99 lines
3.0 KiB
Python
99 lines
3.0 KiB
Python
# standard imports
|
|
import logging
|
|
import base64
|
|
|
|
# third-party imports
|
|
from cryptography.fernet import Fernet
|
|
#import psycopg2
|
|
#from psycopg2 import sql
|
|
#from psycopg2.extensions import make_dsn
|
|
from sqlalchemy import create_engine, text
|
|
from sqlalchemy.orm import sessionmaker
|
|
import sha3
|
|
|
|
# local imports
|
|
from .interface import Keystore
|
|
from crypto_dev_signer.common import strip_hex_prefix
|
|
from . import keyapi
|
|
|
|
logging.basicConfig(level=logging.DEBUG)
|
|
logg = logging.getLogger(__file__)
|
|
|
|
|
|
def to_bytes(x):
|
|
return x.encode('utf-8')
|
|
|
|
|
|
class ReferenceKeystore(Keystore):
|
|
|
|
schema = [
|
|
"""CREATE TABLE IF NOT EXISTS ethereum (
|
|
id SERIAL NOT NULL PRIMARY KEY,
|
|
key_ciphertext VARCHAR(256) NOT NULL,
|
|
wallet_address_hex CHAR(40) NOT NULL
|
|
);
|
|
""",
|
|
"""CREATE UNIQUE INDEX IF NOT EXISTS ethereum_address_idx ON ethereum ( wallet_address_hex );
|
|
""",
|
|
]
|
|
|
|
def __init__(self, dsn, **kwargs):
|
|
logg.debug('starting db session with dsn {}'.format(dsn))
|
|
self.db_engine = create_engine(dsn)
|
|
self.db_session = sessionmaker(bind=self.db_engine)()
|
|
for s in self.schema:
|
|
self.db_session.execute(s)
|
|
self.db_session.commit()
|
|
self.symmetric_key = kwargs.get('symmetric_key')
|
|
|
|
|
|
def __del__(self):
|
|
logg.debug('closing db session')
|
|
self.db_session.close()
|
|
|
|
|
|
def get(self, address, password=None):
|
|
safe_address = strip_hex_prefix(address)
|
|
s = text('SELECT key_ciphertext FROM ethereum WHERE wallet_address_hex = :a')
|
|
r = self.db_session.execute(s, {
|
|
'a': safe_address,
|
|
},
|
|
)
|
|
k = r.first()[0]
|
|
return self._decrypt(k, password)
|
|
|
|
|
|
def import_key(self, pk, password=None):
|
|
pubk = keyapi.private_key_to_public_key(pk)
|
|
address_hex = pubk.to_checksum_address()
|
|
address_hex_clean = strip_hex_prefix(address_hex)
|
|
c = self._encrypt(pk.to_bytes(), password)
|
|
s = text('INSERT INTO ethereum (wallet_address_hex, key_ciphertext) VALUES (:a, :c)') #%s, %s)')
|
|
self.db_session.execute(s, {
|
|
'a': address_hex_clean,
|
|
'c': c.decode('utf-8'),
|
|
},
|
|
)
|
|
self.db_session.commit()
|
|
return address_hex
|
|
|
|
|
|
def _encrypt(self, private_key, password):
|
|
f = self._generate_encryption_engine(password)
|
|
return f.encrypt(private_key)
|
|
|
|
|
|
def _generate_encryption_engine(self, password):
|
|
h = sha3.keccak_256()
|
|
h.update(self.symmetric_key)
|
|
if password != None:
|
|
password_bytes = to_bytes(password)
|
|
h.update(password_bytes)
|
|
g = h.digest()
|
|
return Fernet(base64.b64encode(g))
|
|
|
|
|
|
def _decrypt(self, c, password):
|
|
f = self._generate_encryption_engine(password)
|
|
return f.decrypt(c.encode('utf-8'))
|