config.c 25 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731
  1. #include "config.h"
  2. #include <stdlib.h>
  3. #include <string.h>
  4. #include <flipper_format/flipper_format.h>
  5. #include <furi_hal_rtc.h>
  6. #include <flipper_format/flipper_format_i.h>
  7. #include <flipper_format/flipper_format_stream.h>
  8. #include <memset_s.h>
  9. #include "../../types/common.h"
  10. #include "../../types/token_info.h"
  11. #include "../../features_config.h"
  12. #include "../crypto/crypto_facade.h"
  13. #include "../crypto/constants.h"
  14. #include "migrations/common_migration.h"
  15. #define CONFIG_FILE_PATH CONFIG_FILE_DIRECTORY_PATH "/totp.conf"
  16. #define CONFIG_FILE_BACKUP_DIR CONFIG_FILE_DIRECTORY_PATH "/backups"
  17. #define CONFIG_FILE_BACKUP_BASE_PATH CONFIG_FILE_BACKUP_DIR "/totp.conf"
  18. struct ConfigFileContext {
  19. /**
  20. * @brief Config file reference
  21. */
  22. FlipperFormat* config_file;
  23. /**
  24. * @brief Storage reference
  25. */
  26. Storage* storage;
  27. /**
  28. * @brief Token list iterator context
  29. */
  30. TokenInfoIteratorContext* token_info_iterator_context;
  31. };
  32. /**
  33. * @brief Opens storage record
  34. * @return Storage record
  35. */
  36. static Storage* totp_open_storage() {
  37. return furi_record_open(RECORD_STORAGE);
  38. }
  39. /**
  40. * @brief Closes storage record
  41. */
  42. static void totp_close_storage() {
  43. furi_record_close(RECORD_STORAGE);
  44. }
  45. /**
  46. * @brief Closes config file
  47. * @param file config file reference
  48. */
  49. static void totp_close_config_file(FlipperFormat* file) {
  50. if(file == NULL) return;
  51. flipper_format_file_close(file);
  52. flipper_format_free(file);
  53. }
  54. /**
  55. * @brief Tries to take a config file backup
  56. * @param storage storage record
  57. * @return backup path if backup successfully taken; \c NULL otherwise
  58. */
  59. static char* totp_config_file_backup_i(Storage* storage) {
  60. if(!storage_dir_exists(storage, CONFIG_FILE_BACKUP_DIR) &&
  61. !storage_simply_mkdir(storage, CONFIG_FILE_BACKUP_DIR)) {
  62. return NULL;
  63. }
  64. FuriHalRtcDateTime current_datetime;
  65. furi_hal_rtc_get_datetime(&current_datetime);
  66. uint8_t backup_path_size = sizeof(CONFIG_FILE_BACKUP_BASE_PATH) + 14;
  67. char* backup_path = malloc(backup_path_size);
  68. furi_check(backup_path != NULL);
  69. memcpy(backup_path, CONFIG_FILE_BACKUP_BASE_PATH, sizeof(CONFIG_FILE_BACKUP_BASE_PATH));
  70. uint16_t i = 1;
  71. bool backup_file_exists;
  72. do {
  73. snprintf(
  74. backup_path,
  75. backup_path_size,
  76. CONFIG_FILE_BACKUP_BASE_PATH ".%4" PRIu16 "%02" PRIu8 "%02" PRIu8 "-%" PRIu16,
  77. current_datetime.year,
  78. current_datetime.month,
  79. current_datetime.day,
  80. i);
  81. i++;
  82. } while((backup_file_exists = storage_common_exists(storage, backup_path)) && i <= 9999);
  83. if(backup_file_exists ||
  84. storage_common_copy(storage, CONFIG_FILE_PATH, backup_path) != FSE_OK) {
  85. FURI_LOG_E(LOGGING_TAG, "Unable to take a backup");
  86. free(backup_path);
  87. return NULL;
  88. }
  89. FURI_LOG_I(LOGGING_TAG, "Took config file backup to %s", backup_path);
  90. return backup_path;
  91. }
  92. /**
  93. * @brief Opens or creates TOTP application standard config file
  94. * @param storage storage record to use
