118 lines
3.8 KiB
Swift
118 lines
3.8 KiB
Swift
import Foundation
|
|
import SecretKit
|
|
import CryptoKit
|
|
|
|
struct Stub {}
|
|
|
|
extension Stub {
|
|
|
|
public class Store: SecretStore {
|
|
|
|
public let isAvailable = true
|
|
public let id = UUID()
|
|
public let name = "Stub"
|
|
public var secrets: [Secret] = []
|
|
public var shouldThrow = false
|
|
|
|
public init() {
|
|
// try! create(size: 256)
|
|
// try! create(size: 384)
|
|
}
|
|
|
|
public func create(size: Int) throws {
|
|
let flags: SecAccessControlCreateFlags = []
|
|
let access =
|
|
SecAccessControlCreateWithFlags(kCFAllocatorDefault,
|
|
kSecAttrAccessibleWhenUnlockedThisDeviceOnly,
|
|
flags,
|
|
nil) as Any
|
|
|
|
let attributes = [
|
|
kSecAttrLabel: name,
|
|
kSecAttrKeyType: kSecAttrKeyTypeECSECPrimeRandom,
|
|
kSecAttrKeySizeInBits: size,
|
|
kSecPrivateKeyAttrs: [
|
|
kSecAttrIsPermanent: true,
|
|
kSecAttrAccessControl: access
|
|
]
|
|
] as CFDictionary
|
|
|
|
var privateKey: SecKey! = nil
|
|
var publicKey: SecKey! = nil
|
|
SecKeyGeneratePair(attributes, &publicKey, &privateKey)
|
|
let publicAttributes = SecKeyCopyAttributes(publicKey) as! [CFString: Any]
|
|
let privateAttributes = SecKeyCopyAttributes(privateKey) as! [CFString: Any]
|
|
let publicData = (publicAttributes[kSecValueData] as! Data)
|
|
let privateData = (privateAttributes[kSecValueData] as! Data)
|
|
let secret = Secret(keySize: size, publicKey: publicData, privateKey: privateData)
|
|
print(secret)
|
|
print("Public Key OpenSSH: \(OpenSSHKeyWriter().openSSHString(secret: secret))")
|
|
}
|
|
|
|
public func sign(data: Data, with secret: Secret, for provenance: SigningRequestProvenance) throws -> SignedData {
|
|
guard !shouldThrow else {
|
|
throw NSError(domain: "test", code: 0, userInfo: nil)
|
|
}
|
|
let privateKey = SecKeyCreateWithData(secret.privateKey as CFData, [
|
|
kSecAttrKeyType: kSecAttrKeyTypeECSECPrimeRandom,
|
|
kSecAttrKeySizeInBits: secret.keySize,
|
|
kSecAttrKeyClass: kSecAttrKeyClassPrivate
|
|
] as CFDictionary
|
|
, nil)!
|
|
let signatureAlgorithm: SecKeyAlgorithm
|
|
switch secret.keySize {
|
|
case 256:
|
|
signatureAlgorithm = .ecdsaSignatureMessageX962SHA256
|
|
case 384:
|
|
signatureAlgorithm = .ecdsaSignatureMessageX962SHA384
|
|
default:
|
|
fatalError()
|
|
}
|
|
return SignedData(data: SecKeyCreateSignature(privateKey, signatureAlgorithm, data as CFData, nil)! as Data, requiredAuthentication: false)
|
|
}
|
|
|
|
public func persistAuthentication(secret: Stub.Secret, forDuration duration: TimeInterval) throws {
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
extension Stub {
|
|
|
|
struct Secret: SecretKit.Secret, CustomDebugStringConvertible {
|
|
|
|
let id = UUID().uuidString.data(using: .utf8)!
|
|
let name = UUID().uuidString
|
|
let algorithm = Algorithm.ellipticCurve
|
|
|
|
let keySize: Int
|
|
let publicKey: Data
|
|
let privateKey: Data
|
|
|
|
init(keySize: Int, publicKey: Data, privateKey: Data) {
|
|
self.keySize = keySize
|
|
self.publicKey = publicKey
|
|
self.privateKey = privateKey
|
|
}
|
|
|
|
var debugDescription: String {
|
|
"""
|
|
Key Size \(keySize)
|
|
Private: \(privateKey.base64EncodedString())
|
|
Public: \(publicKey.base64EncodedString())
|
|
"""
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
extension Stub.Store {
|
|
|
|
struct StubError: Error {
|
|
}
|
|
|
|
}
|