MasterPassword/platform-darwin/Source/MPSecrets.m

//==============================================================================
// This file is part of Master Password.
// Copyright (c) 2011-2017, Maarten Billemont.
//
// Master Password is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// Master Password is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
//
// You can find a copy of the GNU General Public License in the
// LICENSE file.  Alternatively, see <http://www.gnu.org/licenses/>.
//==============================================================================

#import "MPSecrets.h"
#import "base64.h"

// printf <secret> | openssl enc -[ed] -aes-128-cbc -a -A -K <appSecret> -iv 0
#if TARGET_OS_IOS
NSString *appSecret    = @"946a6b12e6e6e004cc35bad1ea11478c";
NSString *appSalt      = @"uBcsbZeTB8TfSS7dDw4yUq6wMZD/2nREvR0mqzqsNXvv9guh+62hkt99ly6QcJ5n";
NSString *sentryDSN    = @"tmVjdMN9DpZ+0EIrrvHi44hWfaBkwrlrxjBkdeau2rDk+zlvgSdAZkAvNj7m1V+5NUR7i8Y/NumNKOaYlWJvPynEMJ4ZBvPepSbivgVvmr8=";
NSString *countlyKey   = @"mDnMZyxwoq4ENgYnGYTzW8wsyiJQlmNKxkRLj88/nrs0mzE+zVjs6Y5LAT3+AYBB";
NSString *countlySalt  = @"2COFsZd+4FNAU6jvI/HUu297mkZALzRIyKv5mD3vs55BHXDowh62A7FursCYS+cG";
#elif TARGET_OS_MAC
NSString *appSecret    = @"24fcbadccb5789b2a969c0c811f86702";
NSString *appSalt      = @"0N1fzSanIOCb7OQ4hEshXSjwEPXAXMhPBKQJeEcYPor8FWz76IpdB8ZHa3Wyb7o9";
NSString *sentryDSN    = @"2RbeS9wfzQEOKB9MG3EWLDe+N8iXYNtWc8tovMcBmhuMIeyAHYKqo5eclSEYyM6lA73Y7FFHqUyTLbEmOR6MAU2PtWAitLdxOZlq3VnbXjI=";
NSString *countlyKey   = @"uiasXoQNtkPQHvpvNqEE5N/tw/F1Hnzm+4ViSJ38EMeoWGvDQPJ+Kt9zPhb8Qans";
NSString *countlySalt  = @"/raQUNxKQdxXRR5VFmCDJdyyJE8f6SPrTO5Y4z0kJH+wCrjaZ1VvCq+JSmOsBkz2";
#endif

NSString *decrypt(NSString *secret) {

    if (!secret)
        return nil;

    const char *secretString = [secret cStringUsingEncoding:NSUTF8StringEncoding];
    size_t length = mpw_base64_decode_max( secretString );
    if (!length)
        return nil;

    size_t keyLength;
    const uint8_t *key = mpw_unhex( [appSecret cStringUsingEncoding:NSUTF8StringEncoding], &keyLength );
    if (!key)
        return nil;

    uint8_t *base64 = calloc( length, sizeof( uint8_t ) );
    length = mpw_base64_decode( base64, secretString );

    const void *plain = mpw_aes_decrypt( key, keyLength, base64, &length );
    mpw_free( &key, keyLength );
    @try {
        return [[NSString alloc] initWithBytes:plain length:length encoding:NSUTF8StringEncoding];
    }
    @finally {
        mpw_free( &plain, length );
    }
}

NSString *digest(NSString *value) {

    if (!value)
        return nil;

    NSUInteger appSaltLength, valueLength;
    const void *appSaltString = [decrypt( appSalt ) cStringUsingEncoding:NSUTF8StringEncoding length:&appSaltLength];
    const void *valueString = [value cStringUsingEncoding:NSUTF8StringEncoding length:&valueLength];
    const uint8_t *digest = mpw_hash_hmac_sha256( appSaltString, appSaltLength, valueString, valueLength );
    if (!digest)
        return nil;

    @try {
        return [[NSString alloc] initWithBytes:mpw_hex( digest, 32 ) length:16 encoding:NSUTF8StringEncoding];
    }
    @finally {
        mpw_free( &digest, 32 );
    }
}