  95. * @param[out] file opened config file
  96. * @return Config file open result
  97. */
  98. static bool totp_open_config_file(Storage* storage, FlipperFormat** file) {
  99. FlipperFormat* fff_data_file = flipper_format_file_alloc(storage);
  100. if(storage_common_stat(storage, CONFIG_FILE_PATH, NULL) == FSE_OK) {
  101. FURI_LOG_D(LOGGING_TAG, "Config file %s found", CONFIG_FILE_PATH);
  102. if(!flipper_format_file_open_existing(fff_data_file, CONFIG_FILE_PATH)) {
  103. FURI_LOG_E(LOGGING_TAG, "Error opening existing file %s", CONFIG_FILE_PATH);
  104. totp_close_config_file(fff_data_file);
  105. return false;
  106. }
  107. } else {
  108. FURI_LOG_D(LOGGING_TAG, "Config file %s is not found. Will create new.", CONFIG_FILE_PATH);
  109. if(storage_common_stat(storage, CONFIG_FILE_DIRECTORY_PATH, NULL) == FSE_NOT_EXIST) {
  110. FURI_LOG_D(
  111. LOGGING_TAG,
  112. "Directory %s doesn't exist. Will create new.",
  113. CONFIG_FILE_DIRECTORY_PATH);
  114. if(!storage_simply_mkdir(storage, CONFIG_FILE_DIRECTORY_PATH)) {
  115. FURI_LOG_E(LOGGING_TAG, "Error creating directory %s", CONFIG_FILE_DIRECTORY_PATH);
  116. return false;
  117. }
  118. }
  119. if(!flipper_format_file_open_new(fff_data_file, CONFIG_FILE_PATH)) {
  120. totp_close_config_file(fff_data_file);
  121. FURI_LOG_E(LOGGING_TAG, "Error creating new file %s", CONFIG_FILE_PATH);
  122. return false;
  123. }
  124. flipper_format_write_header_cstr(
  125. fff_data_file, CONFIG_FILE_HEADER, CONFIG_FILE_ACTUAL_VERSION);
  126. uint32_t tmp_uint32 = CRYPTO_LATEST_VERSION;
  127. flipper_format_write_uint32(fff_data_file, TOTP_CONFIG_KEY_CRYPTO_VERSION, &tmp_uint32, 1);
  128. tmp_uint32 = DEFAULT_CRYPTO_KEY_SLOT;
  129. flipper_format_write_uint32(
  130. fff_data_file, TOTP_CONFIG_KEY_CRYPTO_KEY_SLOT, &tmp_uint32, 1);
  131. flipper_format_write_comment_cstr(
  132. fff_data_file,
  133. "Config file format specification can be found here: https://github.com/akopachov/flipper-zero_authenticator/blob/master/docs/conf-file_description.md");
  134. float tmp_tz = 0;
  135. flipper_format_write_float(fff_data_file, TOTP_CONFIG_KEY_TIMEZONE, &tmp_tz, 1);
  136. tmp_uint32 = NotificationMethodSound | NotificationMethodVibro;
  137. flipper_format_write_uint32(
  138. fff_data_file, TOTP_CONFIG_KEY_NOTIFICATION_METHOD, &tmp_uint32, 1);
  139. tmp_uint32 = AutomationMethodBadUsb;
  140. flipper_format_write_uint32(
  141. fff_data_file, TOTP_CONFIG_KEY_AUTOMATION_METHOD, &tmp_uint32, 1);
  142. tmp_uint32 = AutomationKeyboardLayoutQWERTY;
  143. flipper_format_write_uint32(
  144. fff_data_file, TOTP_CONFIG_KEY_AUTOMATION_KB_LAYOUT, &tmp_uint32, 1);
  145. tmp_uint32 = 0; //-V1048
  146. flipper_format_write_uint32(fff_data_file, TOTP_CONFIG_KEY_FONT, &tmp_uint32, 1);
  147. if(!flipper_format_rewind(fff_data_file)) {
  148. totp_close_config_file(fff_data_file);
  149. FURI_LOG_E(LOGGING_TAG, "Rewind error");
  150. return false;
  151. }
  152. }
  153. *file = fff_data_file;
  154. return true;
  155. }
  156. char* totp_config_file_backup(const PluginState* plugin_state) {
  157. if(plugin_state->config_file_context == NULL) return NULL;
  158. totp_close_config_file(plugin_state->config_file_context->config_file);
  159. char* result = totp_config_file_backup_i(plugin_state->config_file_context->storage);
  160. totp_open_config_file(
  161. plugin_state->config_file_context->storage,
