-
Notifications
You must be signed in to change notification settings - Fork 63
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
13 changed files
with
1,487 additions
and
923 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,18 @@ | ||
| { | ||
| "printWidth": 100, | ||
| "tabWidth": 2, | ||
| "useTabs": false, | ||
| "semi": true, | ||
| "singleQuote": true, | ||
| "quoteProps": "as-needed", | ||
| "jsxSingleQuote": false, | ||
| "trailingComma": "es5", | ||
| "bracketSpacing": true, | ||
| "bracketSameLine": false, | ||
| "arrowParens": "always", | ||
| "proseWrap": "preserve", | ||
| "htmlWhitespaceSensitivity": "css", | ||
| "endOfLine": "lf", | ||
| "embeddedLanguageFormatting": "auto", | ||
| "singleAttributePerLine": false | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,140 +1,158 @@ | ||
| import { groth16 } from 'snarkjs'; | ||
| import { attributeToPosition, countryCodes, DEFAULT_RPC_URL, PASSPORT_ATTESTATION_ID } from '../../common/src/constants/constants'; | ||
| import { | ||
| attributeToPosition, | ||
| countryCodes, | ||
| DEFAULT_RPC_URL, | ||
| PASSPORT_ATTESTATION_ID, | ||
| } from '../../common/src/constants/constants'; | ||
| import { getCurrentDateFormatted, verifyDSCValidity } from '../utils/utils'; | ||
| import { unpackReveal } from '../../common/src/utils/revealBitmap'; | ||
| import { OpenPassportVerifierReport } from './OpenPassportVerifierReport'; | ||
| import { vkey_prove_rsa_65537_sha1, vkey_prove_rsa_65537_sha256, vkey_prove_rsapss_65537_sha256 } from '../../common/src/constants/vkey'; | ||
| import forge from 'node-forge' | ||
| import { | ||
| vkey_prove_rsa_65537_sha1, | ||
| vkey_prove_rsa_65537_sha256, | ||
| vkey_prove_rsapss_65537_sha256, | ||
| } from '../../common/src/constants/vkey'; | ||
| import forge from 'node-forge'; | ||
| import { splitToWords } from '../../common/src/utils/utils'; | ||
| import { getSignatureAlgorithm } from '../../common/src/utils/handleCertificate'; | ||
|
|
||
| export class OpenPassport1StepVerifier { | ||
| scope: string; | ||
| attestationId: string; | ||
| requirements: string[][]; | ||
| rpcUrl: string; | ||
| report: OpenPassportVerifierReport; | ||
| dev_mode: boolean; | ||
|
|
||
| constructor(options: { | ||
| scope: string; | ||
| attestationId: string; | ||
| requirements: string[][]; | ||
| rpcUrl: string; | ||
| report: OpenPassportVerifierReport; | ||
| dev_mode: boolean; | ||
|
|
||
| constructor(options: { scope: string, attestationId?: string, requirements?: string[][], rpcUrl?: string, dev_mode?: boolean }) { | ||
| this.scope = options.scope; | ||
| this.attestationId = options.attestationId || PASSPORT_ATTESTATION_ID; | ||
| this.requirements = options.requirements || []; | ||
| this.rpcUrl = options.rpcUrl || DEFAULT_RPC_URL; | ||
| this.report = new OpenPassportVerifierReport(); | ||
| this.dev_mode = options.dev_mode || false; | ||
| attestationId?: string; | ||
| requirements?: string[][]; | ||
| rpcUrl?: string; | ||
| dev_mode?: boolean; | ||
| }) { | ||
| this.scope = options.scope; | ||
| this.attestationId = options.attestationId || PASSPORT_ATTESTATION_ID; | ||
| this.requirements = options.requirements || []; | ||
| this.rpcUrl = options.rpcUrl || DEFAULT_RPC_URL; | ||
| this.report = new OpenPassportVerifierReport(); | ||
| this.dev_mode = options.dev_mode || false; | ||
| } | ||
|
|
||
| getVkey(signatureAlgorithm: string, hashFunction: string) { | ||
| switch (signatureAlgorithm + ' ' + hashFunction) { | ||
| case 'rsa sha256': | ||
| return vkey_prove_rsa_65537_sha256; | ||
| case 'rsa sha1': | ||
| return vkey_prove_rsa_65537_sha1; | ||
| case 'rsapss sha256': | ||
| return vkey_prove_rsapss_65537_sha256; | ||
| default: | ||
| throw new Error('Invalid signature algorithm or hash function'); | ||
| } | ||
|
|
||
| getVkey(signatureAlgorithm: string, hashFunction: string) { | ||
| switch (signatureAlgorithm + " " + hashFunction) { | ||
| case "rsa sha256": | ||
| return vkey_prove_rsa_65537_sha256; | ||
| case "rsa sha1": | ||
| return vkey_prove_rsa_65537_sha1; | ||
| case "rsapss sha256": | ||
| return vkey_prove_rsapss_65537_sha256; | ||
| default: | ||
