--- /dev/null
+#include "CloudComm.h"
+#include "TimingSingleton.h"
+#include "SecureRandom.h"
+#include "IoTString.h"
+#include "Error.h"
+#include "URL.h"
+#include "Mac.h"
+#include "Table.h"
+#include "Slot.h"
+#include "Crypto.h"
+#include "ByteBuffer.h"
+#include "aes.h"
+#include <sys/types.h>
+#include <sys/socket.h>
+#include <arpa/inet.h>
+#include <netinet/tcp.h>
+#include <unistd.h>
+#include <netdb.h>
+
+/**
+ * Empty Constructor needed for child class.
+ */
+CloudComm::CloudComm() :
+ baseurl(NULL),
+ key(NULL),
+ mac(NULL),
+ password(NULL),
+ random(NULL),
+ salt(NULL),
+ table(NULL),
+ listeningPort(-1),
+ doEnd(false),
+ timer(TimingSingleton_getInstance()),
+ getslot(new Array<char>("getslot", 7)),
+ putslot(new Array<char>("putslot", 7))
+{
+}
+
+void *threadWrapper(void *cloud) {
+ CloudComm *c = (CloudComm *) cloud;
+ c->localServerWorkerFunction();
+ return NULL;
+}
+
+/**
+ * Constructor for actual use. Takes in the url and password.
+ */
+CloudComm::CloudComm(Table *_table, IoTString *_baseurl, IoTString *_password, int _listeningPort) :
+ baseurl(new IoTString(_baseurl)),
+ key(NULL),
+ mac(NULL),
+ password(new IoTString(_password)),
+ random(new SecureRandom()),
+ salt(NULL),
+ table(_table),
+ listeningPort(_listeningPort),
+ doEnd(false),
+ timer(TimingSingleton_getInstance()),
+ getslot(new Array<char>("getslot", 7)),
+ putslot(new Array<char>("putslot", 7)) {
+ if (listeningPort > 0) {
+ pthread_create(&localServerThread, NULL, threadWrapper, this);
+ }
+}
+
+CloudComm::~CloudComm() {
+ delete getslot;
+ delete putslot;
+ if (salt)
+ delete salt;
+ if (password)
+ delete password;
+ if (random)
+ delete random;
+ if (baseurl)
+ delete baseurl;
+ if (mac)
+ delete mac;
+ if (key)
+ delete key;
+}
+
+/**
+ * Generates Key from password.
+ */
+AESKey *CloudComm::initKey() {
+ try {
+ AESKey *key = new AESKey(password->internalBytes(),
+ salt,
+ 65536,
+ 128);
+ return key;
+ } catch (Exception *e) {
+ throw new Error("Failed generating key.");
+ }
+}
+
+/**
+ * Inits all the security stuff
+ */
+
+void CloudComm::initSecurity() {
+ // try to get the salt and if one does not exist set one
+ if (!getSalt()) {
+ //Set the salt
+ setSalt();
+ }
+
+ initCrypt();
+}
+
+/**
+ * Inits the HMAC generator.
+ */
+void CloudComm::initCrypt() {
+ if (password == NULL) {
+ return;
+ }
+ try {
+ key = initKey();
+ delete password;
+ password = NULL;// drop password
+ mac = new Mac();
+ mac->init(key);
+ } catch (Exception *e) {
+ throw new Error("Failed To Initialize Ciphers");
+ }
+}
+
+/*
+ * Builds the URL for the given request.
