|
| Lime (std::unique_ptr< lime::Db > &&localStorage, const std::string &deviceId, const std::string &url, const limeX3DHServerPostData &X3DH_post_data) |
| Create user constructor. More...
|
|
| Lime (std::unique_ptr< lime::Db > &&localStorage, const std::string &deviceId, const std::string &url, const limeX3DHServerPostData &X3DH_post_data, const long int Uid) |
| Load user constructor. More...
|
|
| ~Lime () |
|
| Lime (Lime< Curve > &a)=delete |
|
Lime< Curve > & | operator= (Lime< Curve > &a)=delete |
|
void | publish_user (const limeCallback &callback, const uint16_t OPkInitialBatchSize) override |
| Publish on X3DH server the user, it is performed just after creation in local storage this will, on success, trigger generation and sending of SPk and OPks for our new user. More...
|
|
void | delete_user (const limeCallback &callback) override |
| Delete user from local Storage and from X3DH server. More...
|
|
void | delete_peerDevice (const std::string &peerDeviceId) override |
| Purge cached sessions for a given peer Device (used when a peer device is being deleted) More...
|
|
void | update_SPk (const limeCallback &callback) override |
| Check if the current SPk needs to be updated, if yes, generate a new one and publish it on server. More...
|
|
void | update_OPk (const limeCallback &callback, uint16_t OPkServerLowLimit, uint16_t OPkBatchSize) override |
| check if we shall upload more OPks on X3DH server More...
|
|
void | get_Ik (std::vector< uint8_t > &Ik) override |
| Retrieve self public Identity key. More...
|
|
void | encrypt (std::shared_ptr< const std::string > recipientUserId, std::shared_ptr< std::vector< RecipientData >> recipients, std::shared_ptr< const std::vector< uint8_t >> plainMessage, const lime::EncryptionPolicy encryptionPolicy, std::shared_ptr< std::vector< uint8_t >> cipherMessage, const limeCallback &callback) override |
| Encrypt a buffer(text or file) for a given list of recipient devices if specified localDeviceId is not found in local Storage, throw an exception. More...
|
|
lime::PeerDeviceStatus | decrypt (const std::string &recipientUserId, const std::string &senderDeviceId, const std::vector< uint8_t > &DRmessage, const std::vector< uint8_t > &cipherMessage, std::vector< uint8_t > &plainMessage) override |
| Decrypt the given message. More...
|
|
void | set_x3dhServerUrl (const std::string &x3dhServerUrl) override |
| Set the X3DH key server URL for this identified user. More...
|
|
std::string | get_x3dhServerUrl () override |
| Get the X3DH key server URL for this identified user. More...
|
|
void | stale_sessions (const std::string &peerDeviceId) override |
| Stale all sessions between localDeviceId and peerDevice. If peerDevice keep using this session to encrypt and we decrypt with success, the session will be reactivated but to encrypt a message to this peerDevice, a new session will be created. If no session is active between the given device, this call has no effect. More...
|
|
virtual | ~LimeGeneric () |
|
template<typename Curve>
class lime::Lime< Curve >
Implement the abstract class LimeGeneric.
- Template Parameters
-
Curve | The elliptic curve to use: C255 or C448 |
template<typename Curve >
void lime::Lime< Curve >::encrypt |
( |
std::shared_ptr< const std::string > |
recipientUserId, |
|
|
std::shared_ptr< std::vector< RecipientData >> |
recipients, |
|
|
std::shared_ptr< const std::vector< uint8_t >> |
plainMessage, |
|
|
const lime::EncryptionPolicy |
encryptionPolicy, |
|
|
std::shared_ptr< std::vector< uint8_t >> |
cipherMessage, |
|
|
const limeCallback & |
callback |
|
) |
| |
|
overridevirtual |
Encrypt a buffer(text or file) for a given list of recipient devices if specified localDeviceId is not found in local Storage, throw an exception.
Clarification on recipients:
recipients information needed are a list of the device Id and one userId. The device Id shall be their GRUU while the userId is a sip:uri.
recipient User Id is used to identify the actual intended recipient. Example: alice have two devices and is signed up on a conference having bob and claire as other members. The recipientUserId will be the conference sip:uri and device list will include:
- alice other device
- bob devices
- claire devices If Alice write to Bob only, the recipientUserId will be bob sip:uri and recipient devices list :
- alice other device
- bob devices
In all cases, the identified source of the message will be the localDeviceId
If the X3DH server can't provide keys for a peer device, its status is set to fail and its DRmessage is empty. Other devices get their encrypted message If no peer device could get encrypted for all of them are missing keys on the X3DH server, the callback will still be called with success exit status
- Note
- all parameters are shared pointers as the process being asynchronous, the ownership will be taken internally exempting caller to manage the buffers.
- Parameters
-
[in] | recipientUserId | the Id of intended recipient, shall be a sip:uri of user or conference, is used as associated data to ensure no-one can mess with intended recipient |
[in,out] | recipients | a list of RecipientData holding:
- the recipient device Id(GRUU)
- an empty buffer to store the DRmessage which must then be routed to that recipient
- the peer Status. If peerStatus is set to fail, this entry is ignored otherwise the peerStatus is set by the encrypt, see PeerDeviceStatus definition for details
|
[in] | plainMessage | a buffer holding the message to encrypt, can be text or data. |
[in] | encryptionPolicy | select how to manage the encryption: direct use of Double Ratchet message or encrypt in the cipher message and use the DR message to share the cipher message key |
[out] | cipherMessage | points to the buffer to store the encrypted message which must be routed to all recipients(if one is produced, depends on encryption policy) |
[in] | callback | This operation contact the X3DH server and is thus asynchronous, when server responds, this callback will be called giving the exit status and an error message in case of failure. It is advised to capture a copy of cipherMessage and recipients shared_ptr in this callback so they can access the output of encryption as it won't be part of the callback parameters. |
Implements lime::LimeGeneric.
template<typename Curve >
void lime::Lime< Curve >::stale_sessions |
( |
const std::string & |
peerDeviceId | ) |
|
|
overridevirtual |
Stale all sessions between localDeviceId and peerDevice. If peerDevice keep using this session to encrypt and we decrypt with success, the session will be reactivated but to encrypt a message to this peerDevice, a new session will be created. If no session is active between the given device, this call has no effect.
- Parameters
-
[in] | peerDeviceId | The device Id of peer, shall be its GRUU |
Implements lime::LimeGeneric.