systemMain.cpp 6.5 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168
  1. #include <phpcpp.h>
  2. #include <string.h>
  3. #include <string>
  4. #include <unistd.h>
  5. #include <errno.h>
  6. #include<sys/time.h>
  7. #include <fcntl.h>
  8. #include <sys/types.h>
  9. #include <sys/stat.h>
  10. #include <stdio.h>
  11. #include "crypto.h"
  12. #include "ProtobufLAInitiator.h"
  13. using namespace std;
  14. // #include <unistd.h>
  15. // based off the example functionreturnvalue.cpp in PHP-CPP
  16. /**
  17. * Namespace to use
  18. */
  19. //using namespace std;
  20. #define DECRYPTOR_PORT 3825
  21. int local_attestation_successful=0;
  22. int __ImageBase=0;
  23. class Mitigator : public Php::Base
  24. {
  25. private:
  26. static std::string mitigator_pubkey_header_value;
  27. static std::string mitigator_pubkey_header;
  28. static int time_file_fd;
  29. public:
  30. Mitigator() = default;
  31. virtual ~Mitigator() = default;
  32. static void local_attestation_initiator_wrapper()
  33. {
  34. setbuf(stdout,NULL);
  35. uint32_t return_sgx, base64_encoded_token_H_length;
  36. unsigned char* base64_encoded_mitigator_header_and_value;
  37. base64_encoded_mitigator_header_and_value = (unsigned char*) malloc( 400 );
  38. // unsigned char base64_encoded_mitigator_header[229] ; //216=(ceil(160/3) * 4) + 1 (for null character) + 21 for "Mitigator-Public-Key"
  39. memcpy(base64_encoded_mitigator_header_and_value, mitigator_pubkey_header.c_str(), mitigator_pubkey_header.length());
  40. return_sgx = local_attestation_initiator(DECRYPTOR_PORT);
  41. if(return_sgx != 0)
  42. {
  43. if(return_sgx== 0xFFFFFFFF)
  44. {
  45. perror("\nCould not set up the socket: had the following error: "); fflush(stderr);
  46. }
  47. else
  48. {
  49. printf("\nHad the following error in SGX local attestation: 0x%x", return_sgx);
  50. fflush(stdout);
  51. }
  52. }
  53. else {
  54. printf("\nSuccessful LA with port %d.\n", DECRYPTOR_PORT);
  55. fflush(stdout);
  56. return_sgx= post_local_attestation_get_mitigator_header(base64_encoded_mitigator_header_and_value + mitigator_pubkey_header.length(),
  57. &base64_encoded_token_H_length);
  58. if(return_sgx != 0)
  59. {
  60. printf("\nHad the following error in SGX POST local attestation: 0x%x", return_sgx);
  61. fflush(stdout);
  62. }
  63. mitigator_pubkey_header_value=std::string((char*)base64_encoded_mitigator_header_and_value,mitigator_pubkey_header.length()+base64_encoded_token_H_length);
  64. }
  65. free(base64_encoded_mitigator_header_and_value);
  66. time_file_fd=open("target_time.txt", O_APPEND | O_WRONLY);
  67. }
  68. static Php::Value get_mitigator_header()
  69. {
  70. return mitigator_pubkey_header_value;
  71. }
  72. static Php::Value php_decrypt_wrapper(Php::Parameters &params )
  73. {
  74. struct timeval tv1, tv2;
  75. char time_buf[60] = {0};
  76. size_t bytes_written;
  77. unsigned long int new_time, old_time;
  78. gettimeofday(&tv1, NULL);
  79. unsigned char* plaintext_user_data, * base64_client_ciphertext, *base64_client_public_key, *client_data;
  80. uint32_t plaintext_length, base64_client_ciphertext_length, base64_client_public_key_length, client_data_length, ret_status;
  81. std::string plaintext_user_data_str;
  82. base64_client_ciphertext = (unsigned char*) static_cast<const char*>(params[1]);
  83. base64_client_public_key = (unsigned char*) static_cast<const char*>(params[0]);
  84. base64_client_ciphertext_length = params[1].size();
  85. base64_client_public_key_length = params[0].size();
  86. plaintext_user_data = (unsigned char*) malloc( base64_client_ciphertext_length );
  87. plaintext_length = base64_client_ciphertext_length;
  88. memcpy(plaintext_user_data, base64_client_ciphertext, base64_client_ciphertext_length);
  89. plaintext_user_data_str = std::string((char*) plaintext_user_data, base64_client_ciphertext_length);
  90. client_data = (unsigned char*) malloc(base64_client_ciphertext_length + base64_client_public_key_length);
  91. ret_status = base64_decoding_wrapper(client_data, base64_client_public_key, base64_client_public_key_length);
  92. if(ret_status<=0)
  93. {
  94. printf("Could not do base64 decoding correctly.\n"); fflush(stdout);
  95. free(plaintext_user_data);
  96. free(client_data);
  97. return plaintext_user_data_str;
  98. }
  99. client_data_length = ret_status;
  100. ret_status = base64_decoding_wrapper(client_data + client_data_length, base64_client_ciphertext, base64_client_ciphertext_length);
  101. if(ret_status<=0)
  102. {
  103. printf("Could not do base64 decoding correctly.\n"); fflush(stdout);
  104. free(plaintext_user_data);
  105. free(client_data);
  106. return plaintext_user_data_str;
  107. }
  108. client_data_length += ret_status;
  109. ret_status=decrypt_client_data_through_decryptor(client_data, client_data_length, (unsigned char*) plaintext_user_data, &plaintext_length);
  110. if(ret_status != 0)
  111. {
  112. printf("Received error code when trying to decrypt data thru decryptor: 0x%02x\n", ret_status); fflush(stdout);
  113. free(client_data);
  114. free(plaintext_user_data);
  115. return plaintext_user_data_str;
  116. }
  117. plaintext_user_data_str = std::string((char*) plaintext_user_data, plaintext_length);
  118. free(plaintext_user_data);
  119. free(client_data);
  120. gettimeofday(&tv2, NULL);
  121. new_time=tv2.tv_usec + tv2.tv_sec * 1000000;
  122. old_time=tv1.tv_usec + tv1.tv_sec * 1000000;
  123. bytes_written=sprintf(time_buf, "%lu %lu\n", old_time, new_time);
  124. write(time_file_fd, time_buf, bytes_written);
  125. return plaintext_user_data_str;
  126. }
  127. };
  128. std::string Mitigator::mitigator_pubkey_header_value=std::string("!");
  129. std::string Mitigator::mitigator_pubkey_header=std::string("Mitigator-Public-Key:");
  130. int Mitigator::time_file_fd=0;
  131. extern "C" {
  132. // export the "get_module" function that will be called by the Zend engine
  133. PHPCPP_EXPORT void *get_module()
  134. {
  135. // create extension
  136. static Php::Extension extension("decryptor_la_setup_and_decryption","1.0");
  137. Php::Class<Mitigator> mitigator("Mitigator");
  138. mitigator.method<&Mitigator::get_mitigator_header>("get_mitigator_header");
  139. mitigator.method<&Mitigator::local_attestation_initiator_wrapper>("local_attestation_initiator_wrapper");
  140. mitigator.method<&Mitigator::php_decrypt_wrapper>("php_decrypt_wrapper", { Php::ByVal("string", Php::Type::String), Php::ByVal("string", Php::Type::String) } );
  141. extension.onStartup(&Mitigator::local_attestation_initiator_wrapper);
  142. // return the extension module
  143. extension.add(mitigator);
  144. return extension.module();
  145. }
  146. }