+ */
+IoTString *CloudComm::buildRequest(bool isput, int64_t sequencenumber, int64_t maxentries) {
+ const char *reqstring = isput ? "req=putslot" : "req=getslot";
+ char *buffer = (char *) malloc(baseurl->length() + 200);
+ memcpy(buffer, baseurl->internalBytes()->internalArray(), baseurl->length());
+ int offset = baseurl->length();
+ offset += sprintf(&buffer[offset], "?%s&seq=%" PRId64, reqstring, sequencenumber);
+ if (maxentries != 0)
+ sprintf(&buffer[offset], "&max=%" PRId64, maxentries);
+ IoTString *urlstr = new IoTString(buffer);
+ free(buffer);
+ return urlstr;
+}
+
+void loopWrite(int fd, char *array, int bytestowrite) {
+ int byteswritten = 0;
+ while (bytestowrite) {
+ int bytes = write(fd, &array[byteswritten], bytestowrite);
+ if (bytes >= 0) {
+ byteswritten += bytes;
+ bytestowrite -= bytes;
+ } else {
+ printf("Error in write\n");
+ exit(-1);
+ }
+ }
+}
+
+void loopRead(int fd, char *array, int bytestoread) {
+ int bytesread = 0;
+ while (bytestoread) {
+ int bytes = read(fd, &array[bytesread], bytestoread);
+ if (bytes >= 0) {
+ bytesread += bytes;
+ bytestoread -= bytes;
+ } else {
+ printf("Error in read\n");
+ exit(-1);
+ }
+ }
+}
+
+WebConnection openURL(IoTString *url) {
+ if (url->length() < 7 || memcmp(url->internalBytes()->internalArray(), "http://", 7)) {
+ printf("BOGUS URL\n");
+ exit(-1);
+ }
+ int i = 7;
+ for (; i < url->length(); i++)
+ if (url->get(i) == '/')
+ break;
+
+ if ( i == url->length()) {
+ printf("ERROR in openURL\n");
+ exit(-1);
+ }
+
+ char *host = (char *) malloc(i - 6);
+ memcpy(host, &url->internalBytes()->internalArray()[7], i - 7);
+ host[i - 7] = 0;
+ printf("%s\n", host);
+
+ char *message = (char *)malloc(sizeof("POST HTTP/1.1\r\n") + sizeof("Host: \r\n") + 2 * url->length());
+
+ /* fill in the parameters */
+ int post = sprintf(message,"POST ");
+ /* copy data */
+ memcpy(&message[post], &url->internalBytes()->internalArray()[i], url->length() - i);
+ int endpost = sprintf(&message[post + url->length() - i], " HTTP/1.1\r\n");
+
+ int hostlen = sprintf(&message[endpost + post + url->length() - i], "Host: ");
+ memcpy(&message[endpost + post + url->length() + hostlen - i], host, i - 7);
+ sprintf(&message[endpost + post + url->length() + hostlen - 7], "\r\n");
+
+ /* create the socket */
+ int sockfd = socket(AF_INET, SOCK_STREAM, 0);
+ if (sockfd < 0) {printf("ERROR opening socket\n"); exit(-1);}
+
+ /* lookup the ip address */
+ struct hostent *server = gethostbyname(host);
+ free(host);
+
+ if (server == NULL) {printf("ERROR, no such host"); exit(-1);}
+
+ /* fill in the structure */
+ struct sockaddr_in serv_addr;
+
+ memset(&serv_addr,0,sizeof(serv_addr));
+ serv_addr.sin_family = AF_INET;
+ serv_addr.sin_port = htons(80);
+ memcpy(&serv_addr.sin_addr.s_addr,server->h_addr,server->h_length);
+
+ /* connect the socket */
+ if (connect(sockfd,(struct sockaddr *)&serv_addr,sizeof(serv_addr)) < 0) {
+ printf("ERROR connecting");
+ exit(-1);
+ }
+
+ /* send the request */
+ int total = strlen(message);
+ loopWrite(sockfd, message, total);
+ free(message);
+ return (WebConnection) {sockfd, -1};
+}
+
+int createSocket(IoTString *name, int port) {
+ char *host = (char *) malloc(name->length() + 1);
+ memcpy(host, name->internalBytes()->internalArray(), name->length());
+ host[name->length()] = 0;
+ printf("%s\n", host);
+ /* How big is the message? */
+