| throw new Error("Invalid signature algorithm or hash function"); | ||
| } | ||
| } | ||
|
|
||
| async verify( | ||
| openPassport1StepInputs: OpenPassport1StepInputs | ||
| ): Promise<OpenPassportVerifierReport> { | ||
| const { signatureAlgorithm, hashFunction } = getSignatureAlgorithm(openPassport1StepInputs.dsc); | ||
| console.log('signatureAlgorithm', signatureAlgorithm); | ||
| console.log('hashFunction', hashFunction); | ||
| const vkey = this.getVkey(signatureAlgorithm, hashFunction); | ||
| const parsedPublicSignals = parsePublicSignals1Step(openPassport1StepInputs.publicSignals); | ||
| //1. Verify the scope | ||
| if (parsedPublicSignals.scope !== this.scope) { | ||
| this.report.exposeAttribute('scope', parsedPublicSignals.scope, this.scope); | ||
| } | ||
|
|
||
| async verify(openPassport1StepInputs: OpenPassport1StepInputs): Promise<OpenPassportVerifierReport> { | ||
| const { signatureAlgorithm, hashFunction } = getSignatureAlgorithm(openPassport1StepInputs.dsc); | ||
| console.log("signatureAlgorithm", signatureAlgorithm); | ||
| console.log("hashFunction", hashFunction); | ||
| const vkey = this.getVkey(signatureAlgorithm, hashFunction); | ||
| const parsedPublicSignals = parsePublicSignals1Step(openPassport1StepInputs.publicSignals); | ||
| //1. Verify the scope | ||
| if (parsedPublicSignals.scope !== this.scope) { | ||
| this.report.exposeAttribute('scope', parsedPublicSignals.scope, this.scope); | ||
| } | ||
| console.log('\x1b[32m%s\x1b[0m', `- scope verified`); | ||
|
|
||
| //4. Verify the current_date | ||
| if (parsedPublicSignals.current_date.toString() !== getCurrentDateFormatted().toString()) { | ||
| this.report.exposeAttribute('current_date', parsedPublicSignals.current_date, getCurrentDateFormatted()); | ||
| console.log('\x1b[32m%s\x1b[0m', `- scope verified`); | ||
|
|
||
| //4. Verify the current_date | ||
| if (parsedPublicSignals.current_date.toString() !== getCurrentDateFormatted().toString()) { | ||
| this.report.exposeAttribute( | ||
| 'current_date', | ||
| parsedPublicSignals.current_date, | ||
| getCurrentDateFormatted() | ||
| ); | ||
| } | ||
| console.log('\x1b[32m%s\x1b[0m', `- current_date verified`); | ||
|
|
||
| //5. Verify requirements | ||
| const unpackedReveal = unpackReveal(parsedPublicSignals.revealedData_packed); | ||
| for (const requirement of this.requirements) { | ||
| const attribute = requirement[0]; | ||
| const value = requirement[1]; | ||
| const position = attributeToPosition[attribute]; | ||
| let attributeValue = ''; | ||
| for (let i = position[0]; i <= position[1]; i++) { | ||
| attributeValue += unpackedReveal[i]; | ||
| } | ||
| if (requirement[0] === 'nationality' || requirement[0] === 'issuing_state') { | ||
| if (!countryCodes[attributeValue] || countryCodes[attributeValue] !== value) { | ||
| this.report.exposeAttribute(attribute as keyof OpenPassportVerifierReport); | ||
| } | ||
| console.log('\x1b[32m%s\x1b[0m', `- current_date verified`); | ||
|
|
||
| //5. Verify requirements | ||
| const unpackedReveal = unpackReveal(parsedPublicSignals.revealedData_packed); | ||
| for (const requirement of this.requirements) { | ||
| const attribute = requirement[0]; | ||
| const value = requirement[1]; | ||
| const position = attributeToPosition[attribute]; | ||
| let attributeValue = ''; | ||
| for (let i = position[0]; i <= position[1]; i++) { | ||
| attributeValue += unpackedReveal[i]; | ||
| } | ||
| if (requirement[0] === "nationality" || requirement[0] === "issuing_state") { | ||
| if (!countryCodes[attributeValue] || countryCodes[attributeValue] !== value) { | ||
| this.report.exposeAttribute(attribute as keyof OpenPassportVerifierReport); | ||
| } | ||
| } | ||
| else { | ||
| if (attributeValue !== value) { | ||
| this.report.exposeAttribute(attribute as keyof OpenPassportVerifierReport); | ||
| } | ||
| } | ||
| console.log('\x1b[32m%s\x1b[0m', `- requirement ${requirement[0]} verified`); | ||
|
|
||
| } else { | ||
| if (attributeValue !== value) { | ||
| this.report.exposeAttribute(attribute as keyof OpenPassportVerifierReport); | ||
| } | ||
| } | ||