  162. &plugin_state->config_file_context->config_file);
  163. totp_token_info_iterator_attach_to_config_file(
  164. plugin_state->config_file_context->token_info_iterator_context,
  165. plugin_state->config_file_context->config_file);
  166. return result;
  167. }
  168. bool totp_config_file_update_timezone_offset(const PluginState* plugin_state) {
  169. FlipperFormat* file = plugin_state->config_file_context->config_file;
  170. flipper_format_rewind(file);
  171. bool update_result = false;
  172. do {
  173. if(!flipper_format_insert_or_update_float(
  174. file, TOTP_CONFIG_KEY_TIMEZONE, &plugin_state->timezone_offset, 1)) {
  175. break;
  176. }
  177. update_result = true;
  178. } while(false);
  179. return update_result;
  180. }
  181. bool totp_config_file_update_notification_method(const PluginState* plugin_state) {
  182. FlipperFormat* file = plugin_state->config_file_context->config_file;
  183. flipper_format_rewind(file);
  184. bool update_result = false;
  185. do {
  186. uint32_t tmp_uint32 = plugin_state->notification_method;
  187. if(!flipper_format_insert_or_update_uint32(
  188. file, TOTP_CONFIG_KEY_NOTIFICATION_METHOD, &tmp_uint32, 1)) {
  189. break;
  190. }
  191. update_result = true;
  192. } while(false);
  193. return update_result;
  194. }
  195. bool totp_config_file_update_automation_method(const PluginState* plugin_state) {
  196. FlipperFormat* file = plugin_state->config_file_context->config_file;
  197. flipper_format_rewind(file);
  198. bool update_result = false;
  199. do {
  200. uint32_t tmp_uint32 = plugin_state->automation_method;
  201. if(!flipper_format_insert_or_update_uint32(
  202. file, TOTP_CONFIG_KEY_AUTOMATION_METHOD, &tmp_uint32, 1)) {
  203. break;
  204. }
  205. tmp_uint32 = plugin_state->automation_kb_layout;
  206. if(!flipper_format_insert_or_update_uint32(
  207. file, TOTP_CONFIG_KEY_AUTOMATION_KB_LAYOUT, &tmp_uint32, 1)) {
  208. break;
  209. }
  210. update_result = true;
  211. } while(false);
  212. return update_result;
  213. }
  214. bool totp_config_file_update_user_settings(const PluginState* plugin_state) {
  215. FlipperFormat* file = plugin_state->config_file_context->config_file;
  216. flipper_format_rewind(file);
  217. bool update_result = false;
  218. do {
  219. if(!flipper_format_insert_or_update_float(
  220. file, TOTP_CONFIG_KEY_TIMEZONE, &plugin_state->timezone_offset, 1)) {
  221. break;
  222. }
  223. uint32_t tmp_uint32 = plugin_state->notification_method;
  224. if(!flipper_format_insert_or_update_uint32(
  225. file, TOTP_CONFIG_KEY_NOTIFICATION_METHOD, &tmp_uint32, 1)) {
  226. break;
  227. }
  228. tmp_uint32 = plugin_state->automation_method;
  229. if(!flipper_format_insert_or_update_uint32(
  230. file, TOTP_CONFIG_KEY_AUTOMATION_METHOD, &tmp_uint32, 1)) {
  231. break;
  232. }
  233. tmp_uint32 = plugin_state->active_font_index;
  234. if(!flipper_format_insert_or_update_uint32(file, TOTP_CONFIG_KEY_FONT, &tmp_uint32, 1)) {
  235. break;
  236. }
  237. tmp_uint32 = plugin_state->automation_kb_layout;
  238. if(!flipper_format_insert_or_update_uint32(
  239. file, TOTP_CONFIG_KEY_AUTOMATION_KB_LAYOUT, &tmp_uint32, 1)) {
  240. break;
  241. }
  242. update_result = true;
  243. } while(false);
  244. return update_result;
  245. }
  246. bool totp_config_file_load(PluginState* const plugin_state) {
