DwmAuthPeerAuthenticator.hh

Go to the documentation of this file.

//===========================================================================
// @(#) $Name:$
// @(#) $Id: DwmAuthPeerAuthenticator.hh 8996 2017-04-10 05:49:58Z dwm $
//===========================================================================
//  Copyright (c) Daniel W. McRobb 2017
//  All rights reserved.
//
//  Redistribution and use in source and binary forms, with or without
//  modification, are permitted provided that the following conditions
//  are met:
//
//  1. Redistributions of source code must retain the above copyright
//     notice, this list of conditions and the following disclaimer.
//  2. Redistributions in binary form must reproduce the above copyright
//     notice, this list of conditions and the following disclaimer in the
//     documentation and/or other materials provided with the distribution.
//  3. The names of the authors and copyright holders may not be used to
//     endorse or promote products derived from this software without
//     specific prior written permission.
//
//  IN NO EVENT SHALL DANIEL W. MCROBB BE LIABLE TO ANY PARTY FOR
//  DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES,
//  INCLUDING LOST PROFITS, ARISING OUT OF THE USE OF THIS SOFTWARE,
//  EVEN IF DANIEL W. MCROBB HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH
//  DAMAGE.
//
//  THE SOFTWARE PROVIDED HEREIN IS ON AN "AS IS" BASIS, AND
//  DANIEL W. MCROBB HAS NO OBLIGATION TO PROVIDE MAINTENANCE, SUPPORT,
//  UPDATES, ENHANCEMENTS, OR MODIFICATIONS. DANIEL W. MCROBB MAKES NO
//  REPRESENTATIONS AND EXTENDS NO WARRANTIES OF ANY KIND, EITHER
//  IMPLIED OR EXPRESS, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
//  WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE,
//  OR THAT THE USE OF THIS SOFTWARE WILL NOT INFRINGE ANY PATENT,
//  TRADEMARK OR OTHER RIGHTS.
//===========================================================================

//---------------------------------------------------------------------------
//---------------------------------------------------------------------------

#ifndef _DWMAUTHPEERAUTHENTICATOR_HH_
#define _DWMAUTHPEERAUTHENTICATOR_HH_

#include <string>

#include "DwmAuthPublicKeysFile.hh"
#include "DwmAuthECDHAgreement.hh"
#include "DwmAuthPKCrypto.hh"

namespace Dwm {

  namespace Auth {

    //------------------------------------------------------------------------
    //------------------------------------------------------------------------
    class PeerAuthenticator
    {
    public:
      //----------------------------------------------------------------------
      //----------------------------------------------------------------------
      PeerAuthenticator(const std::string & myPrivKeyPath,
                        const std::string & pubKeysPath);
      
      //----------------------------------------------------------------------
      //----------------------------------------------------------------------
      bool Authenticate(int fd, std::string & theirId,
                        std::string & agreedKey);

    private:
      std::string  _myPrivKeyPath;
      std::string  _pubKeysPath;
      
      bool ECExchange(int fd, Auth::ECDHAgreement & agreement);
      std::string
      BuildIDAndSignature(const std::string & myId,
                          const PKCrypto::PrivateKey & myPrivRSAKey,
                          const ECDHAgreement & agreement);
      bool IDAndSigExchange(int fd, const std::string & myId,
                            const PKCrypto::PrivateKey & myPrivRSAKey,
                            const ECDHAgreement & agreement,
                            std::string & theirId,
                            std::string & theirIdCrypted,
                            std::string & theirSig);
    };
    
  }  // namespace Auth

}  // namespace Dwm

#endif  // _DWMAUTHPEERAUTHENTICATOR_HH_