| console.log('\x1b[32m%s\x1b[0m', `- requirement ${requirement[0]} verified`); | ||
| } | ||
|
|
||
| //6. Verify the proof | ||
| //6. Verify the proof | ||
|
|
||
| const verified_prove = await groth16.verify( | ||
| vkey, | ||
| openPassport1StepInputs.publicSignals, | ||
| openPassport1StepInputs.proof as any | ||
| ) | ||
| if (!verified_prove) { | ||
| this.report.exposeAttribute('proof'); | ||
| } | ||
| console.log('\x1b[32m%s\x1b[0m', `- proof verified`); | ||
| const verified_prove = await groth16.verify( | ||
| vkey, | ||
| openPassport1StepInputs.publicSignals, | ||
| openPassport1StepInputs.proof as any | ||
| ); | ||
| if (!verified_prove) { | ||
| this.report.exposeAttribute('proof'); | ||
| } | ||
| console.log('\x1b[32m%s\x1b[0m', `- proof verified`); | ||
|
|
||
| this.report.nullifier = parsedPublicSignals.nullifier; | ||
| this.report.user_identifier = parsedPublicSignals.user_identifier; | ||
| this.report.nullifier = parsedPublicSignals.nullifier; | ||
| this.report.user_identifier = parsedPublicSignals.user_identifier; | ||
|
|
||
| //7 Verify the dsc | ||
| const dscCertificate = forge.pki.certificateFromPem(openPassport1StepInputs.dsc); | ||
| const verified_certificate = verifyDSCValidity(dscCertificate, this.dev_mode); | ||
| console.log("certificate verified:" + verified_certificate); | ||
| //7 Verify the dsc | ||
| const dscCertificate = forge.pki.certificateFromPem(openPassport1StepInputs.dsc); | ||
| const verified_certificate = verifyDSCValidity(dscCertificate, this.dev_mode); | ||
| console.log('certificate verified:' + verified_certificate); | ||
|
|
||
| // @ts-ignore | ||
| const dsc_modulus = BigInt(dscCertificate.publicKey.n); | ||
| const dsc_modulus_words = splitToWords(dsc_modulus, BigInt(64), BigInt(32)); | ||
| const modulus_from_proof = parsedPublicSignals.pubKey; | ||
| // @ts-ignore | ||
| const dsc_modulus = BigInt(dscCertificate.publicKey.n); | ||
| const dsc_modulus_words = splitToWords(dsc_modulus, BigInt(64), BigInt(32)); | ||
| const modulus_from_proof = parsedPublicSignals.pubKey; | ||
|
|
||
| const areArraysEqual = (arr1: string[], arr2: string[]) => | ||
| arr1.length === arr2.length && | ||
| arr1.every((value, index) => value === arr2[index]); | ||
| const areArraysEqual = (arr1: string[], arr2: string[]) => | ||
| arr1.length === arr2.length && arr1.every((value, index) => value === arr2[index]); | ||
|
|
||
| const verified_modulus = areArraysEqual(dsc_modulus_words, modulus_from_proof); | ||
| console.log("modulus verified:" + verified_modulus); | ||
| return this.report; | ||
| } | ||
| const verified_modulus = areArraysEqual(dsc_modulus_words, modulus_from_proof); | ||
| console.log('modulus verified:' + verified_modulus); | ||
| return this.report; | ||
| } | ||
| } | ||
|
|
||
| export class OpenPassport1StepInputs { | ||
| publicSignals: string[]; | ||
| proof: string[]; | ||
| dsc: string; | ||
|
|
||
| constructor(publicSignals: string[], proof: string[], dsc: string) { | ||
| this.publicSignals = publicSignals; | ||
| this.proof = proof; | ||
| this.dsc = dsc; | ||
| } | ||
| publicSignals: string[]; | ||
| proof: string[]; | ||
| dsc: string; | ||
|
|
||
| constructor(publicSignals: string[], proof: string[], dsc: string) { | ||
| this.publicSignals = publicSignals; | ||
| this.proof = proof; | ||
| this.dsc = dsc; | ||
| } | ||
| } | ||
|
|
||
| export function parsePublicSignals1Step(publicSignals) { | ||
| return { | ||
| signature_algorithm: publicSignals[0], | ||
| revealedData_packed: [publicSignals[1], publicSignals[2], publicSignals[3]], | ||
| nullifier: publicSignals[4], | ||
| pubKey: publicSignals.slice(5, 37), | ||
| scope: publicSignals[37], | ||
| current_date: publicSignals.slice(38, 44), | ||
| user_identifier: publicSignals[44], | ||
| } | ||
| return { | ||
| signature_algorithm: publicSignals[0], | ||
| revealedData_packed: [publicSignals[1], publicSignals[2], publicSignals[3]], | ||
| nullifier: publicSignals[4], | ||
| pubKey: publicSignals.slice(5, 37), | ||
| scope: publicSignals[37], | ||
| current_date: publicSignals.slice(38, 44), | ||
| user_identifier: publicSignals[44], | ||
| }; | ||
| } |
Oops, something went wrong.