aboutsummaryrefslogtreecommitdiffstats
path: root/src/main/java/eu/siacs/conversations/crypto (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Ask for key trust when sending messagesAndreas Straub2015-07-191-37/+88
| | | | | | If the contact (or the own account) has keys that have UNDECIDED trust, we now drop the user into the new TrustKeysActivity, where they have to decide for each new key whether it should be TRUSTED or UNTRUSTED.
* Send correct body for HTTP filesAndreas Straub2015-07-191-1/+7
| | | | | When using HTTP upload to send files, take care to transmit only the URL rather than the entire body, which contains metadata.
* Fix trust status for outgoing messagesAndreas Straub2015-07-191-8/+8
| | | | | | Tag sent messages with own fingerprint, set own fingerprint as always trusted, include own fingerprint in database trust search, explicitly reset trust colorfilter
* Ensure that available sessions are always usedAndreas Straub2015-07-191-9/+30
| | | | | | | | | | | | | | | | | | Any time a new session is established, call syncRosterToDisk() to ensure that on subsequent restoreFromDatabase() calls, the roster is actually available. This is important so that initAccountServices() can properly initialize the SessionMap. This prevents a race condition where after adding a new account and initiating sessions with it, if the app is killed (e.g. by reinstall) before triggering a syncRosterToDisk(), subsequent restores will not have the roster available, leading to missing XmppAxolotlSessions in the SessionMap cache. As a result of this, a new session was initiated when sending a new message, and received messages could not be tagged with the originating session's fingerprint. As an added sanity check, go to the database to confirm no records are present before creating fresh XmppAxolotlSession objects (both in the sending and receiving case).
* Fix and expand key regeneration functionAndreas Straub2015-07-191-9/+18
| | | | | | Wipe session cache to prevent stale sessions being used. Wipe fetch status cache to enable recreation of sessions. Regenerate deviceId, so that foreign devices will talk to us again.
* Overhauled Message taggingAndreas Straub2015-07-192-43/+68
| | | | | | Messages are now tagged with the IdentityKey fingerprint of the originating session. IdentityKeys have one of three trust states: undecided (default), trusted, and untrusted/not yet trusted.
* Use full int range for device IDsAndreas Straub2015-07-191-1/+1
|
* Clean up unused constantAndreas Straub2015-07-191-1/+0
|
* Make some fields finalAndreas Straub2015-07-191-3/+3
|
* Clean up loggingAndreas Straub2015-07-191-54/+61
| | | | | Add a fixed prefix to axolotl-related log messages, set log levels sensibly.
* Add basic PEP managemend UI to EditAccountActivityAndreas Straub2015-07-191-0/+33
| | | | | | | | | EditAccountActivity now show own fingerprint, and gives an option to regenerate local keying material (and wipe all sessions associated with the old keys in the process). It also now displays a list of other own devices, and gives an option to remove all but the current device.
* Fix devicelist update handlingAndreas Straub2015-07-191-0/+5
| | | | | | No longer store own device ID (so that we don't encrypt messages for ourselves), verify that own device ID is present in update list (otherwise republish), reflect update in UI.
* Only cache session if successfully establishedAndreas Straub2015-07-191-1/+6
| | | | | | | | When receiving a message, only remember the XmppAxolotlSession wrapper if the prospective session was actually established. This prevents us from erroneously adding empty sessions that are never established using received PreKeyWhisperMessages, which would lead to errors if we try to use them for sending.
* Return empty set on invalid PEP devicelistAndreas Straub2015-07-191-1/+2
|
* Trust all IdentityKeysAndreas Straub2015-07-191-2/+3
| | | | | | | | | The trust-on-first-use policy leads to problems when receiving messages from two different devices of a contact before sending a message to them (as their IdentityKeys will not have been added yet). Since session trust will be managed externally anyway, this change is not a security problem, and will allow us to decrypt messages from yet-untrusted sessions.
* Refresh PEP on session establishAndreas Straub2015-07-191-0/+18
| | | | | | | | We now track preKeys used to establish incoming sessions with us. On each new established session, we remove the used prekey from PEP. We have to do this because libaxolotl-java internally clears the used preKey from its storage, so we will not be able to establish any future sessions using that key.
* Fix asynchronous axolotl message sendingAndreas Straub2015-07-191-6/+23
| | | | | | | | | | XmppConnectionService.sendMessage() now dispatches messages to the AxolotlService, where they only are prepared for sending and cached. AxolotlService now triggers a XmppConnectionService.resendMessage(), which then handles sending the cached message packet. This transparently fixes, e.g., handling of messages sent while we are offline.
* Properly track message senderAndreas Straub2015-07-192-11/+12
| | | | | | | Previously, the sender was assumed to be the conversation counterpart. This broke carboned own-device messages. We now track the sender properly, and also set the status (sent by one of the own devices vs received from the counterpart) accordingly.