+ /* create the socket */
+ int sockfd = socket(AF_INET, SOCK_STREAM, 0);
+ if (sockfd < 0) {printf("ERROR opening socket\n"); exit(-1);}
+
+ /* lookup the ip address */
+ struct hostent *server = gethostbyname(host);
+ free(host);
+
+ if (server == NULL) {printf("ERROR, no such host"); exit(-1);}
+
+ /* fill in the structure */
+ struct sockaddr_in serv_addr;
+
+ memset(&serv_addr,0,sizeof(serv_addr));
+ serv_addr.sin_family = AF_INET;
+ serv_addr.sin_port = htons(port);
+ memcpy(&serv_addr.sin_addr.s_addr,server->h_addr,server->h_length);
+
+ /* connect the socket */
+ if (connect(sockfd,(struct sockaddr *)&serv_addr,sizeof(serv_addr)) < 0) {
+ printf("ERROR connecting");
+ exit(-1);
+ }
+
+ return sockfd;
+}
+
+int createSocket(int port) {
+ int fd;
+ struct sockaddr_in sin;
+
+ bzero(&sin, sizeof(sin));
+ sin.sin_family = AF_INET;
+ sin.sin_port = htons(port);
+ sin.sin_addr.s_addr = htonl(INADDR_ANY);
+ fd = socket(AF_INET, SOCK_STREAM, 0);
+ int n = 1;
+ if (setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, (char *)&n, sizeof (n)) < 0) {
+ close(fd);
+ printf("Create Socket Error\n");
+ exit(-1);
+ }
+ if (bind(fd, (struct sockaddr *) &sin, sizeof(sin)) < 0) {
+ close(fd);
+ exit(-1);
+ }
+ if (listen(fd, 5) < 0) {
+ close(fd);
+ exit(-1);
+ }
+ return fd;
+}
+
+int acceptSocket(int socket) {
+ struct sockaddr_in sin;
+ unsigned int sinlen = sizeof(sin);
+ int newfd = accept(socket, (struct sockaddr *)&sin, &sinlen);
+ int flag = 1;
+ setsockopt(newfd, IPPROTO_TCP, TCP_NODELAY, (char *) &flag, sizeof(flag));
+ if (newfd < 0) {
+ printf("Accept Error\n");
+ exit(-1);
+ }
+ return newfd;
+}
+
+void writeSocketData(int fd, Array<char> *data) {
+ loopWrite(fd, data->internalArray(), data->length());
+}
+
+void writeSocketInt(int fd, int32_t value) {
+ char array[4];
+ array[0] = value >> 24;
+ array[1] = (value >> 16) & 0xff;
+ array[2] = (value >> 8) & 0xff;
+ array[3] = value & 0xff;
+ loopWrite(fd, array, 4);
+}
+
+int readSocketInt(int fd) {
+ char array[4];
+ loopRead(fd, array, 4);
+ return (((int32_t)(unsigned char) array[0]) << 24) |
+ (((int32_t)(unsigned char) array[1]) << 16) |
+ (((int32_t)(unsigned char) array[2]) << 8) |
+ ((int32_t)(unsigned char) array[3]);
+}
+
+void readSocketData(int fd, Array<char> *data) {
+ loopRead(fd, data->internalArray(), data->length());
+}
+
+void writeURLDataAndClose(WebConnection *wc, Array<char> *data) {
+ dprintf(wc->fd, "Content-Length: %d\r\n\r\n", data->length());
+ loopWrite(wc->fd, data->internalArray(), data->length());
+}
+
+void closeURLReq(WebConnection *wc) {
+ dprintf(wc->fd, "\r\n");
+}
+
+void readURLData(WebConnection *wc, Array<char> *output) {
+ loopRead(wc->fd, output->internalArray(), output->length());
+}
+
+int readURLInt(WebConnection *wc) {
+ char array[4];
+ loopRead(wc->fd, array, 4);
+ return (((int32_t)(unsigned char) array[0]) << 24) |
+ (((int32_t)(unsigned char) array[1]) << 16) |
+ (((int32_t)(unsigned char) array[2]) << 8) |
+ ((int32_t)(unsigned char) array[3]);
+}
+
+void readLine(WebConnection *wc, char *response, int numBytes) {
+ int offset = 0;
+ char newchar;
+ while (true) {
+ int bytes = read(wc->fd, &newchar, 1);
+ if (bytes <= 0)
+ break;
+ if (offset == (numBytes - 1)) {
+ printf("Response too long");
+ exit(-1);
+ }
+ response[offset++] = newchar;
+ if (newchar == '\n')
+ break;
+ }
+ response[offset] = 0;
+}
+