  247. Storage* storage = totp_open_storage();
  248. FlipperFormat* fff_data_file;
  249. if(!totp_open_config_file(storage, &fff_data_file)) {
  250. totp_close_storage();
  251. return false;
  252. }
  253. flipper_format_rewind(fff_data_file);
  254. bool result = false;
  255. plugin_state->timezone_offset = 0;
  256. FuriString* temp_str = furi_string_alloc();
  257. do {
  258. uint32_t file_version;
  259. if(!flipper_format_read_header(fff_data_file, temp_str, &file_version)) {
  260. FURI_LOG_E(LOGGING_TAG, "Missing or incorrect header");
  261. break;
  262. }
  263. if(file_version < CONFIG_FILE_ACTUAL_VERSION) {
  264. FURI_LOG_I(
  265. LOGGING_TAG,
  266. "Obsolete config file version detected. Current version: %" PRIu32
  267. "; Actual version: %" PRId16,
  268. file_version,
  269. CONFIG_FILE_ACTUAL_VERSION);
  270. totp_close_config_file(fff_data_file);
  271. char* backup_path = totp_config_file_backup_i(storage);
  272. if(backup_path != NULL) {
  273. if(totp_open_config_file(storage, &fff_data_file) != true) {
  274. break;
  275. }
  276. FlipperFormat* fff_backup_data_file = flipper_format_file_alloc(storage);
  277. if(!flipper_format_file_open_existing(fff_backup_data_file, backup_path)) {
  278. flipper_format_file_close(fff_backup_data_file);
  279. flipper_format_free(fff_backup_data_file);
  280. break;
  281. }
  282. if(totp_config_migrate_to_latest(fff_data_file, fff_backup_data_file)) {
  283. FURI_LOG_I(
  284. LOGGING_TAG,
  285. "Applied migration to version %" PRId16,
  286. CONFIG_FILE_ACTUAL_VERSION);
  287. file_version = CONFIG_FILE_ACTUAL_VERSION;
  288. } else {
  289. FURI_LOG_W(
  290. LOGGING_TAG,
  291. "An error occurred during migration to version %" PRId16,
  292. CONFIG_FILE_ACTUAL_VERSION);
  293. break;
  294. }
  295. flipper_format_file_close(fff_backup_data_file);
  296. flipper_format_free(fff_backup_data_file);
  297. flipper_format_rewind(fff_data_file);
  298. free(backup_path);
  299. } else {
  300. FURI_LOG_E(
  301. LOGGING_TAG,
  302. "An error occurred during taking backup of %s before migration",
  303. CONFIG_FILE_PATH);
  304. break;
  305. }
  306. }
  307. uint32_t tmp_uint32;
  308. if(!flipper_format_read_uint32(
  309. fff_data_file, TOTP_CONFIG_KEY_CRYPTO_VERSION, &tmp_uint32, 1)) {
  310. FURI_LOG_E(LOGGING_TAG, "Missing required " TOTP_CONFIG_KEY_CRYPTO_VERSION "property");
  311. break;
  312. }
  313. plugin_state->crypto_version = tmp_uint32;
  314. if(!flipper_format_rewind(fff_data_file)) {
  315. break;
  316. }
  317. if(!flipper_format_read_uint32(
  318. fff_data_file, TOTP_CONFIG_KEY_CRYPTO_KEY_SLOT, &tmp_uint32, 1)) {
  319. FURI_LOG_E(
  320. LOGGING_TAG, "Missing required " TOTP_CONFIG_KEY_CRYPTO_KEY_SLOT "property");
  321. break;
  322. }
  323. plugin_state->crypto_key_slot = tmp_uint32;
  324. if(!flipper_format_rewind(fff_data_file)) {
  325. break;
  326. }
  327. if(!flipper_format_read_hex(
  328. fff_data_file,
  329. TOTP_CONFIG_KEY_BASE_IV,
  330. &plugin_state->base_iv[0],
  331. CRYPTO_IV_LENGTH)) {
  332. FURI_LOG_D(LOGGING_TAG, "Missing base IV");
  333. }
  334. if(!flipper_format_rewind(fff_data_file)) {
  335. break;
  336. }
  337. uint32_t crypto_size;
  338. if(flipper_format_get_value_count(
  339. fff_data_file, TOTP_CONFIG_KEY_CRYPTO_VERIFY, &crypto_size) &&
  340. crypto_size > 0) {
  341. plugin_state->crypto_verify_data = malloc(sizeof(uint8_t) * crypto_size);
