[WIP] Signatures and encryption: Preliminary work

.flowconfig

@@ -11,7 +11,7 @@
 .*/frontend/assets/.*
 .*/frontend/controller/service-worker.js
 .*/frontend/utils/blockies.js
-.*/frontend/utils/crypto.js
+#.*/frontend/utils/crypto.js
 .*/frontend/utils/flowTyper.js
 .*/frontend/utils/vuexQueue.js
 .*/historical/.*

backend/database.js

@@ -37,7 +37,7 @@ export default (sbp('sbp/selectors/register', {
           const json = `"${strToB64(entry.serialize())}"`
           if (currentHEAD !== hash) {
             this.push(prefix + json)
-            currentHEAD = entry.message().previousHEAD
+            currentHEAD = entry.head().previousHEAD
             prefix = ','
           } else {
             this.push(prefix + json + ']')

frontend/controller/actions/chatroom.js

@@ -1,18 +1,84 @@
 'use strict'
 import sbp from '@sbp/sbp'
+import { CURVE25519XSALSA20POLY1305, EDWARDS25519SHA512BATCH, keyId, keygen, serializeKey, encrypt } from '~/shared/domains/chelonia/crypto.js'
 import L from '@view-utils/translations.js'
 import { GIErrorUIRuntimeError } from '@model/errors.js'
 import { omit } from '~/frontend/utils/giLodash.js'
 import { encryptedAction } from './utils.js'
+import { GIMessage } from '~/shared/domains/chelonia/GIMessage.js'
 import type { GIRegParams } from './types.js'
 
 export default (sbp('sbp/selectors/register', {
   'gi.actions/chatroom/create': async function (params: GIRegParams) {
     try {
-      return await sbp('chelonia/out/registerContract', {
+      // Create the necessary keys to initialise the contract
+      // eslint-disable-next-line camelcase
+      const CSK = keygen(EDWARDS25519SHA512BATCH)
+      const CEK = keygen(CURVE25519XSALSA20POLY1305)
+
+      // Key IDs
+      const CSKid = keyId(CSK)
+      const CEKid = keyId(CEK)
+
+      // Public keys to be stored in the contract
+      const CSKp = serializeKey(CSK, false)
+      const CEKp = serializeKey(CEK, false)
+
+      // Secret keys to be stored encrypted in the contract
+      const CSKs = encrypt(CEK, serializeKey(CSK, true))
+      const CEKs = encrypt(CEK, serializeKey(CEK, true))
+
+      const rootState = sbp('state/vuex/state')
+
+      const chatroom = await sbp('chelonia/with-env', '', {
+        additionalKeys: {
+          [CSKid]: CSK,
+          [CEKid]: CEK
+        }
+      }, ['chelonia/out/registerContract', {
         ...omit(params, ['options']), // any 'options' are for this action, not for Chelonia
+        signingKeyId: CSKid,
+        actionSigningKeyId: CSKid,
+        actionEncryptionKeyId: CEKid,
+        keys: [
+          {
+            id: CSKid,
+            type: CSK.type,
+            data: CSKp,
+            permissions: [GIMessage.OP_CONTRACT, GIMessage.OP_KEY_ADD, GIMessage.OP_KEY_DEL, GIMessage.OP_ACTION_UNENCRYPTED, GIMessage.OP_ACTION_ENCRYPTED, GIMessage.OP_ATOMIC, GIMessage.OP_CONTRACT_AUTH, GIMessage.OP_CONTRACT_DEAUTH],
+            meta: {
+              type: 'csk',
+              private: {
+                keyId: CEKid,
+                content: CSKs
+              }
+            }
+          },
+          {
+            id: CEKid,
+            type: CEK.type,
+            data: CEKp,
+            permissions: [GIMessage.OP_ACTION_ENCRYPTED],
+            meta: {
+              type: 'cek',
+              private: {
+                keyId: CEKid,
+                content: CEKs
+              }
+            }
+          }
+        ],
         contractName: 'gi.contracts/chatroom'
-      })
+      }])
+
+      const contractID = chatroom.contractID()
+
+      await sbp('chelonia/with-env', contractID, { additionalKeys: { [CEKid]: CEK } }, ['chelonia/contract/sync', contractID])
+
+      const userID = rootState.loggedIn.identityContractID
+      await sbp('gi.actions/identity/shareKeysWithSelf', { userID, contractID })
+
+      return chatroom
     } catch (e) {
       console.error('gi.actions/chatroom/register failed!', e)
       throw new GIErrorUIRuntimeError(L('Failed to create chat channel.'))