+int getResponseCode(WebConnection *wc) {
+ char response[600];
+ readLine(wc, response, sizeof(response));
+ int ver1 = 0, ver2 = 0, respcode = 0;
+ sscanf(response, "HTTP/%d.%d %d", &ver1, &ver2, &respcode);
+ printf("Response code %d\n", respcode);
+ return respcode;
+}
+
+void readHeaders(WebConnection *wc) {
+ char response[600];
+ int numBytes;
+
+ while (true) {
+ readLine(wc, response, sizeof(response));
+ if (response[0] == '\r')
+ return;
+ else if (memcmp(response, "Content-Length:", sizeof("Content-Length:") - 1) == 0) {
+ sscanf(response, "Content-Length: %d", &numBytes);
+ wc->numBytes = numBytes;
+ }
+ }
+}
+
+void CloudComm::setSalt() {
+ if (salt != NULL) {
+ // Salt already sent to server so don't set it again
+ return;
+ }
+
+ WebConnection wc = {-1, -1};
+ try {
+ Array<char> *saltTmp = new Array<char>(CloudComm_SALT_SIZE);
+ random->nextBytes(saltTmp);
+
+ char *buffer = (char *) malloc(baseurl->length() + 100);
+ memcpy(buffer, baseurl->internalBytes()->internalArray(), baseurl->length());
+ int offset = baseurl->length();
+ offset += sprintf(&buffer[offset], "?req=setsalt");
+ IoTString *urlstr = new IoTString(buffer);
+ free(buffer);
+
+ timer->startTime();
+ wc = openURL(urlstr);
+ delete urlstr;
+ writeURLDataAndClose(&wc, saltTmp);
+
+ int responsecode = getResponseCode(&wc);
+ if (responsecode != HttpURLConnection_HTTP_OK) {
+ throw new Error("Invalid response");
+ }
+ close(wc.fd);
+
+ timer->endTime();
+ salt = saltTmp;
+ } catch (Exception *e) {
+ timer->endTime();
+ throw new ServerException("Failed setting salt", ServerException_TypeConnectTimeout);
+ }
+}
+
+bool CloudComm::getSalt() {
+ WebConnection wc = {-1, -1};
+ IoTString *urlstr = NULL;
+
+ try {
+ char *buffer = (char *) malloc(baseurl->length() + 100);
+ memcpy(buffer, baseurl->internalBytes()->internalArray(), baseurl->length());
+ int offset = baseurl->length();
+ offset += sprintf(&buffer[offset], "?req=getsalt");
+ urlstr = new IoTString(buffer);
+ free(buffer);
+ } catch (Exception *e) {
+ throw new Error("getSlot failed");
+ }
+ try {
+ timer->startTime();
+ wc = openURL(urlstr);
+ delete urlstr;
+ urlstr = NULL;
+ closeURLReq(&wc);
+ timer->endTime();
+ } catch (SocketTimeoutException *e) {
+ if (urlstr)
+ delete urlstr;
+ timer->endTime();
+ throw new ServerException("getSalt failed", ServerException_TypeConnectTimeout);
+ } catch (Exception *e) {
+ if (urlstr)
+ delete urlstr;
+ throw new Error("getSlot failed");
+ }
+
+ try {
+ timer->startTime();
+ int responsecode = getResponseCode(&wc);
+ readHeaders(&wc);
+ if (responsecode != HttpURLConnection_HTTP_OK) {
+ throw new Error("Invalid response");
+ }
+ if (wc.numBytes == 0) {
+ timer->endTime();
+ close(wc.fd);
+ return false;
+ }
+
+
+ int salt_length = readURLInt(&wc);
+ Array<char> *tmp = new Array<char>(salt_length);
+ readURLData(&wc, tmp);
+ close(wc.fd);
+
+ salt = tmp;
+ timer->endTime();
+ return true;
+ } catch (SocketTimeoutException *e) {
+ timer->endTime();
+ throw new ServerException("getSalt failed", ServerException_TypeInputTimeout);
+ } catch (Exception *e) {
+ throw new Error("getSlot failed");
+ }
+}
+
+Array<char> *CloudComm::createIV(int64_t machineId, int64_t localSequenceNumber) {
+ ByteBuffer *buffer = ByteBuffer_allocate(CloudComm_IV_SIZE);
+ buffer->putLong(machineId);
+ int64_t localSequenceNumberShifted = localSequenceNumber << 16;
+ buffer->putLong(localSequenceNumberShifted);
