/* * Copyright (C) 2016-2017 Open Whisper Systems * * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see . */ package org.thoughtcrime.securesms; import android.Manifest; import android.animation.TypeEvaluator; import android.animation.ValueAnimator; import android.annotation.SuppressLint; import android.content.ActivityNotFoundException; import android.content.Context; import android.content.Intent; import android.content.res.Configuration; import android.graphics.Bitmap; import android.graphics.BitmapFactory; import android.graphics.Canvas; import android.graphics.PorterDuff; import android.graphics.drawable.BitmapDrawable; import android.graphics.drawable.ColorDrawable; import android.os.AsyncTask; import android.os.Build; import android.os.Bundle; import android.os.Vibrator; import androidx.annotation.DrawableRes; import androidx.annotation.NonNull; import androidx.fragment.app.Fragment; import androidx.fragment.app.FragmentTransaction; import androidx.appcompat.widget.SwitchCompat; import android.text.Html; import android.text.TextUtils; import android.text.method.LinkMovementMethod; import org.thoughtcrime.securesms.dependencies.ApplicationDependencies; import org.thoughtcrime.securesms.logging.Log; import android.view.ContextMenu; import android.view.ContextMenu.ContextMenuInfo; import android.view.LayoutInflater; import android.view.Menu; import android.view.MenuInflater; import android.view.MenuItem; import android.view.View; import android.view.ViewGroup; import android.view.animation.Animation; import android.view.animation.AnticipateInterpolator; import android.view.animation.OvershootInterpolator; import android.view.animation.ScaleAnimation; import android.widget.CompoundButton; import android.widget.ImageView; import android.widget.TextView; import android.widget.Toast; import org.thoughtcrime.securesms.color.MaterialColor; import org.thoughtcrime.securesms.components.camera.CameraView; import org.thoughtcrime.securesms.crypto.IdentityKeyParcelable; import org.thoughtcrime.securesms.crypto.IdentityKeyUtil; import org.thoughtcrime.securesms.database.DatabaseFactory; import org.thoughtcrime.securesms.database.IdentityDatabase.VerifiedStatus; import org.thoughtcrime.securesms.jobs.MultiDeviceVerifiedUpdateJob; import org.thoughtcrime.securesms.permissions.Permissions; import org.thoughtcrime.securesms.qr.QrCode; import org.thoughtcrime.securesms.qr.ScanListener; import org.thoughtcrime.securesms.qr.ScanningThread; import org.thoughtcrime.securesms.recipients.LiveRecipient; import org.thoughtcrime.securesms.recipients.Recipient; import org.thoughtcrime.securesms.recipients.RecipientId; import org.thoughtcrime.securesms.util.DynamicDarkActionBarTheme; import org.thoughtcrime.securesms.util.DynamicLanguage; import org.thoughtcrime.securesms.util.DynamicTheme; import org.thoughtcrime.securesms.util.FeatureFlags; import org.thoughtcrime.securesms.util.IdentityUtil; import org.thoughtcrime.securesms.util.TextSecurePreferences; import org.thoughtcrime.securesms.util.Util; import org.thoughtcrime.securesms.util.ViewUtil; import org.whispersystems.libsignal.IdentityKey; import org.whispersystems.libsignal.fingerprint.Fingerprint; import org.whispersystems.libsignal.fingerprint.FingerprintParsingException; import org.whispersystems.libsignal.fingerprint.FingerprintVersionMismatchException; import org.whispersystems.libsignal.fingerprint.NumericFingerprintGenerator; import org.whispersystems.signalservice.api.util.UuidUtil; import java.io.UnsupportedEncodingException; import java.nio.charset.Charset; import java.util.Locale; import static org.whispersystems.libsignal.SessionCipher.SESSION_LOCK; /** * Activity for verifying identity keys. * * @author Moxie Marlinspike */ @SuppressLint("StaticFieldLeak") public class VerifyIdentityActivity extends PassphraseRequiredActionBarActivity implements