Hang coconut issuance off the validator-api (#679)

* Hand coconut issuance off the validator-api * git to cargo * Move to own module * Integrate tauri-client, extract common interface * cargo fmt * Ergonomics * Facelift * Wrap up tauri client * Set up publish * Fix fmt * Install CI dependencies * Inline deps * Remove mac deps * Add dist dir * Fix beta clippy nag * Commit some gateway work * Thread coconut creds through gateway handshake * Push in progress patch * Move State from tauri client to coconut interface * Move get_aggregated_signature from tauri client to coconut interface * Move prove_credential from tauri client to coconut interface * Update sphinx version * Mount coconut routes and manage config file in rocket * Split default validator endpoint into host and port * Add init for simple credential initialization * Fix common gateway client * Add coconut cred to webassembly client * Add coconut cred to socks5 client * Add coconut cred to native client * Remove direct coconut-rs dependency * Use only coconut interface in validator api * Leave validator-api out of workspace and update Cargo.lock * Fix clippy warnings and update Cargo.lock after rebase * Switch from attohttpc to reqwest for async gets This is not only needed for using async requests, but also because attohttpc causes OpenSSL issues when cross compiling the webassembly client. * Replace attohttpc with reqwest for puts too * Make tauri client commands async * Fix borrow error * Guard gateway server code from compiling for wasm (client) * Fix clippy wasm client * Fix tests * Fix clippy in tauri client * Remove commented code * Update comment of init message * Remove unnecessary hex dependency * Replace config argument with key_pair * Use `trim()` for whitespace removal * Move verification key query higher up the function calls * Put KeyPair instead of Config into rocket's managed items * Re-enable tauri client verify button * Move verification key up the function calls for prove_credential * Use consts for verification_key and blind_sign routes of validator-api * Replace `match` with `map_err` * Fix typo * Remove now unnecessary `Clone` derives ... as config is no longer managed by rocket * Replace `match` with `map_err` * Make `InternalSignRequest` really internal to validator-api * Make `with_keypair` live up to its name * Update Cargo.lock after rebase * Replace String error with HandshakeError * Add CoconutInterfaceError to coconut-interface * Format the new error in tauri client * Remove from default, as wasm client doesn't build * Put public key as init argument... ... for the public attributes of the credential * Use the hash_to_scalar function to make public key into attribute Use the function from cli-demo-rs from https://github.com/nymtech/coconut to make the identity public key into a public attribute. * Replace vector with array for InitMessage As we know beforehand the size of the keys, we can use fixed size array instead of vectors. This eliminates the need for a prefixed length in the serialized form of the InitMessage structure and enables a easy deserialization of the remote identity before the actual bincode deserialization that we do in the handshake process. Before this, the `extract_remote_identity_from_register_init` function attempted to deserialize into a public key the length-prefixed public key received from the client, thus failing sporadically with a `Cannot decompress Edwards point` error. * Pass public and private attributes to state `init` instead of PublicKey * Make tauri call with dummy attributes * Make clients call with their keypairs * Revert "Make clients call with their keypairs" This reverts commit b348f47f7a. * Put dummy, bandwidth private attribute Co-authored-by: Bogdan-Ștefan Neacșu <bogdan@nymtech.net>
2021-08-13 13:27:40 +02:00
parent abb4537551
commit 28e55c6de6
133 changed files with 27169 additions and 153 deletions
@@ -1,7 +1,9 @@
 // Copyright 2021 - Nym Technologies SA <contact@nymtech.net>
 // SPDX-License-Identifier: Apache-2.0

+use crate::config::DEFAULT_VALIDATOR_HOST;
 use crate::network_monitor::monitor::receiver::{GatewayClientUpdate, GatewayClientUpdateSender};
+use coconut_interface::Credential;
 use crypto::asymmetric::identity::{self, PUBLIC_KEY_LENGTH};
 use futures::channel::mpsc;
 use futures::stream::{self, FuturesUnordered, StreamExt};
@@ -20,6 +22,7 @@ use std::sync::Arc;
 use std::task::Poll;
 use std::time::Duration;
 use tokio::time::Instant;
+use validator_client::validator_api::VALIDATOR_API_PORT;

 const TIME_CHUNK_SIZE: Duration = Duration::from_millis(50);

@@ -99,7 +102,7 @@ impl PacketSender {
        }
    }

-    fn new_gateway_client(
+    async fn new_gateway_client(
        address: String,
        identity: identity::PublicKey,
        fresh_gateway_client_data: &FreshGatewayClientData,
@@ -110,6 +113,17 @@ impl PacketSender {
        // TODO: future optimization: if we're remaking client for a gateway to which we used to be connected in the past,
        // use old shared keys
        let (message_sender, message_receiver) = mpsc::unbounded();
+
+        let coconut_credential = Credential::init(
+            vec![format!(
+                "http://{}:{}",
+                DEFAULT_VALIDATOR_HOST, VALIDATOR_API_PORT
+            )],
+            identity,
+        )
+        .await
+        .expect("Could not initialize coconut credential");
+
        // currently we do not care about acks at all, but we must keep the channel alive
        // so that the gateway client would not crash
        let (ack_sender, ack_receiver) = mpsc::unbounded();
@@ -122,6 +136,7 @@ impl PacketSender {
                message_sender,
                ack_sender,
                fresh_gateway_client_data.gateway_response_timeout,
+                coconut_credential,
            ),
            (message_receiver, ack_receiver),
        )
@@ -206,7 +221,8 @@ impl PacketSender {
                packets.clients_address,
                packets.pub_key,
                &fresh_gateway_client_data,
-            );
+            )
+            .await;

            // Put this in timeout in case the gateway has incorrectly set their ulimit and our connection
            // gets stuck in their TCP queue and just hangs on our end but does not terminate