add:Keychain

src/main/java/security/IdentifyManager.java

@@ -22,7 +22,11 @@ import java.util.concurrent.ConcurrentMap;
 // TODO: 测试
 public class IdentifyManager {
 
-    private final ConcurrentMap<String, Identity> identifies;   // 一个map，存储了身份名字和网络身份实体的映射
+    public void setIdentifies(ConcurrentMap<String, Identity> identifies) {
+        this.identifies = identifies;
+    }
+
+    private ConcurrentMap<String, Identity> identifies;   // 一个map，存储了身份名字和网络身份实体的映射
     private Identity defaultIdentity;                           // 默认网络身份
     private int privateKeyEncryptionAlgorithm;                  // 对秘钥加密所使用的加密算法
 

src/main/java/security/KeyChain.java

@@ -1,7 +1,19 @@
 package security;
 
+import component.Signature;
+import component.SignatureValue;
+import encoding.Block;
+import encoding.SelfEncodingBase;
 import minsecurity.identity.Identity;
 import minsecurity.identity.IdentityException;
+import packet.CPacket;
+import packet.Data;
+import packet.Interest;
+import packet.MINPacket;
+
+import java.lang.reflect.Array;
+import java.util.IdentityHashMap;
+
 /*
  * @Author: hongyu guo
  * @Description: 用于给网络包签名和验签
@@ -10,6 +22,22 @@ import minsecurity.identity.IdentityException;
  * @Copyright: MIN-Group；国家重大科技基础设施——未来网络北大实验室；深圳市信息论与未来网络重点实验室
  */
 public class KeyChain {
+    public IdentifyManager getIdentifyManager() {
+        return identifyManager;
+    }
+
+    public void setIdentifyManager(IdentifyManager identifyManager) {
+        this.identifyManager = identifyManager;
+    }
+
+    public Identity getCurrentIdentity() {
+        return currentIdentity;
+    }
+
+    public void setCurrentIdentity(Identity currentIdentity) {
+        this.currentIdentity = currentIdentity;
+    }
+
     private IdentifyManager identifyManager;
     private Identity currentIdentity;
 
@@ -23,7 +51,6 @@ public class KeyChain {
     public KeyChain(){
         identifyManager = new IdentifyManager();
         currentIdentity = identifyManager.getDefaultIdentity();
-
         // TODO: 考虑是否需要在没有默认身份的时候创建一个缺省的本地网络身份
     }
 
@@ -79,10 +106,94 @@ public class KeyChain {
     }
 
 
-    // TODO: packet类暂未完成
-    // public void getIdentifierAndReadOnlyValueFromPacket(){
-    //
-    // }
+     //TODO: packet类暂未完成
+     private byte[] getIdentifierAndReadOnlyValueFromPacket(MINPacket packet) throws Exception{
+        Block iBlock = new SelfEncodingBase().selfWireEncode(packet.identifierField);
+        Block rBlock = new SelfEncodingBase().selfWireEncode(packet.readOnlyField);
 
+        byte[] iBlockValue = iBlock.getValue();
+        byte[] rBlockValue = rBlock.getValue();
+        byte[] rawData = new byte[iBlockValue.length + rBlockValue.length];
 