ScanListener, View.OnClickListener { private static final String TAG = VerifyIdentityActivity.class.getSimpleName(); public static final String RECIPIENT_EXTRA = "recipient_id"; public static final String IDENTITY_EXTRA = "recipient_identity"; public static final String VERIFIED_EXTRA = "verified_state"; private final DynamicTheme dynamicTheme = new DynamicDarkActionBarTheme(); private final DynamicLanguage dynamicLanguage = new DynamicLanguage(); private VerifyDisplayFragment displayFragment = new VerifyDisplayFragment(); private VerifyScanFragment scanFragment = new VerifyScanFragment(); @Override public void onPreCreate() { dynamicTheme.onCreate(this); dynamicLanguage.onCreate(this); } @Override protected void onCreate(Bundle state, boolean ready) { getSupportActionBar().setDisplayHomeAsUpEnabled(true); getSupportActionBar().setTitle(R.string.AndroidManifest__verify_safety_number); LiveRecipient recipient = Recipient.live(getIntent().getParcelableExtra(RECIPIENT_EXTRA)); recipient.observe(this, r -> setActionBarNotificationBarColor(r.getColor())); setActionBarNotificationBarColor(recipient.get().getColor()); Bundle extras = new Bundle(); extras.putParcelable(VerifyDisplayFragment.RECIPIENT_ID, getIntent().getParcelableExtra(RECIPIENT_EXTRA)); extras.putParcelable(VerifyDisplayFragment.REMOTE_IDENTITY, getIntent().getParcelableExtra(IDENTITY_EXTRA)); extras.putParcelable(VerifyDisplayFragment.LOCAL_IDENTITY, new IdentityKeyParcelable(IdentityKeyUtil.getIdentityKey(this))); extras.putString(VerifyDisplayFragment.LOCAL_NUMBER, TextSecurePreferences.getLocalNumber(this)); extras.putBoolean(VerifyDisplayFragment.VERIFIED_STATE, getIntent().getBooleanExtra(VERIFIED_EXTRA, false)); scanFragment.setScanListener(this); displayFragment.setClickListener(this); initFragment(android.R.id.content, displayFragment, dynamicLanguage.getCurrentLocale(), extras); } @Override public boolean onOptionsItemSelected(MenuItem item) { switch (item.getItemId()) { case android.R.id.home: finish(); return true; } return false; } @Override public void onQrDataFound(final String data) { Util.runOnMain(() -> { ((Vibrator)getSystemService(Context.VIBRATOR_SERVICE)).vibrate(50); getSupportFragmentManager().popBackStack(); displayFragment.setScannedFingerprint(data); }); } @Override public void onClick(View v) { Permissions.with(this) .request(Manifest.permission.CAMERA) .ifNecessary() .withPermanentDenialDialog(getString(R.string.VerifyIdentityActivity_signal_needs_the_camera_permission_in_order_to_scan_a_qr_code_but_it_has_been_permanently_denied)) .onAllGranted(() -> { FragmentTransaction transaction = getSupportFragmentManager().beginTransaction(); transaction.setCustomAnimations(R.anim.slide_from_top, R.anim.slide_to_bottom, R.anim.slide_from_bottom, R.anim.slide_to_top); transaction.replace(android.R.id.content, scanFragment) .addToBackStack(null) .commitAllowingStateLoss(); }) .onAnyDenied(() -> Toast.makeText(this, R.string.VerifyIdentityActivity_unable_to_scan_qr_code_without_camera_permission, Toast.LENGTH_LONG).show()) .execute(); } @Override public void onRequestPermissionsResult(int requestCode, @NonNull String[] permissions, @NonNull int[] grantResults) { Permissions.onRequestPermissionsResult(this, requestCode, permissions, grantResults); } private void setActionBarNotificationBarColor(MaterialColor color) { getSupportActionBar().setBackgroundDrawable(new ColorDrawable(color.toActionBarColor(this))); if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.LOLLIPOP) { getWindow().setStatusBarColor(color.toStatusBarColor(this)); } } public static class VerifyDisplayFragment extends Fragment implements CompoundButton.OnCheckedChangeListener { public static final String RECIPIENT_ID = "recipient_id"; public static final String REMOTE_NUMBER = "remote_number"; public static final String REMOTE_IDENTITY = "remote_identity"; public