  342. furi_check(plugin_state->crypto_verify_data != NULL);
  343. plugin_state->crypto_verify_data_length = crypto_size;
  344. if(!flipper_format_read_hex(
  345. fff_data_file,
  346. TOTP_CONFIG_KEY_CRYPTO_VERIFY,
  347. plugin_state->crypto_verify_data,
  348. crypto_size)) {
  349. FURI_LOG_D(LOGGING_TAG, "Missing crypto verify token");
  350. free(plugin_state->crypto_verify_data);
  351. plugin_state->crypto_verify_data = NULL;
  352. plugin_state->crypto_verify_data_length = 0;
  353. }
  354. } else {
  355. plugin_state->crypto_verify_data = NULL;
  356. plugin_state->crypto_verify_data_length = 0;
  357. }
  358. if(!flipper_format_rewind(fff_data_file)) {
  359. break;
  360. }
  361. if(!flipper_format_read_float(
  362. fff_data_file, TOTP_CONFIG_KEY_TIMEZONE, &plugin_state->timezone_offset, 1)) {
  363. plugin_state->timezone_offset = 0;
  364. FURI_LOG_D(LOGGING_TAG, "Missing timezone offset information, defaulting to 0");
  365. }
  366. if(!flipper_format_rewind(fff_data_file)) {
  367. break;
  368. }
  369. if(!flipper_format_read_bool(
  370. fff_data_file, TOTP_CONFIG_KEY_PINSET, &plugin_state->pin_set, 1)) {
  371. plugin_state->pin_set = true;
  372. }
  373. if(!flipper_format_rewind(fff_data_file)) {
  374. break;
  375. }
  376. if(!flipper_format_read_uint32(
  377. fff_data_file, TOTP_CONFIG_KEY_NOTIFICATION_METHOD, &tmp_uint32, 1)) {
  378. tmp_uint32 = NotificationMethodSound | NotificationMethodVibro;
  379. }
  380. plugin_state->notification_method = tmp_uint32;
  381. if(!flipper_format_rewind(fff_data_file)) {
  382. break;
  383. }
  384. if(!flipper_format_read_uint32(
  385. fff_data_file, TOTP_CONFIG_KEY_AUTOMATION_METHOD, &tmp_uint32, 1)) {
  386. tmp_uint32 = AutomationMethodBadUsb;
  387. }
  388. plugin_state->automation_method = tmp_uint32;
  389. if(!flipper_format_rewind(fff_data_file)) {
  390. break;
  391. }
  392. if(!flipper_format_read_uint32(
  393. fff_data_file, TOTP_CONFIG_KEY_AUTOMATION_KB_LAYOUT, &tmp_uint32, 1)) {
  394. tmp_uint32 = AutomationKeyboardLayoutQWERTY;
  395. }
  396. plugin_state->automation_kb_layout = tmp_uint32;
  397. if(!flipper_format_rewind(fff_data_file)) {
  398. break;
  399. }
  400. if(!flipper_format_read_uint32(fff_data_file, TOTP_CONFIG_KEY_FONT, &tmp_uint32, 1)) {
  401. tmp_uint32 = 0;
  402. }
  403. plugin_state->active_font_index = tmp_uint32;
  404. plugin_state->config_file_context = malloc(sizeof(ConfigFileContext));
  405. furi_check(plugin_state->config_file_context != NULL);
  406. plugin_state->config_file_context->storage = storage;
  407. plugin_state->config_file_context->config_file = fff_data_file;
  408. plugin_state->config_file_context->token_info_iterator_context =
  409. totp_token_info_iterator_alloc(
  410. storage,
  411. plugin_state->config_file_context->config_file,
  412. plugin_state->iv,
  413. plugin_state->crypto_version,
  414. plugin_state->crypto_key_slot);
  415. result = true;
  416. } while(false);
  417. furi_string_free(temp_str);
  418. return result;
  419. }
  420. bool totp_config_file_update_crypto_signatures(const PluginState* plugin_state) {
  421. FlipperFormat* config_file = plugin_state->config_file_context->config_file;
  422. flipper_format_rewind(config_file);
  423. bool update_result = false;
  424. do {
  425. uint32_t tmp_uint32 = plugin_state->crypto_version;
