          jsxc.warn('OTR support disabled');
  428.          OTR = {};
  429.          OTR.CONST = {
  430.             MSGSTATE_PLAINTEXT: 0,
  431.             MSGSTATE_ENCRYPTED: 1,
  432.             MSGSTATE_FINISHED: 2
  433.          };
  435.          return;
  436.       }
  438.       if (jsxc.storage.getUserItem('key') === null) {
  439.          var msg = $.t('Creating_your_private_key_');
  440.          var worker = null;
  442.          if (Worker) {
  443.             // try to create web-worker
  445.             try {
  446.                worker = new Worker(jsxc.options.root + '/lib/otr/lib/dsa-webworker.js');
  447.             } catch (err) {
  448.                jsxc.warn('Couldn\'t create web-worker.', err);
  449.             }
  450.          }
  452.          jsxc.otr.dsaFallback = (worker === null);
  454.          if (!jsxc.otr.dsaFallback) {
  455.             // create DSA key in background
  457.             worker.onmessage = function(e) {
  458.                var type = e.data.type;
  459.                var val = e.data.val;
  461.                if (type === 'debug') {
  462.                   jsxc.debug(val);
  463.                } else if (type === 'data') {
  464.                   jsxc.otr.DSAready(DSA.parsePrivate(val));
  465.                }
  466.             };
  468.             jsxc.debug('DSA key creation started.');
  470.             // start worker
  471.             worker.postMessage({
  472.                imports: [jsxc.options.root + '/lib/otr/vendor/salsa20.js', jsxc.options.root + '/lib/otr/vendor/bigint.js', jsxc.options.root + '/lib/otr/vendor/crypto.js', jsxc.options.root + '/lib/otr/vendor/eventemitter.js', jsxc.options.root + '/lib/otr/lib/const.js', jsxc.options.root + '/lib/otr/lib/helpers.js', jsxc.options.root + '/lib/otr/lib/dsa.js'],
  473.                seed: BigInt.getSeed(),
  474.                debug: true
  475.             });
  477.          } else {
  478.             // fallback
  479.             jsxc.xmpp.conn.pause();
  481.             jsxc.gui.dialog.open(jsxc.gui.template.get('waitAlert', null, msg), {
  482.                noClose: true
  483.             });
  485.             jsxc.debug('DSA key creation started in fallback mode.');
  487.             // wait until the wait alert is opened
  488.             setTimeout(function() {
  489.                var dsa = new DSA();
  490.                jsxc.otr.DSAready(dsa);
  491.             }, 500);
  492.          }
  493.       } else {
  494.          jsxc.debug('DSA key loaded');
  495.          jsxc.options.otr.priv = DSA.parsePrivate(jsxc.storage.getUserItem('key'));
  497.          jsxc.otr._createDSA();
  498.       }
  499.    },
  501.    /**
  502.     * Ending of createDSA().
  503.     */
  504.    _createDSA: function() {
  506.       jsxc.storage.setUserItem('priv_fingerprint', jsxc.options.otr.priv.fingerprint());
  508.       $.each(jsxc.storage.getUserItem('windowlist') || [], function(index, val) {
  509.          jsxc.otr.create(val);
  510.       });
  511.    },
  513.    /**
  514.     * Ending of DSA key generation.
  515.     *
  516.     * @param {DSA} dsa DSA object
  517.     */
  518.    DSAready: function(dsa) {
  519.       jsxc.storage.setUserItem('key', dsa.packPrivate());
  520.       jsxc.options.otr.priv = dsa;
  522.       // close wait alert
  523.       if (jsxc.otr.dsaFallback) {
  524.          jsxc.xmpp.conn.resume();
  525.          jsxc.gui.dialog.close();
  526.       }
  528.       jsxc.otr._createDSA();
  529.    },
  531.    enable: function(bid) {
  532.       jsxc.gui.window.get(bid).find('.jsxc_otr').removeClass('jsxc_disabled');
  533.    }
  534. };