static final String LOCAL_IDENTITY = "local_identity"; public static final String LOCAL_NUMBER = "local_number"; public static final String VERIFIED_STATE = "verified_state"; private LiveRecipient recipient; private IdentityKey localIdentity; private IdentityKey remoteIdentity; private Fingerprint fingerprint; private View container; private View numbersContainer; private ImageView qrCode; private ImageView qrVerified; private TextView tapLabel; private TextView description; private View.OnClickListener clickListener; private SwitchCompat verified; private TextView[] codes = new TextView[12]; private boolean animateSuccessOnDraw = false; private boolean animateFailureOnDraw = false; @Override public View onCreateView(@NonNull LayoutInflater inflater, ViewGroup viewGroup, Bundle bundle) { this.container = ViewUtil.inflate(inflater, viewGroup, R.layout.verify_display_fragment); this.numbersContainer = ViewUtil.findById(container, R.id.number_table); this.qrCode = ViewUtil.findById(container, R.id.qr_code); this.verified = ViewUtil.findById(container, R.id.verified_switch); this.qrVerified = ViewUtil.findById(container, R.id.qr_verified); this.description = ViewUtil.findById(container, R.id.description); this.tapLabel = ViewUtil.findById(container, R.id.tap_label); this.codes[0] = ViewUtil.findById(container, R.id.code_first); this.codes[1] = ViewUtil.findById(container, R.id.code_second); this.codes[2] = ViewUtil.findById(container, R.id.code_third); this.codes[3] = ViewUtil.findById(container, R.id.code_fourth); this.codes[4] = ViewUtil.findById(container, R.id.code_fifth); this.codes[5] = ViewUtil.findById(container, R.id.code_sixth); this.codes[6] = ViewUtil.findById(container, R.id.code_seventh); this.codes[7] = ViewUtil.findById(container, R.id.code_eighth); this.codes[8] = ViewUtil.findById(container, R.id.code_ninth); this.codes[9] = ViewUtil.findById(container, R.id.code_tenth); this.codes[10] = ViewUtil.findById(container, R.id.code_eleventh); this.codes[11] = ViewUtil.findById(container, R.id.code_twelth); this.qrCode.setOnClickListener(clickListener); this.registerForContextMenu(numbersContainer); this.verified.setChecked(getArguments().getBoolean(VERIFIED_STATE, false)); this.verified.setOnCheckedChangeListener(this); return container; } @Override public void onCreate(Bundle bundle) { super.onCreate(bundle); RecipientId recipientId = getArguments().getParcelable(RECIPIENT_ID); IdentityKeyParcelable localIdentityParcelable = getArguments().getParcelable(LOCAL_IDENTITY); IdentityKeyParcelable remoteIdentityParcelable = getArguments().getParcelable(REMOTE_IDENTITY); if (recipientId == null) throw new AssertionError("RecipientId required"); if (localIdentityParcelable == null) throw new AssertionError("local identity required"); if (remoteIdentityParcelable == null) throw new AssertionError("remote identity required"); this.localIdentity = localIdentityParcelable.get(); this.recipient = Recipient.live(recipientId); this.remoteIdentity = remoteIdentityParcelable.get(); int version; byte[] localId; byte[] remoteId; if (FeatureFlags.UUIDS && recipient.resolve().getUuid().isPresent()) { Log.i(TAG, "Using UUID (version 2)."); version = 2; localId = UuidUtil.toByteArray(TextSecurePreferences.getLocalUuid(requireContext())); remoteId = UuidUtil.toByteArray(recipient.resolve().getUuid().get()); } else { Log.i(TAG, "Using E164 (version 1)."); version = 1; localId = TextSecurePreferences.getLocalNumber(requireContext()).getBytes(); remoteId = recipient.resolve().requireE164().getBytes(); } this.recipient.observe(this, this::setRecipientText); new AsyncTask() { @Override protected Fingerprint doInBackground(Void... params) { return new NumericFingerprintGenerator(5200).createFor(version, localId, localIdentity, remoteId, remoteIdentity); } @Override protected void onPostExecute(Fingerprint