  426. if(!flipper_format_insert_or_update_uint32(
  427. config_file, TOTP_CONFIG_KEY_CRYPTO_VERSION, &tmp_uint32, 1)) {
  428. break;
  429. }
  430. tmp_uint32 = plugin_state->crypto_key_slot;
  431. if(!flipper_format_insert_or_update_uint32(
  432. config_file, TOTP_CONFIG_KEY_CRYPTO_KEY_SLOT, &tmp_uint32, 1)) {
  433. break;
  434. }
  435. if(!flipper_format_insert_or_update_hex(
  436. config_file, TOTP_CONFIG_KEY_BASE_IV, plugin_state->base_iv, CRYPTO_IV_LENGTH)) {
  437. break;
  438. }
  439. if(!flipper_format_insert_or_update_hex(
  440. config_file,
  441. TOTP_CONFIG_KEY_CRYPTO_VERIFY,
  442. plugin_state->crypto_verify_data,
  443. plugin_state->crypto_verify_data_length)) {
  444. break;
  445. }
  446. if(!flipper_format_insert_or_update_bool(
  447. config_file, TOTP_CONFIG_KEY_PINSET, &plugin_state->pin_set, 1)) {
  448. break;
  449. }
  450. update_result = true;
  451. } while(false);
  452. return update_result;
  453. }
  454. void totp_config_file_close(PluginState* const plugin_state) {
  455. if(plugin_state->config_file_context == NULL) return;
  456. totp_token_info_iterator_free(plugin_state->config_file_context->token_info_iterator_context);
  457. totp_close_config_file(plugin_state->config_file_context->config_file);
  458. free(plugin_state->config_file_context);
  459. plugin_state->config_file_context = NULL;
  460. totp_close_storage();
  461. }
  462. void totp_config_file_reset(PluginState* const plugin_state) {
  463. totp_config_file_close(plugin_state);
  464. Storage* storage = totp_open_storage();
  465. storage_simply_remove(storage, CONFIG_FILE_PATH);
  466. totp_close_storage();
  467. }
  468. bool totp_config_file_update_encryption(
  469. PluginState* plugin_state,
  470. uint8_t new_crypto_key_slot,
  471. const uint8_t* new_pin,
  472. uint8_t new_pin_length) {
  473. FlipperFormat* config_file = plugin_state->config_file_context->config_file;
  474. Stream* stream = flipper_format_get_raw_stream(config_file);
  475. size_t original_offset = stream_tell(stream);
  476. if(!stream_rewind(stream)) {
  477. return false;
  478. }
  479. if(!totp_crypto_check_key_slot(new_crypto_key_slot)) {
  480. return false;
  481. }
  482. uint8_t old_iv[CRYPTO_IV_LENGTH];
  483. memcpy(&old_iv[0], &plugin_state->iv[0], CRYPTO_IV_LENGTH);
  484. uint8_t old_crypto_key_slot = plugin_state->crypto_key_slot;
  485. uint8_t old_crypto_version = plugin_state->crypto_version;
  486. memset(&plugin_state->iv[0], 0, CRYPTO_IV_LENGTH);
  487. memset(&plugin_state->base_iv[0], 0, CRYPTO_IV_LENGTH);
  488. if(plugin_state->crypto_verify_data != NULL) {
  489. free(plugin_state->crypto_verify_data);
  490. plugin_state->crypto_verify_data = NULL;
  491. }
  492. plugin_state->crypto_key_slot = new_crypto_key_slot;
  493. plugin_state->crypto_version = CRYPTO_LATEST_VERSION;
  494. CryptoSeedIVResult seed_result =
  495. totp_crypto_seed_iv(plugin_state, new_pin_length > 0 ? new_pin : NULL, new_pin_length);
  496. if(seed_result & CryptoSeedIVResultFlagSuccess &&
  497. seed_result & CryptoSeedIVResultFlagNewCryptoVerifyData &&
  498. !totp_config_file_update_crypto_signatures(plugin_state)) {
  499. return false;
  500. } else if(seed_result == CryptoSeedIVResultFailed) {
  501. return false;
  502. }
  503. char buffer[sizeof(TOTP_CONFIG_KEY_TOKEN_SECRET) + 1];
  504. bool result = true;
  505. while(true) {