+        System.arraycopy(iBlockValue, 0, rawData, 0, iBlockValue.length);
+        System.arraycopy(rBlockValue, 0, rawData, iBlockValue.length, rBlockValue.length);
+
+        return rawData;
+    }
+
+    public void sign(MINPacket packet) throws Exception{
+        // 首先检查当前使用的身份是否可以用来签名
+        checkIdentifyCanUseToSign(this.currentIdentity);
+
+        // 1. 提取标识区和只读区的值，对其进行签名
+        byte[] rawData = getIdentifierAndReadOnlyValueFromPacket(packet);
+
+        // 2. 对标识区和只读区进行签名
+        byte[] signResult = this.currentIdentity.sign(rawData);
+
+        // 3. 往包签名区中添加签名
+        Signature signature = new Signature(this.currentIdentity, signResult);
+        packet.signatureField.addSignature(signature);
+    }
+
+    public void signCPacket(CPacket cPacket) throws Exception{
+        cPacket.fillDataToFields();
+        this.sign(cPacket.minPacket);
+    }
+
+    public void signInterest(Interest interest) throws Exception{
+        interest.fillDataToFields();
+        this.sign(interest.minPacket);
+    }
+
+    public void signData(Data data) throws Exception{
+        data.fillDataToFields();
+        this.sign(data.minPacket);
+    }
+
+    public void verify(MINPacket minPacket) throws Exception{
+        // 提取签名区的第一个签名进行验证（认为签名区的第一个签名为包的签名，包含标识区和只读区签名）
+        Signature signature = minPacket.signatureField.getSignature(0);
+
+        String identityName = signature.getSigInfo().getKeyLocator().getIdentifier().toUri();
+        Identity identity = this.identifyManager.getIdentityByName(identityName);
+
+        if (identity == null){
+            throw new KeyChainException("Verify failed, could not find the identity");
+        }
+
+        byte[] rawData = getIdentifierAndReadOnlyValueFromPacket(minPacket);
+        identity.verify(rawData, signature.getSigValue().getValue());
+    }
+
+    public void verifyCPacket(CPacket packet) throws Exception{
+        packet.fillDataToFields();
+        verify(packet.minPacket);
+    }
+
+    public void verifyInterest(Interest interest) throws Exception{
+        interest.fillDataToFields();
+        verify(interest.minPacket);
+    }
+
+    public void verifyData(Data data) throws Exception{
+        data.fillDataToFields();
+        verify(data.minPacket);
+    }
+
+    public SafeBag exportSafeBag(Identity identity, String passwd) throws Exception{
+        byte[] res = identity.dump(passwd);
+        SafeBag safeBag = new SafeBag(res);
+        return safeBag;
+    }
+
+    public void importSafeBag(SafeBag safeBag, String passwd, boolean force) throws Exception{
+        Identity identity = Identity.load(safeBag.getValue(), passwd);
+
+        if (!this.identifyManager.existIdentity(identity.getName()) || force){
+            this.identifyManager.saveIdentity(identity, force, false);
+        }else {
+            throw new KeyChainException(String.format("Identify %s is already exists!", identity.getName()));
+        }
+    }
 }

src/main/java/security/SafeBag.java

@@ -8,5 +8,21 @@ package security;
  * @Copyright: MIN-Group；国家重大科技基础设施——未来网络北大实验室；深圳市信息论与未来网络重点实验室
  */
 public class SafeBag {
+    public byte[] getValue() {
+        return value;
+    }
+
+    public void setValue(byte[] value) {
+        this.value = value;
+    }
+
     private byte[] value;
+
+    public SafeBag(){
+
+    }
+
+    public SafeBag(byte[] value){
+        this.value = value;
+    }
 }

src/test/java/security/KeyChainTest.java

@@ -0,0 +1,33 @@
+package security;
+
+import minsecurity.Common;
+import minsecurity.identity.Identity;
+import org.junit.Test;
+
+import java.util.HashMap;
+import java.util.concurrent.ConcurrentHashMap;
+
+public class KeyChainTest {
+    @Test
+    public void testCreateKeyChain(){
+        try{
+            KeyChain keyChain = new KeyChain();
+            Identity identity = new Identity();
+            identity.setName("wzq");
+            identity.setPasswd("123456123456");
+
+            ConcurrentHashMap<String, Identity> identityHashMap = new ConcurrentHashMap<>();
+            identityHashMap.put("/wzq", identity);
+
+            keyChain.getIdentifyManager().setIdentifies(identityHashMap);
+            keyChain.getIdentifyManager().setDefaultIdentity(identity);
+
+            String passwd = "2DD29CA851E7B56E";
+            Identity identity1 = keyChain.getIdentifyManager().createIdentityByName("/wzq1", passwd, false);
+            identity1.unLock(passwd, Common.SM4ECB);
+            System.out.println(identity1.getPrikey());
+        }catch (Exception ex){
+            System.out.println(ex.getMessage());
+        }
+    }
+}