fingerprint) { VerifyDisplayFragment.this.fingerprint = fingerprint; setFingerprintViews(fingerprint, true); getActivity().supportInvalidateOptionsMenu(); } }.executeOnExecutor(AsyncTask.THREAD_POOL_EXECUTOR); setHasOptionsMenu(true); } @Override public void onResume() { super.onResume(); setRecipientText(recipient.get()); if (fingerprint != null) { setFingerprintViews(fingerprint, false); } if (animateSuccessOnDraw) { animateSuccessOnDraw = false; animateVerifiedSuccess(); } else if (animateFailureOnDraw) { animateFailureOnDraw = false; animateVerifiedFailure(); } } @Override public void onCreateContextMenu(ContextMenu menu, View view, ContextMenuInfo menuInfo) { super.onCreateContextMenu(menu, view, menuInfo); if (fingerprint != null) { MenuInflater inflater = getActivity().getMenuInflater(); inflater.inflate(R.menu.verify_display_fragment_context_menu, menu); } } @Override public boolean onContextItemSelected(MenuItem item) { if (fingerprint == null) return super.onContextItemSelected(item); switch (item.getItemId()) { case R.id.menu_copy: handleCopyToClipboard(fingerprint, codes.length); return true; case R.id.menu_compare: handleCompareWithClipboard(fingerprint); return true; default: return super.onContextItemSelected(item); } } @Override public void onCreateOptionsMenu(Menu menu, MenuInflater inflater) { super.onCreateOptionsMenu(menu, inflater); if (fingerprint != null) { inflater.inflate(R.menu.verify_identity, menu); } } @Override public boolean onOptionsItemSelected(MenuItem item) { switch (item.getItemId()) { case R.id.verify_identity__share: handleShare(fingerprint, codes.length); return true; } return false; } public void setScannedFingerprint(String scanned) { try { if (fingerprint.getScannableFingerprint().compareTo(scanned.getBytes("ISO-8859-1"))) { this.animateSuccessOnDraw = true; } else { this.animateFailureOnDraw = true; } } catch (FingerprintVersionMismatchException e) { Log.w(TAG, e); if (e.getOurVersion() < e.getTheirVersion()) { Toast.makeText(getActivity(), R.string.VerifyIdentityActivity_your_contact_is_running_a_newer_version_of_Signal, Toast.LENGTH_LONG).show(); } else { Toast.makeText(getActivity(), R.string.VerifyIdentityActivity_your_contact_is_running_an_old_version_of_signal, Toast.LENGTH_LONG).show(); } } catch (FingerprintParsingException e) { Log.w(TAG, e); Toast.makeText(getActivity(), R.string.VerifyIdentityActivity_the_scanned_qr_code_is_not_a_correctly_formatted_safety_number, Toast.LENGTH_LONG).show(); } catch (UnsupportedEncodingException e) { throw new AssertionError(e); } } public void setClickListener(View.OnClickListener listener) { this.clickListener = listener; } private @NonNull String getFormattedSafetyNumbers(@NonNull Fingerprint fingerprint, int segmentCount) { String[] segments = getSegments(fingerprint, segmentCount); StringBuilder result = new StringBuilder(); for (int i = 0; i < segments.length; i++) { result.append(segments[i]); if (i != segments.length - 1) { if (((i+1) % 4) == 0) result.append('\n'); else result.append(' '); } } return result.toString(); } private void handleCopyToClipboard(Fingerprint fingerprint, int segmentCount) { Util.writeTextToClipboard(getActivity(), getFormattedSafetyNumbers(fingerprint, segmentCount)); } private void handleCompareWithClipboard(Fingerprint fingerprint) { String clipboardData = Util.readTextFromClipboard(getActivity()); if (clipboardData == null) { Toast.makeText(getActivity(), R.string.VerifyIdentityActivity_no_safety_number_to_compare_was_found_in_the_clipboard, Toast.LENGTH_LONG).show(); return; } String numericClipboardData = clipboardData.replaceAll("\\D", ""); if (TextUtils.isEmpty(numericClipboardData) || numericClipboardData.length() != 60) { Toast.makeText(getActivity(), R.string.VerifyIdentityActivity_no_safety_number_to_compare_was_found_in_the_clipboard, Toast.LENGTH_LONG).show(); return; } if (fingerprint.getDisplayableFingerprint().getDisplayText().equals(numericClipboardData)) { animateVerifiedSuccess(); } else { animateVerifiedFailure(); } } private void handleShare(@NonNull Fingerprint fingerprint, int segmentCount) { String shareString = getString(R.string.VerifyIdentityActivity_our_signal_safety_number) + "\n" + getFormattedSafetyNumbers(fingerprint, segmentCount) + "\n"; Intent intent = new Intent(); intent.setAction(Intent.ACTION_SEND); intent.putExtra(Intent.EXTRA_TEXT, shareString); intent.setType("text/plain"); try { startActivity(Intent.createChooser(intent, getString(R.string.VerifyIdentityActivity_share_safety_number_via))); } catch (ActivityNotFoundException e) { Toast.makeText(getActivity(), R.string.VerifyIdentityActivity_no_app_to_share_to, Toast.LENGTH_LONG).show(); } } private void setRecipientText(Recipient recipient) { description.setText(Html.fromHtml(String.format(getActivity().getString(R.string.verify_display_fragment__if_you_wish_to_verify_the_security_of_your_end_to_end_encryption_with_s), recipient.toShortString(getContext())))); description.setMovementMethod(LinkMovementMethod.getInstance()); } private void setFingerprintViews(Fingerprint fingerprint, boolean animate) { String[] segments = getSegments(fingerprint, codes.length); for (int i=0;i() { public Integer evaluate(float fraction, Integer startValue, Integer endValue) { return Math.round(startValue + (endValue - startValue) * fraction); } }); valueAnimator.setDuration(1000); valueAnimator.start(); } private String[] getSegments(Fingerprint fingerprint, int segmentCount) { String[] segments = new String[segmentCount]; String digits = fingerprint.getDisplayableFingerprint().getDisplayText(); int partSize = digits.length() / segmentCount; for (int i=0;i() { @Override protected Void doInBackground(Recipient... params) { synchronized (SESSION_LOCK) { if (isChecked) { Log.i(TAG, "Saving identity: " + params[0].getId()); DatabaseFactory.getIdentityDatabase(getActivity()) .saveIdentity(params[0].getId(), remoteIdentity, VerifiedStatus.VERIFIED, false, System.currentTimeMillis(), true); } else { DatabaseFactory.getIdentityDatabase(getActivity()) .setVerified(params[0].getId(), remoteIdentity, VerifiedStatus.DEFAULT); } ApplicationDependencies.getJobManager() .add(new MultiDeviceVerifiedUpdateJob(recipient.getId(), remoteIdentity, isChecked ? VerifiedStatus.VERIFIED : VerifiedStatus.DEFAULT)); IdentityUtil.markIdentityVerified(getActivity(), recipient.get(), isChecked, false); } return null; } }.executeOnExecutor(AsyncTask.THREAD_POOL_EXECUTOR, recipient.get()); } } public static class VerifyScanFragment extends Fragment { private View container; private CameraView cameraView; private ScanningThread scanningThread; private ScanListener scanListener; public View onCreateView(@NonNull LayoutInflater inflater, ViewGroup viewGroup, Bundle bundle) { this.container = ViewUtil.inflate(inflater, viewGroup, R.layout.verify_scan_fragment); this.cameraView = ViewUtil.findById(container, R.id.scanner); return container; } @Override public void onResume() { super.onResume(); this.scanningThread = new ScanningThread(); this.scanningThread.setScanListener(scanListener); this.scanningThread.setCharacterSet("ISO-8859-1"); this.cameraView.onResume(); this.cameraView.setPreviewCallback(scanningThread); this.scanningThread.start(); } @Override public void onPause() { super.onPause(); this.cameraView.onPause(); this.scanningThread.stopScanning(); } @Override public void onConfigurationChanged(Configuration newConfiguration) { super.onConfigurationChanged(newConfiguration); this.cameraView.onPause(); this.cameraView.onResume(); this.cameraView.setPreviewCallback(scanningThread); } public void setScanListener(ScanListener listener) { if (this.scanningThread != null) scanningThread.setScanListener(listener); this.scanListener = listener; } } }