libidav/pwdstore.h

/*
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
 *
 * Copyright 2024 Olaf Wintermann. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions are met:
 *
 *   1. Redistributions of source code must retain the above copyright
 *      notice, this list of conditions and the following disclaimer.
 *
 *   2. Redistributions in binary form must reproduce the above copyright
 *      notice, this list of conditions and the following disclaimer in the
 *      documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 * POSSIBILITY OF SUCH DAMAGE.
 */

#ifndef LIBIDAV_PWDSTORE_H
#define LIBIDAV_PWDSTORE_H

#ifdef __cplusplus
extern "C" {
#endif

#include <stdlib.h>
#include <inttypes.h>

#include <cx/map.h>
#include <cx/buffer.h>
#include <cx/linked_list.h>
#include "crypto.h"

#ifdef __cplusplus
extern "C" {
#endif

#define PWDSTORE_MAX_LEN 4096
    
/*
 * File Format:
 * 
 * file = header, index, enc_content
 * header = magic, version, enc, pwfunc, salt, indexlen
 * magic = 1 byte
 * version = 1 byte
 * enc = 1 byte
 * pwfunc = 1 byte
 * salt = 16 bytes
 * indexlen = uint32
 * index = { itype length id locations zero }
 * enc_content = iv bytes
 * iv = 16 bytes
 * content = { entry }
 * entry = itype length id length username length password
 * length = uint32
 * zero = 4 zero bytes
 * itype = 1 byte
 * id = string
 * locations = { length string }
 * username = string
 * password = string
 * 
 * The content is AES encrypted with a key derived from a password
 * and the salt. The first 16 bytes are the aes iv.
 * 
 * All integers are big endian
 */
    
#define PWDS_HEADER_SIZE 24
    
typedef struct PwdStore        PwdStore;
typedef struct PwdEntry        PwdEntry;
typedef struct PwdIndexEntry   PwdIndexEntry;

struct PwdStore {
    /*
     * map of all credentials
     * key is the username
     * value is PwdEntry*
     */
    CxMap *ids;
    
    /*
     * list of all credentials with location
     * value is PwdIndexEntry*
     */
    CxList *locations;
    
    /*
     * list of all credentials without location
     * value is PwdIndexEntry*
     */
    CxList *noloc;
    
    /*
     * index map that contains all elements from the lists
     * 'locations' and 'noloc'
     */
    CxMap *index;
    
    /*
     * a buffer containing the complete file content
     */
    CxBuffer *content;
    
    /*
     * key used for encryption/decryption
     */
    DavKey *key;
    
    /*
     * optional shell command, that is used for getting the master password
     */
    char *unlock_cmd;
    
    /*
     * optional shell command, that is exected when the secretstore is closed
     */
    char *lock_cmd;
    
    /*
     * start offset of the encrypted buffer
     */
    uint32_t encoffset;
    
    /*
     * indicates if the PwdStore is decrypted with pwdstore_decrypt
     */
    uint8_t isdecrypted;
};

#define PWDS_MAGIC(p) (p)->content->space[0]
#define PWDS_VERSION(p) (p)->content->space[1]
#define PWDS_ENC(p) (p)->content->space[2]
#define PWDS_PWFUNC(p) (p)->content->space[3]

#define PWDS_MAGIC_CHAR 'P'

struct PwdEntry {
    char *id;
    char *user;
    char *password;
};

struct PwdIndexEntry {
    char *id;
    CxList *locations;
};

/*
 * opens the password store
 * the content is still encrypted and must be decrypted using pwdstore_decrypt
 */
PwdStore* pwdstore_open(const char *file);

PwdStore* pwdstore_new(void);

/*
 * decrypts the password store with the previously set password
 */
int pwdstore_decrypt(PwdStore *p);

int pwdstore_setpassword(PwdStore *p, const char *password);

void pwdstore_encsettings(PwdStore *p, uint8_t enc, uint8_t pwfunc);

void pwdstore_free_entry(PwdEntry *e);
void pwdstore_free(PwdStore* p);

int pwdstore_has_id(PwdStore *s, const char *id);
int pwdstore_has_location(PwdStore *s, const char *location);

PwdEntry* pwdstore_get(PwdStore *p, const char *id);

void pwdstore_put(PwdStore *p, const char *id, const char *username, const char *password);
void pwdstore_put_index(PwdStore *p, char *id, CxList *locations);

void pwdstore_remove_entry(PwdStore *s, const char *id);

int pwdstore_store(PwdStore *p, const char *file);


int pwdstore_decrypt_secrets(PwdStore *secrets);


typedef char*(*pwdstore_pwinput_func)(void *userdata);

void pwdstore_set_pwinput_func(pwdstore_pwinput_func func, void *userdata);

char * pwdstore_default_pwinput(char *prompt);


/* private */
int pwdstore_getindex(PwdStore *s);

#ifdef __cplusplus
}
#endif

#endif /* LIBIDAV_PWDSTORE_H */