Examples with GraphCollection de.uni_koblenz.aggrimm.icp.crypto.sign.graph.GraphCollection used on opensource projects

Example 11 with GraphCollection

use of de.uni_koblenz.aggrimm.icp.crypto.sign.graph.GraphCollection in project webofneeds by researchstudio-sat.

the class WonSigner method signWholeDataset.

public WonSignatureData signWholeDataset(PrivateKey privateKey, String cert, PublicKey publicKey, String signatureUri) throws Exception {
    String fingerprint = WonHasher.hashToString(publicKey.getEncoded());
    if (logger.isDebugEnabled()) {
        StringWriter sw = new StringWriter();
        RDFDataMgr.write(sw, dataset, Lang.TRIG);
        logger.debug("signing dataset with content: {}", sw.toString());
    }
    List<String> graphURIs = StreamSupport.stream(Spliterators.spliteratorUnknownSize(dataset.listNames(), Spliterator.ORDERED), false).collect(Collectors.toList());
    // create GraphCollection with one NamedGraph that corresponds to this Model
    GraphCollection inputGraphCollection = ModelConverter.fromDataset(dataset);
    // sign the NamedGraph inside that GraphCollection
    SignatureData sigValue = sign(hasher.hashNamedGraphForSigning(inputGraphCollection), privateKey, cert);
    String hash = WonHasher.hashToString(sigValue.getHash());
    WonSignatureData sigRef = new WonSignatureData(graphURIs, signatureUri, sigValue.getSignature(), hash, fingerprint, cert);
    return sigRef;
}

Example 12 with GraphCollection

use of de.uni_koblenz.aggrimm.icp.crypto.sign.graph.GraphCollection in project webofneeds by researchstudio-sat.

the class WonVerifier method verify.

// TODO exceptions
public boolean verify(Map<String, PublicKey> publicKeys) throws Exception {
    // check if there are any signatures at all
    if (verificationState.getSignatures().size() == 0) {
        verificationState.verificationFailed("No signatures found");
        return verificationState.isVerificationPassed();
    }
    // check that the default graph is empty
    if (dataset.getDefaultModel().listStatements().hasNext()) {
        verificationState.verificationFailed("unsigned data found in default graph");
        return verificationState.isVerificationPassed();
    }
    if (!checkMessageURI()) {
        return verificationState.isVerificationPassed();
    }
    // verify each signature's graph
    for (WonSignatureData wonSignatureData : verificationState.getSignatures()) {
        // extract signature graph, signature data and corresponding signed graph
        if (logger.isDebugEnabled()) {
            String loaded = publicKeys.containsKey(wonSignatureData.getVerificationCertificateUri()) ? "loaded" : "NOT LOADED";
            logger.debug("checking signature {} by certificate {}, which is {}", new Object[] { wonSignatureData.getSignatureUri(), wonSignatureData.getVerificationCertificateUri(), loaded });
        }
        // make sure the signed graph specified in signature exists in the message
        List<String> signedGraphs = wonSignatureData.getSignedGraphUris();
        for (String signedGraph : signedGraphs) {
            if (!dataset.containsNamedModel(signedGraph)) {
                verificationState.verificationFailed("Found signature of graph " + signedGraph + " that is not part of this message");
            }
        }
        // is the signature there?
        String sigString = wonSignatureData.getSignatureValue();
        if (sigString == null) {
            verificationState.setVerificationFailed(wonSignatureData.getSignatureUri(), "Failed to compute a signature value " + wonSignatureData.getSignatureUri());
            return verificationState.isVerificationPassed();
        }
        if (sigString.length() == 0) {
            verificationState.setVerificationFailed(wonSignatureData.getSignatureUri(), "Computed an empty signature value " + wonSignatureData.getSignatureUri());
            return verificationState.isVerificationPassed();
        }
        // do we have the public key?
        PublicKey publicKey = publicKeys.get(wonSignatureData.getVerificationCertificateUri());
        if (publicKey == null) {
            verificationState.setVerificationFailed(wonSignatureData.getSignatureUri(), "No public key found for " + wonSignatureData.getVerificationCertificateUri());
            if (logger.isDebugEnabled()) {
                logger.debug("offending message:\n" + RdfUtils.toString(Prefixer.setPrefixes(dataset)));
            }
            return verificationState.isVerificationPassed();
        }
        // check if its fingerprint matches the fingerprint in the signature
        String fingerprint = WonHasher.hashToString(publicKey.getEncoded());
        if (!wonSignatureData.getPublicKeyFingerprint().equals(fingerprint)) {
            verificationState.setVerificationFailed(wonSignatureData.getSignatureUri(), "Fingerprint computed for the " + "specified public key " + wonSignatureData.getVerificationCertificateUri() + " is " + fingerprint + ", " + "which differs from the value found in signature " + wonSignatureData.getSignatureUri());
            return verificationState.isVerificationPassed();
        }
        // normalize, hash and post-hash signed graph data
        GraphCollection inputGraph = ModelConverter.modelsToGraphCollection(dataset, wonSignatureData.getSignedGraphUris().toArray(new String[wonSignatureData.getSignedGraphUris().size()]));
        SignatureData sigData = hasher.hashNamedGraphForSigning(inputGraph);
        // check the hash of the data. It must be identical to the hash in the signature
        BigInteger hashValue = sigData.getHash();
        String hashString = WonHasher.hashToString(hashValue);
        if (!wonSignatureData.getHash().equals(hashString)) {
            verificationState.setVerificationFailed(wonSignatureData.getSignatureUri(), "Computed hash value " + hashString + " differs from value " + wonSignatureData.getHash() + " found in signature " + wonSignatureData.getSignatureUri());
            if (logger.isDebugEnabled()) {
                StringWriter sw = new StringWriter();
                for (String signedGraphUri : wonSignatureData.getSignedGraphUris()) {
                    RDFDataMgr.write(sw, dataset.getNamedModel(signedGraphUri), Lang.TRIG);
                }
                logger.debug("wrong signature hash for graphs {} with content: {}", wonSignatureData.getSignedGraphUris(), sw.toString());
            }
            return verificationState.isVerificationPassed();
        }
        // verify the signature
        Signature sig = Signature.getInstance(WonSigner.SIGNING_ALGORITHM_NAME, SIGNING_ALGORITHM_PROVIDER);
        sig.initVerify(publicKey);
        sig.update(hashValue.toByteArray());
        // Verify
        byte[] sigBytes = Base58.decode(sigString);
        if (!sig.verify(sigBytes)) {
            verificationState.setVerificationFailed(wonSignatureData.getSignatureUri(), "Failed to verify " + wonSignatureData.getSignatureUri() + " with public key " + wonSignatureData.getVerificationCertificateUri());
            // interrupt verification process if one of the graph's verification fails
            return verificationState.isVerificationPassed();
        }
    }
    return verificationState.isVerificationPassed();
}

Example 13 with GraphCollection

use of de.uni_koblenz.aggrimm.icp.crypto.sign.graph.GraphCollection in project webofneeds by researchstudio-sat.

the class ModelConverter method fromDataset.

public static GraphCollection fromDataset(Dataset dataset) {
    GraphCollection graphc = new GraphCollection();
    String name = null;
    Iterator<String> namesIt = dataset.listNames();
    while (namesIt.hasNext()) {
        name = namesIt.next();
        graphc.addGraph(fromModel(name, dataset.getNamedModel(name)));
    }
    return graphc;
}