623408913c
Merge branch 'secret-sharing'
2021-08-13 20:38:31 +02:00
9bae87b0ac
crypto: Fix some clippy warnings
2021-08-13 18:28:52 +02:00
00e11d33f1
crypto: Fix user-signing signature uploads
2021-08-13 18:28:52 +02:00
680f77beb9
crypto: Add the master key to the SAS MAC if we trust it
2021-08-13 18:28:52 +02:00
356506060c
crypto: Remove private cross signing keys if we detect that they changed
2021-08-13 18:28:52 +02:00
4e9fe79619
crypto: Start remembering if an inbound group session has been backed up
2021-08-13 18:28:52 +02:00
e4a9cf0bba
crypto: Disallow re-sharing room keys with devices with changed curve keys
2021-08-13 18:28:52 +02:00
f9de77a75d
crypto: Make sure we request secrets only if the user became trusted
2021-08-13 18:28:52 +02:00
315e77ebf2
crypto: Add the users for key claiming to the outgoing requests
...
This makes sure that we immediately claim one-time keys after we
receive the sync changes instead of waiting for a room message to be
sent by the user.
Users may not send a message in a long time which would mean that we'll
likely never share secrets or forward room keys if a Olm session was
missing with the requester.
2021-08-13 18:28:52 +02:00
da82fbab4f
crypto: Connect the responding to secret request logic
2021-08-13 18:28:52 +02:00
4f46212d1a
crypto: Add a method to manually verify our own user identity
2021-08-13 18:28:52 +02:00
d4fe6f5133
crypto: Add methods to manually verify devices and users
2021-08-13 18:28:52 +02:00
ee838087ca
crypto: Add methods to export/import cross signing keys
2021-08-13 18:28:52 +02:00
b540b8df62
crypto: Add a method to check the state of our private cross signing keys
2021-08-13 18:28:52 +02:00
1157594530
crypto: Add a method to check if a user identity is verified
2021-08-13 18:28:52 +02:00
8d7fe5e575
crypto: Add a method to check if our own device has been signed by our identity
2021-08-13 18:28:52 +02:00
0598bdebc7
crypto: Store our own device we receive from the server
2021-08-13 18:28:52 +02:00
7d851a10b5
crypto: Collect common verification stuff into a VerificationStore
2021-08-13 18:28:52 +02:00
e401c87246
crypto: When we check the signature of a device use the DeviceKeys struct
2021-08-13 18:28:52 +02:00
2cf6ad21d3
crypto: Refactor and split out the gossiping logic
2021-08-13 18:28:52 +02:00
adca302dfe
crypto: Fix some clippy warnings
2021-08-13 18:28:52 +02:00
68df9b6ed2
crypto: Allow secrets to be requested and imported
2021-08-13 18:28:52 +02:00
e57d70b089
crypto: Use the correct pickle key when unpickling cross signing keys
2021-08-13 18:28:52 +02:00
5f1e972b3d
crypto: Properly mark verification requests as done
2021-08-13 18:28:52 +02:00
3726492cf9
crypto: Improve some log lines
2021-08-13 18:28:52 +02:00
bc8c2752e4
crypto: Store newly created Olm sessions immediately
...
This fixes a bug where we would try to create a new Olm session, even if
we already created one, because we didn't yet add the new one to the
store.
This would be triggered every time two or more Olm pre-key messages
arrive that don't yet have an Olm session. This leads to decryption
failures for every message that arrived in the same sync after the
first one which created the new Olm session.
2021-08-13 18:28:52 +02:00
d27a08bc91
crypto: Fix a comment in the attachment encryption logic
2021-08-13 18:28:52 +02:00
5192feb836
crypto: Add support to request secrets
2021-08-13 18:28:52 +02:00
a916288d03
crypto: Support responding to secret requests
2021-08-13 18:28:52 +02:00
96e26651bc
crypto: Bump the olm-rs version
2021-08-13 14:07:37 +02:00
578ddd2698
Upgrade to ruma 0.3.0
2021-08-12 10:41:20 +02:00
0bd438e617
Fix clippy warnings
2021-08-05 22:48:05 +02:00
778867e3ef
crypto: Test that edits get properly decrypted
2021-07-26 15:28:17 +02:00
4432be48e0
crypto: Fix a broken doc link
2021-07-26 11:47:53 +02:00
46f9c292ab
crypto: Streamline how we update one-time key counts
...
There is no reason to use different logic when updating one-time key
counts coming from an upload response vs when coming from a sync
response.
Switch to an AtomicU64 for the count as well, the i64 is probably a
remnant of the SQLite based crypto store.
2021-07-22 16:06:10 +02:00
26310def0a
crypto: Silence a couple of clippy warnings
2021-07-19 10:49:22 +02:00
5566886f20
crypto: Add public methods to request verifications with devices
2021-07-19 10:26:39 +02:00
0053d2a874
crypto: Don't send cancellations for passive verification requests
2021-07-19 09:48:22 +02:00
55a9e6836d
crypto: Introduce a CancelInfo struct
...
This replaces the separate methods to fetch info about the cancellation.
It was a bit annoying to gather all the different info where each method
can return None.
2021-07-19 09:45:47 +02:00
cf30c42563
crypto: Correctly remember our chosen SAS methods
2021-07-19 09:43:35 +02:00
ff8089912e
crypto: Only send cancellations to other devices if we're the requester
2021-07-19 09:36:21 +02:00
909cd42ac1
crypto: Cancel the verification request for to-device Sas verifications
2021-07-19 09:32:48 +02:00
ead91a1e6b
crypto: Send cancellations if the other device picks up over to-device
2021-07-12 18:12:02 +02:00
b53518d1b8
crypto: Improve a log line
2021-07-09 17:13:15 +02:00
71c89c2670
crypto: Time out verification requests as well
2021-07-09 17:01:35 +02:00
cca73b2622
crypto: Update the SAS event timeout when we receive events
2021-07-09 16:13:30 +02:00
7644ceea8a
crypto: Make sure we don't deadlock when we cancel the verification request
2021-07-09 14:31:54 +02:00
b0e8f12426
crypto: Cancel the verification request if the child flow gets cancelled
2021-07-09 13:53:47 +02:00
4e5cc03673
crypto: Only go into a done verification request if we're in the correct state
2021-07-09 11:50:12 +02:00
76d57baa11
crypto: Add the verification to the cache after we scan a QR code
2021-07-09 11:49:46 +02:00
Damir Jelić
Jonas Platte
stoically