+ return buffer->array();
+}
+
+Array<char> *AESEncrypt(Array<char> *ivBytes, AESKey *key, Array<char> *data) {
+ Array<char> *output = new Array<char>(data->length());
+ aes_encrypt_ctr((BYTE *)data->internalArray(), data->length(), (BYTE *) output->internalArray(), (WORD *)key->getKeySchedule(), key->getKey()->length() * 8, (BYTE *)ivBytes->internalArray());
+ return output;
+}
+
+Array<char> *AESDecrypt(Array<char> *ivBytes, AESKey *key, Array<char> *data) {
+ Array<char> *output = new Array<char>(data->length());
+ aes_decrypt_ctr((BYTE *)data->internalArray(), data->length(), (BYTE *)output->internalArray(), (WORD *)key->getKeySchedule(), key->getKey()->length() * 8, (BYTE *)ivBytes->internalArray());
+ return output;
+}
+
+Array<char> *CloudComm::encryptSlotAndPrependIV(Array<char> *rawData, Array<char> *ivBytes) {
+ try {
+ Array<char> *encryptedBytes = AESEncrypt(ivBytes, key, rawData);
+ Array<char> *chars = new Array<char>(encryptedBytes->length() + CloudComm_IV_SIZE);
+ System_arraycopy(ivBytes, 0, chars, 0, ivBytes->length());
+ System_arraycopy(encryptedBytes, 0, chars, CloudComm_IV_SIZE, encryptedBytes->length());
+ delete encryptedBytes;
+ return chars;
+ } catch (Exception *e) {
+ throw new Error("Failed To Encrypt");
+ }
+}
+
+Array<char> *CloudComm::stripIVAndDecryptSlot(Array<char> *rawData) {
+ try {
+ Array<char> *ivBytes = new Array<char>(CloudComm_IV_SIZE);
+ Array<char> *encryptedBytes = new Array<char>(rawData->length() - CloudComm_IV_SIZE);
+ System_arraycopy(rawData, 0, ivBytes, 0, CloudComm_IV_SIZE);
+ System_arraycopy(rawData, CloudComm_IV_SIZE, encryptedBytes, 0, encryptedBytes->length());
+ Array<char> * data = AESDecrypt(ivBytes, key, encryptedBytes);
+ delete encryptedBytes;
+ delete ivBytes;
+ return data;
+ } catch (Exception *e) {
+ throw new Error("Failed To Decrypt");
+ }
+}
+
+/*
+ * API for putting a slot into the queue. Returns NULL on success.
+ * On failure, the server will send slots with newer sequence
+ * numbers.
+ */
+Array<Slot *> *CloudComm::putSlot(Slot *slot, int max) {
+ WebConnection wc = {-1, -1};
+ try {
+ if (salt == NULL) {
+ if (!getSalt()) {
+ throw new ServerException("putSlot failed", ServerException_TypeSalt);
+ }
+ initCrypt();
+ }
+
+ int64_t sequencenumber = slot->getSequenceNumber();
+ Array<char> *slotBytes = slot->encode(mac);
+ Array<char> * ivBytes = slot->getSlotCryptIV();
+ Array<char> *chars = encryptSlotAndPrependIV(slotBytes, ivBytes);
+ delete ivBytes;
+ delete slotBytes;
+ IoTString *url = buildRequest(true, sequencenumber, max);
+ timer->startTime();
+ wc = openURL(url);
+ delete url;
+ writeURLDataAndClose(&wc, chars);
+ delete chars;
+ timer->endTime();
+ } catch (ServerException *e) {
+ timer->endTime();
+ throw e;
+ } catch (SocketTimeoutException *e) {
+ timer->endTime();
+ throw new ServerException("putSlot failed", ServerException_TypeConnectTimeout);
+ } catch (Exception *e) {
+ throw new Error("putSlot failed");
+ }
+
+ Array<char> *resptype = NULL;
+ try {
+ int respcode = getResponseCode(&wc);
+ readHeaders(&wc);
+ timer->startTime();
+ resptype = new Array<char>(7);
+ readURLData(&wc, resptype);
+ timer->endTime();
+
+ if (resptype->equals(getslot)) {
+ delete resptype;
+ Array<Slot *> *tmp = processSlots(&wc);
+ close(wc.fd);
+ return tmp;
+ } else if (resptype->equals(putslot)) {
+ delete resptype;
+ close(wc.fd);