  506. if(!stream_seek_to_char(stream, '\n', StreamDirectionForward)) {
  507. break;
  508. }
  509. size_t buffer_read_size;
  510. if((buffer_read_size = stream_read(stream, (uint8_t*)&buffer[0], sizeof(buffer))) == 0) {
  511. break;
  512. }
  513. if(!stream_seek(stream, -(int32_t)buffer_read_size, StreamOffsetFromCurrent)) {
  514. result = false;
  515. break;
  516. }
  517. if(strncmp(buffer, "\n" TOTP_CONFIG_KEY_TOKEN_SECRET ":", sizeof(buffer)) == 0) {
  518. uint32_t secret_bytes_count;
  519. if(!flipper_format_get_value_count(
  520. config_file, TOTP_CONFIG_KEY_TOKEN_SECRET, &secret_bytes_count)) {
  521. secret_bytes_count = 0;
  522. }
  523. if(secret_bytes_count > 1) {
  524. size_t secret_token_start = stream_tell(stream) + 1;
  525. uint8_t* encrypted_token = malloc(secret_bytes_count);
  526. furi_check(encrypted_token != NULL);
  527. if(!flipper_format_read_hex(
  528. config_file,
  529. TOTP_CONFIG_KEY_TOKEN_SECRET,
  530. encrypted_token,
  531. secret_bytes_count)) {
  532. result = false;
  533. free(encrypted_token);
  534. break;
  535. }
  536. size_t plain_token_length;
  537. uint8_t* plain_token = totp_crypto_decrypt(
  538. encrypted_token,
  539. secret_bytes_count,
  540. &old_iv[0],
  541. old_crypto_version,
  542. old_crypto_key_slot,
  543. &plain_token_length);
  544. free(encrypted_token);
  545. size_t encrypted_token_length;
  546. encrypted_token = totp_crypto_encrypt(
  547. plain_token,
  548. plain_token_length,
  549. &plugin_state->iv[0],
  550. plugin_state->crypto_version,
  551. plugin_state->crypto_key_slot,
  552. &encrypted_token_length);
  553. memset_s(plain_token, plain_token_length, 0, plain_token_length);
  554. free(plain_token);
  555. if(!stream_seek(stream, secret_token_start, StreamOffsetFromStart)) {
  556. result = false;
  557. free(encrypted_token);
  558. break;
  559. }
  560. if(!flipper_format_write_hex(
  561. config_file,
  562. TOTP_CONFIG_KEY_TOKEN_SECRET,
  563. encrypted_token,
  564. encrypted_token_length)) {
  565. free(encrypted_token);
  566. result = false;
  567. break;
  568. }
  569. free(encrypted_token);
  570. }
  571. }
  572. }
  573. stream_seek(stream, original_offset, StreamOffsetFromStart);
  574. return result;
  575. }
  576. bool totp_config_file_ensure_latest_encryption(
  577. PluginState* plugin_state,
  578. const uint8_t* pin,
  579. uint8_t pin_length) {
  580. bool result = true;
  581. if(plugin_state->crypto_version < CRYPTO_LATEST_VERSION) {
  582. FURI_LOG_I(LOGGING_TAG, "Migration to crypto v%d is needed", CRYPTO_LATEST_VERSION);
  583. char* backup_path = totp_config_file_backup(plugin_state);
  584. if(backup_path != NULL) {
  585. free(backup_path);
  586. uint8_t crypto_key_slot = plugin_state->crypto_key_slot;
  587. if(!totp_crypto_check_key_slot(crypto_key_slot)) {
  588. crypto_key_slot = DEFAULT_CRYPTO_KEY_SLOT;
  589. }
  590. result =
  591. totp_config_file_update_encryption(plugin_state, crypto_key_slot, pin, pin_length);
  592. FURI_LOG_I(
  593. LOGGING_TAG,
  594. "Migration to crypto v%d is done. Result: %d",
  595. CRYPTO_LATEST_VERSION,
  596. result);
  597. } else {
  598. result = false;
  599. }
  600. }
  601. return result;
  602. }
  603. TokenInfoIteratorContext* totp_config_get_token_iterator_context(const PluginState* plugin_state) {
  604. return plugin_state->config_file_context->token_info_iterator_context;
  605. }