* Rework PEP content verificationAndreas Straub2015-07-191-47/+61
| | | | | | Now checks which part(s) are out of sync w/ local storage, and updates only those, rather than assuming the entire node corrupt and overwriting it all (especially relevant for preKey list)
* Formatting fixesAndreas Straub2015-07-191-2/+2
|
* When receiving, add mock session if none existsAndreas Straub2015-07-191-1/+1
| | | | | | | | | | We need a session object in order to build a session from a PreKeyWhisperMessage, so add an empty one when none exists on receiving a message. Warning: this will break right now if the session can not be constructed from the received message.There will be an invalid session which will break if we try to send using it.
* Tag messages with originating sessionAndreas Straub2015-07-191-0/+5
| | | | | This can be used later in order to display trust status of messages, as well as for potential resending of messages in case of preKey conflicts.
* Fetch bundles on-demand, encrypt in backgroundAndreas Straub2015-07-191-42/+91
| | | | | | | | | | | Bundles are now fetched on demand when a session needs to be established. This should lessen the chance of changes to the bundles occuring before they're used, as well as lessen the load of fetching bundles. Also, the message encryption is now done in a background thread, as this can be somewhat costly if many sessions are present. This is probably not going to be an issue in real use, but it's good practice anyway.
* Use bareJid for own session retrievalAndreas Straub2015-07-191-1/+1
|
* Migrate to new PEP layoutAndreas Straub2015-07-191-118/+134
| | | | Merge prekeys into bundle node
* Formatting fixesAndreas Straub2015-07-191-22/+22
|
* Save IdentityKeys in databaseAndreas Straub2015-07-191-47/+23
|
* Reformat code to use tabsAndreas Straub2015-07-192-985/+985
| | | | This really sucks to do it like this. Sorry. :(
* Added PEP and message protocol layersAndreas Straub2015-07-191-0/+208
| | | | Can now fetch/retrieve from PEP, as well as encode/decode messages
* Reworked axolotl protocol layerAndreas Straub2015-07-193-38/+456
| | | | Numerous fixes
* CryptoNext persistance layer mockupAndreas Straub2015-07-192-0/+444
| | | | | Initial sketch of the peripheral storage infrastructure for the new axolotl-based encryption scheme.
* renamed HttpConnection to HttpDownloadConnectionDaniel Gultsch2015-07-101-1/+1
|
* added null check in sasl response verifierDaniel Gultsch2015-07-101-1/+1
|
* changed mime type handlingDaniel Gultsch2015-07-011-1/+1
|
* made httpconnection (download) ready all kind of filesDaniel Gultsch2015-06-301-2/+2
|
* refactored bodyContainsDownloadable to be more flexibleDaniel Gultsch2015-06-301-1/+1
|
* untested pgp support for http uploadDaniel Gultsch2015-06-291-5/+9
|
* renamed OtrEngine to OtrServiceDaniel Gultsch2015-05-261-3/+3
|
* OTR: Fix onContactStatusChanged & dont archive OTRBrianBlade2015-04-211-1/+1
| | | | | | | | | - Fix session handling on contact status change: Do not reset potentially active sessions; check peer's OTR-resource on disconnect - use no-permanent-store hint instead of no-store to ensure finished messages are delivered to offline/disconnected clients - add no-permanent-store to ask compliant servers not to archive OTR messages
* Fix OTR-Error messagesBrianBlade2015-04-011-16/+22
| | | | | Send out OTR-Errors on unreadableMessageReceived() as well, not only on messageFromAnotherInstanceReceived
* respond to unreadable OTR messages with error message. fixed #1021iNPUTmice2015-03-211-3/+15
|
* added typing notifications through XEP-0085. fixed #210iNPUTmice2015-02-211-0/+14
|
* otr4j: update to 0.22Michael2015-01-201-0/+6
|
* do not check image file size over http if accepted file size is 0Daniel Gultsch2015-01-111-3/+6
|
* some further otr improvementsDaniel Gultsch2015-01-021-1/+1
|
* prefer PLAIN over DIGEST-MD5Daniel Gultsch2015-01-021-1/+1
| | | | | DIGEST-MD5 seems to be broken for a lot of cases (OpenFire) switched priority of PLAIN to not cause any security errors
* improved OTR verification part oneDaniel Gultsch2015-01-021-3/+3
|
* mark otr messages as no-store for mamiNPUTmice2014-12-101-0/+1
|
* fixed digest-md5iNPUTmice2014-12-041-0/+4
|
* Make sure SASL tokenizer strips stringsSam Whited2014-12-022-1/+5
| | | | Fix DIGEST-MD5 auth (make sure we're not splitting on BASE64 `==')
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-18 06:30:35 +0000