+ return NULL;
+ } else {
+ delete resptype;
+ close(wc.fd);
+ throw new Error("Bad response to putslot");
+ }
+ } catch (SocketTimeoutException *e) {
+ if (resptype != NULL)
+ delete resptype;
+ timer->endTime();
+ close(wc.fd);
+ throw new ServerException("putSlot failed", ServerException_TypeInputTimeout);
+ } catch (Exception *e) {
+ if (resptype != NULL)
+ delete resptype;
+ throw new Error("putSlot failed");
+ }
+}
+
+/**
+ * Request the server to send all slots with the given
+ * sequencenumber or newer->
+ */
+Array<Slot *> *CloudComm::getSlots(int64_t sequencenumber) {
+ WebConnection wc = {-1, -1};
+ try {
+ if (salt == NULL) {
+ if (!getSalt()) {
+ throw new ServerException("getSlots failed", ServerException_TypeSalt);
+ }
+ initCrypt();
+ }
+
+ IoTString *url = buildRequest(false, sequencenumber, 0);
+ timer->startTime();
+ wc = openURL(url);
+ delete url;
+ closeURLReq(&wc);
+ timer->endTime();
+ } catch (SocketTimeoutException *e) {
+ timer->endTime();
+ throw new ServerException("getSlots failed", ServerException_TypeConnectTimeout);
+ } catch (ServerException *e) {
+ timer->endTime();
+
+ throw e;
+ } catch (Exception *e) {
+ throw new Error("getSlots failed");
+ }
+
+ try {
+ timer->startTime();
+ int responsecode = getResponseCode(&wc);
+ readHeaders(&wc);
+ Array<char> *resptype = new Array<char>(7);
+ readURLData(&wc, resptype);
+ timer->endTime();
+ if (!resptype->equals(getslot))
+ throw new Error("Bad Response: ");
+
+ delete resptype;
+ Array<Slot *> *tmp = processSlots(&wc);
+ close(wc.fd);
+ return tmp;
+ } catch (SocketTimeoutException *e) {
+ timer->endTime();
+ close(wc.fd);
+ throw new ServerException("getSlots failed", ServerException_TypeInputTimeout);
+ } catch (Exception *e) {
+ throw new Error("getSlots failed");
+ }
+}
+
+/**
+ * Method that actually handles building Slot objects from the
+ * server response. Shared by both putSlot and getSlots.
+ */
+Array<Slot *> *CloudComm::processSlots(WebConnection *wc) {
+ int numberofslots = readURLInt(wc);
+ Array<int> *sizesofslots = new Array<int>(numberofslots);
+ Array<Slot *> *slots = new Array<Slot *>(numberofslots);
+
+ for (int i = 0; i < numberofslots; i++)
+ sizesofslots->set(i, readURLInt(wc));
+ for (int i = 0; i < numberofslots; i++) {
+ Array<char> *rawData = new Array<char>(sizesofslots->get(i));
+ readURLData(wc, rawData);
+ Array<char> *data = stripIVAndDecryptSlot(rawData);
+ delete rawData;
+ slots->set(i, Slot_decode(table, data, mac));
+ delete data;
+ }
+ delete sizesofslots;
+ return slots;
+}
+
+Array<char> *CloudComm::sendLocalData(Array<char> *sendData, int64_t localSequenceNumber, IoTString *host, int port) {
+ if (salt == NULL)
+ return NULL;
+ try {
+ printf("Passing Locally\n");
+ mac->update(sendData, 0, sendData->length());
+ Array<char> *genmac = mac->doFinal();
+ Array<char> *totalData = new Array<char>(sendData->length() + genmac->length());
+ System_arraycopy(sendData, 0, totalData, 0, sendData->length());
+ System_arraycopy(genmac, 0, totalData, sendData->length(), genmac->length());
+
+ // Encrypt the data for sending
+ Array<char> *iv = createIV(table->getMachineId(), table->getLocalSequenceNumber());
+ Array<char> *encryptedData = encryptSlotAndPrependIV(totalData, iv);
+
+ // Open a TCP socket connection to a local device
+ int socket = createSocket(host, port);
+
+ timer->startTime();