frontend/controller/actions/group.js

@@ -1,6 +1,7 @@
 'use strict'
 
 import sbp from '@sbp/sbp'
+import { CURVE25519XSALSA20POLY1305, EDWARDS25519SHA512BATCH, keyId, keygen, serializeKey, encrypt } from '~/shared/domains/chelonia/crypto.js'
 import { createInvite } from '@model/contracts/group.js'
 import {
   INVITE_INITIAL_CREATOR,
@@ -80,6 +81,25 @@ export default (sbp('sbp/selectors/register', {
       }
     }
 
+    // Create the necessary keys to initialise the contract
+    // eslint-disable-next-line camelcase
+    const CSK = keygen(EDWARDS25519SHA512BATCH)
+    const CEK = keygen(CURVE25519XSALSA20POLY1305)
+
+    // Key IDs
+    const CSKid = keyId(CSK)
+    const CEKid = keyId(CEK)
+
+    // Public keys to be stored in the contract
+    const CSKp = serializeKey(CSK, false)
+    const CEKp = serializeKey(CEK, false)
+
+    // Secret keys to be stored encrypted in the contract
+    const CSKs = encrypt(CEK, serializeKey(CSK, true))
+    const CEKs = encrypt(CEK, serializeKey(CEK, true))
+
+    const rootState = sbp('state/vuex/state')
+
     try {
       const initialInvite = createInvite({ quantity: 60, creator: INVITE_INITIAL_CREATOR })
       const proposalSettings = {
@@ -97,9 +117,45 @@ export default (sbp('sbp/selectors/register', {
         // handle Flowtype annotations, even though our .babelrc should make it work.
         distributionDate = dateToPeriodStamp(addTimeToDate(new Date(), 3 * DAYS_MILLIS))
       }
-      const message = await sbp('chelonia/out/registerContract', {
+      const message = await sbp('chelonia/with-env', '', {
+        additionalKeys: {
+          [CSKid]: CSK,
+          [CEKid]: CEK
+        }
+      }, ['chelonia/out/registerContract', {
         contractName: 'gi.contracts/group',
         publishOptions,
+        signingKeyId: CSKid,
+        actionSigningKeyId: CSKid,
+        actionEncryptionKeyId: CEKid,
+        keys: [
+          {
+            id: CSKid,
+            type: CSK.type,
+            data: CSKp,
+            permissions: [GIMessage.OP_CONTRACT, GIMessage.OP_KEY_ADD, GIMessage.OP_KEY_DEL, GIMessage.OP_ACTION_UNENCRYPTED, GIMessage.OP_ACTION_ENCRYPTED, GIMessage.OP_ATOMIC, GIMessage.OP_CONTRACT_AUTH, GIMessage.OP_CONTRACT_DEAUTH],
+            meta: {
+              type: 'csk',
+              private: {
+                keyId: CEKid,
+                content: CSKs
+              }
+            }
+          },
+          {
+            id: CEKid,
+            type: CEK.type,
+            data: CEKp,
+            permissions: [GIMessage.OP_ACTION_ENCRYPTED, GIMessage.OP_KEYSHARE],
+            meta: {
+              type: 'cek',
+              private: {
+                keyId: CEKid,
+                content: CEKs
+              }
+            }
+          }
+        ],
         data: {
           invites: {
             [initialInvite.inviteSecret]: initialInvite
@@ -137,23 +193,30 @@ export default (sbp('sbp/selectors/register', {
             }
           }
         }
-      })
+      }])
+
+      const contractID = message.contractID()
 
-      await sbp('chelonia/contract/sync', message.contractID())
-      saveLoginState('creating', message.contractID())
+      await sbp('chelonia/with-env', contractID, { additionalKeys: { [CEKid]: CEK } }, ['chelonia/contract/sync', contractID])
+      saveLoginState('creating', contractID)
 
       // create a 'General' chatroom contract and let the creator join
-      await sbp('gi.actions/group/addAndJoinChatRoom', {
-        contractID: message.contractID(),
+      await sbp('chelonia/with-env', contractID, { additionalKeys: { [CEKid]: CEK } }, ['gi.actions/group/addAndJoinChatRoom', {
+        contractID,
         data: {
           attributes: {
             name: CHATROOM_GENERAL_NAME,
             type: CHATROOM_TYPES.GROUP,
             description: '',
             privacyLevel: CHATROOM_PRIVACY_LEVEL.GROUP
           }
-        }
-      })
+        },
+        signingKeyId: CSKid,
+        encryptionKeyId: CEKid
+      }])
+
+      const userID = rootState.loggedIn.identityContractID
+      await sbp('gi.actions/identity/shareKeysWithSelf', { userID, contractID })
 
       return message
     } catch (e) {