+ // Send data to output (length of data, the data)
+ writeSocketInt(socket, encryptedData->length());
+ writeSocketData(socket, encryptedData);
+
+ int lengthOfReturnData = readSocketInt(socket);
+ Array<char> *returnData = new Array<char>(lengthOfReturnData);
+ readSocketData(socket, returnData);
+ timer->endTime();
+ returnData = stripIVAndDecryptSlot(returnData);
+
+ // We are done with this socket
+ close(socket);
+ mac->update(returnData, 0, returnData->length() - CloudComm_HMAC_SIZE);
+ Array<char> *realmac = mac->doFinal();
+ Array<char> *recmac = new Array<char>(CloudComm_HMAC_SIZE);
+ System_arraycopy(returnData, returnData->length() - realmac->length(), recmac, 0, realmac->length());
+
+ if (!recmac->equals(realmac))
+ throw new Error("Local Error: Invalid HMAC! Potential Attack!");
+
+ Array<char> *returnData2 = new Array<char>(lengthOfReturnData - recmac->length());
+ System_arraycopy(returnData, 0, returnData2, 0, returnData2->length());
+
+ return returnData2;
+ } catch (Exception *e) {
+ printf("Exception\n");
+ }
+
+ return NULL;
+}
+
+void CloudComm::localServerWorkerFunction() {
+ int inputSocket = -1;
+
+ try {
+ // Local server socket
+ inputSocket = createSocket(listeningPort);
+ } catch (Exception *e) {
+ throw new Error("Local server setup failure...");
+ }
+
+ while (!doEnd) {
+ try {
+ // Accept incoming socket
+ int socket = acceptSocket(inputSocket);
+
+ // Get the encrypted data from the server
+ int dataSize = readSocketInt(socket);
+ Array<char> *readData = new Array<char>(dataSize);
+ readSocketData(socket, readData);
+ timer->endTime();
+
+ // Decrypt the data
+ readData = stripIVAndDecryptSlot(readData);
+ mac->update(readData, 0, readData->length() - CloudComm_HMAC_SIZE);
+ Array<char> *genmac = mac->doFinal();
+ Array<char> *recmac = new Array<char>(CloudComm_HMAC_SIZE);
+ System_arraycopy(readData, readData->length() - recmac->length(), recmac, 0, recmac->length());
+
+ if (!recmac->equals(genmac))
+ throw new Error("Local Error: Invalid HMAC! Potential Attack!");
+
+ Array<char> *returnData = new Array<char>(readData->length() - recmac->length());
+ System_arraycopy(readData, 0, returnData, 0, returnData->length());
+
+ // Process the data
+ Array<char> *sendData = table->acceptDataFromLocal(returnData);
+ mac->update(sendData, 0, sendData->length());
+ Array<char> *realmac = mac->doFinal();
+ Array<char> *totalData = new Array<char>(sendData->length() + realmac->length());
+ System_arraycopy(sendData, 0, totalData, 0, sendData->length());
+ System_arraycopy(realmac, 0, totalData, sendData->length(), realmac->length());
+
+ // Encrypt the data for sending
+ Array<char> *iv = createIV(table->getMachineId(), table->getLocalSequenceNumber());
+ Array<char> *encryptedData = encryptSlotAndPrependIV(totalData, iv);
+
+ timer->startTime();
+ // Send data to output (length of data, the data)
+ writeSocketInt(socket, encryptedData->length());
+ writeSocketData(socket, encryptedData);
+ close(socket);
+ } catch (Exception *e) {
+ }
+ }
+
+ if (inputSocket != -1) {
+ try {
+ close(inputSocket);
+ } catch (Exception *e) {
+ throw new Error("Local server close failure...");
+ }
+ }
+}
+
+void CloudComm::closeCloud() {
+ doEnd = true;
+
+ if (listeningPort > 0) {
+ if (pthread_join(localServerThread, NULL) != 0)
+ throw new Error("Local Server thread join issue...");
+ }
+}
projects / iotcloud.git / blobdiff